last executing test programs: 5.983738829s ago: executing program 3 (id=492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20044804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 3.477248069s ago: executing program 3 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c29, 0x80, 0x0, 0x18000000}) io_uring_enter(r1, 0x0, 0x2, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xbc9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 3.476759969s ago: executing program 4 (id=499): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) unshare(0x22020600) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000004c0)=0x638) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e21, 0x4, @mcast2, 0x1}}, {{0xa, 0x4e22, 0x3, @mcast1, 0x3ff}}}, 0x108) r4 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) listen(r4, 0xb) sendmmsg(0xffffffffffffffff, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8014) socket$nl_route(0x10, 0x3, 0x0) 3.476044939s ago: executing program 2 (id=500): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x200000, 0x81}) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x400000, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000400000001000000090000004c0003800800030000000004140002007663616e3000000000000000000039f4f1b65f"], 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x7e7b, 0x0) 2.634488576s ago: executing program 4 (id=503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 2.533109139s ago: executing program 3 (id=504): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x112, 0x880, 0x0, 0x0) 2.413074793s ago: executing program 2 (id=506): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') write$P9_RLERROR(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getpriority(0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x0, 0x0, 0x80, 0x0, 0x5, 0x40403, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x17}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 2.341948005s ago: executing program 4 (id=507): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, 0x0, 0x24000040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) pipe2(0x0, 0x880) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2.307357696s ago: executing program 3 (id=508): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x9}], 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r2, 0x5, 0x71, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) fchdir(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000140)='1', 0xf}], 0x1) 2.251069228s ago: executing program 0 (id=509): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f1, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x10c80, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/sctp\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) 2.241284298s ago: executing program 4 (id=510): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.691992146s ago: executing program 0 (id=511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0xfffa, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x6, 0x0, 0x5cf}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.691707356s ago: executing program 1 (id=512): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.691450606s ago: executing program 4 (id=513): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, 0x140a, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x20}}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x18}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}}, 0x400c800) r4 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x8000000, 'macvtap0\x00', {0x1}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) 1.652638907s ago: executing program 1 (id=514): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) unshare(0x22020600) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000004c0)=0x638) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e21, 0x4, @mcast2, 0x1}}, {{0xa, 0x4e22, 0x3, @mcast1, 0x3ff}}}, 0x108) r4 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) listen(r4, 0xb) sendmmsg(0xffffffffffffffff, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8014) socket$nl_route(0x10, 0x3, 0x0) 1.54841354s ago: executing program 0 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c29, 0x80, 0x0, 0x18000000}) io_uring_enter(r1, 0x0, 0x2, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xbc9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.54135158s ago: executing program 1 (id=516): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x45a9, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa2, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000001020102"], 0x40}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x8000002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)={[{@fat=@dos1xfloppy}, {@shortname_lower}, {@rodir}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@tz_utc}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}]}, 0x0, 0x284, &(0x7f0000000700)="$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") 1.335710387s ago: executing program 2 (id=517): epoll_create(0x4) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.127911444s ago: executing program 3 (id=519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.072711685s ago: executing program 2 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) accept(0xffffffffffffffff, 0x0, 0x0) 830.214554ms ago: executing program 2 (id=521): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(0xffffffffffffffff, 0x0, 0x101500) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8971, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) 734.503246ms ago: executing program 3 (id=522): socket$netlink(0x10, 0x3, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x7, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) clock_adjtime(0x0, &(0x7f0000000100)={0x105f0827e8, 0x400, 0x100000000000, 0x0, 0x858, 0x7, 0x0, 0xa, 0x2, 0x8000000000000001, 0xde1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x401, 0x3, 0x0, 0x0, 0x10}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0) syz_emit_ethernet(0xc9, &(0x7f00000013c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a8240081003500884800006479db29837773e2d87b45c6f326f3b36fc62c8241dd45eee5ffb49a3ba28cca0b8143655010214dbd8a15d957a517e549112a03cac6ef4c553f2d2d7793b3ade88960cf432e82c847273c28fa88664a5f5427b6c9fa5a994aeafd197f6b2a464c2f4b74f3b1da6b58fdbda7ffffe63d1a50c328bcb87d528e8e084a0cbbbc950d41c5a5e0f84fda8142bbe3db41f7c085b3b757d2327e81cdfd6574ba74326f474fc249b7862991c1d39e195104ee20bf7b933d9fdb976fb0ec86079f3a94dc88773a0ab7703239e48a068f99458c3a6496e14234f965599f"], &(0x7f0000001280)={0x0, 0x2, [0xe9, 0x8a1, 0x826, 0xe81]}) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x10, 0x9}, {0xf, 0xe}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x3, 0x2) fchdir(0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @random="0001f3c2f336", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote}}}}, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/uts\x00') 734.267416ms ago: executing program 4 (id=523): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r1, &(0x7f0000000ac0), 0x0, 0x1a) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000"], 0xfc, 0x800) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003}, 0x38) 602.705561ms ago: executing program 0 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000300"/13], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb, r0}, 0x38) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, 0x0) syz_open_procfs(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x22) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={&(0x7f00000004c0), 0xe}, 0x108, 0x0, 0x4, 0x7, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, r2, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x20000874) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket(0x23, 0x4, 0xf) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, 0x0, 0xfc40) getsockopt(r4, 0x5, 0x0, 0x0, &(0x7f0000000000)) 404.876207ms ago: executing program 0 (id=525): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) gettid() read(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{r1, r2+60000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$urandom(0xffffffffffffff9c, 0x0, 0x82240, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r5}, 0x38) 307.19099ms ago: executing program 0 (id=526): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 256.343821ms ago: executing program 2 (id=527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003f80)='net_prio.prioidx\x00', 0x275a, 0x0) fcntl$setsig(r0, 0xa, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26, 0x0, 0x1, 0x7}, 0x28) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) recvfrom(r0, 0x0, 0x0, 0x10001, &(0x7f0000000140)=@x25, 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000fee000)=0x3fa, 0x4) socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x33, 0x701, 0x70bd2c, 0x25dfdbfe, {0xd}}, 0x14}}, 0x24044094) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) timer_delete(0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x0) 195.213343ms ago: executing program 1 (id=528): r0 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'ipvlan0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "017ff2905538a2a5840e0ff8bb1be12878710be800", "962647ebbf5370689fcfcf0ccd4965dc710f62de594c13a555eb6ae877ceb570", "171895c1b4a088a045b0f41d6c50186cf577003b98c91f00", "a1137395641439389664a973e84dde3951371f7a6e90a9136252d9927b2bbba9", "fee2fd387039d2f5e1dca717d515de3bca6b382cd9a7607e27393f92e2e332a9", "4db967f8aecf3d4cb5ac54b3", 0x80000001, 0x3, 0x2, 0x9, 0x5}}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204000, &(0x7f0000000600), 0x1, 0x592, &(0x7f00000014c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740), 0x2000000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) accept(r2, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x10a920, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="660a0000feffffff7b112e0000000000850000000900000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f00000007c0)={0x0, 0x2, 0x569, 0x5, 0x200, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r3, &(0x7f0000000b00)={0x3, 0x5}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000540)={0x6, &(0x7f0000000200)=[{0x7, 0x9, 0x3, 0xea6c}, {0x67e, 0x3, 0x2, 0x5}, {0x5, 0x2, 0x4, 0x2}, {0x9, 0xd4, 0x7, 0x86b}, {0x1, 0x1, 0x8, 0x782b}, {0x3, 0xf, 0x81, 0x4}]}) inotify_add_watch(r1, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) 47.833328ms ago: executing program 1 (id=529): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) socket(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 1 (id=530): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x7, 0x0, 0xf9, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1943}, 0x3a, 0x9, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x100000}, 0x0, 0xfffffffffdffffff, r3, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x48800) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x50) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x84, &(0x7f0000000000), 0x90) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) kernel console output (not intermixed with test programs): d [ 35.865730][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.873179][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.899863][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.925221][ T3295] hsr_slave_0: entered promiscuous mode [ 35.931901][ T3295] hsr_slave_1: entered promiscuous mode [ 35.938302][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.945464][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.971548][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.983265][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.990413][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.016668][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.029759][ T3302] hsr_slave_0: entered promiscuous mode [ 36.036256][ T3302] hsr_slave_1: entered promiscuous mode [ 36.042262][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 36.048011][ T3302] Cannot create hsr debugfs directory [ 36.053885][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.060944][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.086990][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.098445][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.105478][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.131858][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.143034][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.150084][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.176081][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.246810][ T3301] hsr_slave_0: entered promiscuous mode [ 36.253112][ T3301] hsr_slave_1: entered promiscuous mode [ 36.259047][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 36.264863][ T3301] Cannot create hsr debugfs directory [ 36.272815][ T3297] hsr_slave_0: entered promiscuous mode [ 36.279171][ T3297] hsr_slave_1: entered promiscuous mode [ 36.285720][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 36.291747][ T3297] Cannot create hsr debugfs directory [ 36.315072][ T3300] hsr_slave_0: entered promiscuous mode [ 36.322240][ T3300] hsr_slave_1: entered promiscuous mode [ 36.328372][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 36.334404][ T3300] Cannot create hsr debugfs directory [ 36.569040][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.578190][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.586293][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.595298][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.603456][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.612488][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.623715][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.632617][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.658561][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.668127][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.676479][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.685535][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.694499][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.703674][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.711540][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.721029][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.758330][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.767355][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.775491][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.784907][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.793739][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.803013][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.810812][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.819690][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.852122][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.862254][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.876394][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.885571][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.893756][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.903081][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.911072][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.920995][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.963996][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.973206][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.982030][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.992332][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.000985][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.010172][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.018092][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.027510][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.071025][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.094079][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.119717][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.138896][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.146246][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.155717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.163679][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.182843][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.195597][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.211605][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.220863][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.237436][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.250873][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.258906][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.272430][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.281289][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.293310][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.314739][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.323137][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.352115][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.364416][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.373105][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.385505][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.393252][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.406303][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.417846][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.452899][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.486599][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.516776][ T1631] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.524693][ T1631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.536823][ T1631] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.544521][ T1631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.780557][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.826276][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.885113][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.971384][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.028150][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.073495][ T3295] veth0_vlan: entered promiscuous mode [ 38.093404][ T3295] veth1_vlan: entered promiscuous mode [ 38.131823][ T3297] veth0_vlan: entered promiscuous mode [ 38.155791][ T3295] veth0_macvtap: entered promiscuous mode [ 38.172938][ T3297] veth1_vlan: entered promiscuous mode [ 38.189448][ T3295] veth1_macvtap: entered promiscuous mode [ 38.222539][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.233209][ T3300] veth0_vlan: entered promiscuous mode [ 38.250576][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.272779][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.282034][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.293318][ T3297] veth0_macvtap: entered promiscuous mode [ 38.301947][ T3297] veth1_macvtap: entered promiscuous mode [ 38.311001][ T3300] veth1_vlan: entered promiscuous mode [ 38.317278][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.326796][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.346993][ T3301] veth0_vlan: entered promiscuous mode [ 38.362709][ T3301] veth1_vlan: entered promiscuous mode [ 38.372687][ T3302] veth0_vlan: entered promiscuous mode [ 38.383988][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.393542][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.415064][ T3302] veth1_vlan: entered promiscuous mode [ 38.421624][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.421644][ T28] audit: type=1400 audit(1781827033.499:146): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.YVUaUv/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.458236][ T28] audit: type=1400 audit(1781827033.499:147): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.487240][ T28] audit: type=1400 audit(1781827033.499:148): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.YVUaUv/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.501496][ T3300] veth0_macvtap: entered promiscuous mode [ 38.524281][ T3295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.528351][ T28] audit: type=1400 audit(1781827033.499:149): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.543292][ T3302] veth0_macvtap: entered promiscuous mode [ 38.567376][ T28] audit: type=1400 audit(1781827033.499:150): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.YVUaUv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.601093][ T28] audit: type=1400 audit(1781827033.499:151): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/root/syzkaller.YVUaUv/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.618734][ T3300] veth1_macvtap: entered promiscuous mode [ 38.634442][ T28] audit: type=1400 audit(1781827033.499:152): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.655050][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.658814][ T28] audit: type=1400 audit(1781827033.529:153): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.688952][ T3302] veth1_macvtap: entered promiscuous mode [ 38.697895][ T28] audit: type=1400 audit(1781827033.529:154): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="gadgetfs" ino=4805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.728134][ T28] audit: type=1400 audit(1781827033.769:155): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.755539][ T3301] veth0_macvtap: entered promiscuous mode [ 38.763097][ T363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.772708][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.791971][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.805451][ T3301] veth1_macvtap: entered promiscuous mode [ 38.815832][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.825892][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.864614][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.879121][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.896274][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.906011][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.915666][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.944396][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.955987][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.973430][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.992160][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.004797][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.058432][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.080423][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.119269][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.139876][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.182404][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.217943][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.385519][ T3512] tc action pedit 'at' offset 6 out of bounds [ 39.391988][ T3512] tc action pedit 'at' offset 6 out of bounds [ 39.398380][ T3512] tc action pedit 'at' offset 6 out of bounds [ 39.404900][ T3512] tc action pedit 'at' offset 6 out of bounds [ 39.411067][ T3512] tc action pedit 'at' offset 6 out of bounds [ 39.417228][ T3512] tc action pedit 'at' offset 6 out of bounds [ 39.423376][ T3512] tc action pedit 'at' offset 6 out of bounds [ 39.429571][ T3512] tc action pedit 'at' offset 6 out of bounds [ 39.435990][ T3512] tc action pedit 'at' offset 6 out of bounds [ 39.443226][ T3512] tc action pedit 'at' offset 6 out of bounds [ 39.451419][ T3512] TC_ACT_REPEAT abuse ? [ 39.505355][ T3515] syz.2.3 (3515) used greatest stack depth: 10880 bytes left [ 39.529112][ T3518] syzkaller0: entered promiscuous mode [ 39.538773][ T3518] syzkaller0: entered allmulticast mode [ 39.588862][ T3518] Zero length message leads to an empty skb [ 40.647876][ T3548] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.696662][ T3548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 41.526775][ T3541] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.542372][ T3548] syz.2.14 (3548) used greatest stack depth: 9664 bytes left [ 42.606845][ T3541] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.796677][ T3541] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.888246][ T3541] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.992876][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.104563][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.211924][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.232033][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.385031][ T3566] loop3: detected capacity change from 0 to 512 [ 43.392246][ T3561] syzkaller0: entered promiscuous mode [ 43.401713][ T3561] syzkaller0: entered allmulticast mode [ 43.408087][ T3566] ======================================================= [ 43.408087][ T3566] WARNING: The mand mount option has been deprecated and [ 43.408087][ T3566] and is ignored by this kernel. Remove the mand [ 43.408087][ T3566] option from the mount to silence this warning. [ 43.408087][ T3566] ======================================================= [ 43.469785][ T3566] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.484277][ T3566] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.775470][ T3569] loop1: detected capacity change from 0 to 1024 [ 43.848773][ T3569] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 43.989287][ T3569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.046754][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 44.046775][ T28] audit: type=1400 audit(1781827039.079:215): avc: denied { mount } for pid=3562 comm="syz.1.20" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.429853][ T3566] EXT4-fs (loop3): 1 truncate cleaned up [ 44.765434][ T28] audit: type=1400 audit(1781827039.169:216): avc: denied { setattr } for pid=3562 comm="syz.1.20" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.794515][ T3566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.847068][ T28] audit: type=1400 audit(1781827039.189:217): avc: denied { write } for pid=3562 comm="syz.1.20" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.022347][ T28] audit: type=1400 audit(1781827039.189:218): avc: denied { open } for pid=3562 comm="syz.1.20" path="/3/file1/file0/file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.143772][ T28] audit: type=1400 audit(1781827039.899:219): avc: denied { create } for pid=3579 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.210516][ T28] audit: type=1400 audit(1781827039.909:220): avc: denied { setopt } for pid=3579 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.232949][ T28] audit: type=1400 audit(1781827039.909:221): avc: denied { bind } for pid=3579 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.919521][ T28] audit: type=1400 audit(1781827039.959:222): avc: denied { name_bind } for pid=3579 comm="syz.2.22" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.200731][ T28] audit: type=1400 audit(1781827039.969:223): avc: denied { node_bind } for pid=3579 comm="syz.2.22" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.305998][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.362426][ T28] audit: type=1400 audit(1781827040.059:224): avc: denied { write } for pid=3565 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.534751][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.595464][ T3602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3602 comm=syz.4.27 [ 47.500856][ T3629] pimreg: entered allmulticast mode [ 47.550673][ T3633] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.560760][ T3629] pimreg: left allmulticast mode [ 47.580121][ T3633] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 47.586819][ T3633] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.601342][ T3633] vhci_hcd vhci_hcd.0: Device attached [ 47.673444][ T3634] vhci_hcd: connection closed [ 47.673723][ T3615] vhci_hcd vhci_hcd.2: stop threads [ 47.706824][ T3615] vhci_hcd vhci_hcd.2: release socket [ 47.726211][ T3615] vhci_hcd vhci_hcd.2: disconnect device [ 47.770149][ T284] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 49.015505][ T3658] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 49.056264][ T3653] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 49.886374][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 49.886397][ T28] audit: type=1400 audit(1781827044.959:251): avc: denied { write } for pid=3665 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.007200][ T3669] tipc: Started in network mode [ 50.013721][ T3669] tipc: Node identity fa3ea6c1db85, cluster identity 4711 [ 50.021878][ T3669] tipc: Enabled bearer , priority 0 [ 50.030727][ T3669] syzkaller0: entered promiscuous mode [ 50.037814][ T28] audit: type=1400 audit(1781827045.109:252): avc: denied { ioctl } for pid=3668 comm="syz.0.41" path="socket:[5107]" dev="sockfs" ino=5107 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.086502][ T3669] syzkaller0: entered allmulticast mode [ 50.103578][ T3672] netlink: 'syz.4.42': attribute type 4 has an invalid length. [ 50.134269][ T3669] tipc: Resetting bearer [ 50.151530][ T28] audit: type=1400 audit(1781827045.169:253): avc: denied { map_read map_write } for pid=3671 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.176287][ T3672] netlink: 'syz.4.42': attribute type 4 has an invalid length. [ 50.186593][ T3668] tipc: Resetting bearer [ 50.202455][ T3615] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 50.232842][ T3668] tipc: Disabling bearer [ 50.271978][ T3677] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 50.279930][ T28] audit: type=1400 audit(1781827045.349:254): avc: denied { read write } for pid=3676 comm="syz.3.44" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.304454][ T28] audit: type=1400 audit(1781827045.349:255): avc: denied { open } for pid=3676 comm="syz.3.44" path="/dev/qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.332443][ T3672] netlink: 'syz.4.42': attribute type 4 has an invalid length. [ 51.221323][ T28] audit: type=1400 audit(1781827046.249:256): avc: denied { write } for pid=3685 comm="syz.4.47" name="if_inet6" dev="proc" ino=4026532578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 51.267770][ T28] audit: type=1400 audit(1781827046.269:257): avc: denied { setopt } for pid=3691 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.299322][ T3675] loop1: detected capacity change from 0 to 512 [ 51.302990][ T3689] batman_adv: batadv0: Adding interface: dummy0 [ 51.326840][ T28] audit: type=1400 audit(1781827046.339:258): avc: denied { append } for pid=3691 comm="syz.3.49" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.367013][ T3689] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.394778][ T28] audit: type=1400 audit(1781827046.469:259): avc: denied { ioctl } for pid=3685 comm="syz.4.47" path="socket:[5400]" dev="sockfs" ino=5400 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.467292][ T3675] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.507378][ T3689] batman_adv: batadv0: Interface activated: dummy0 [ 51.673847][ T3696] loop2: detected capacity change from 0 to 512 [ 51.699508][ T3686] batadv0: mtu less than device minimum [ 51.707988][ T3686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.720399][ T3686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.732644][ T3686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.745700][ T3686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.757324][ T3686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.769491][ T3686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.782704][ T3686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.796962][ T3686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.798181][ T3696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.810057][ T3686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 51.845580][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.988245][ T3675] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.304008][ T3696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.552418][ T3696] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.696780][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.720545][ T3717] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.50: resize_inode disabled but reserved GDT blocks non-zero [ 52.809791][ T3720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 52.854271][ T28] audit: type=1400 audit(1781827047.929:260): avc: denied { create } for pid=3721 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.927294][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.434052][ T3742] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.443069][ T3742] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.611667][ T3742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.629833][ T3742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.837604][ T3754] loop3: detected capacity change from 0 to 512 [ 53.903982][ T3754] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.62: bg 0: block 169: padding at end of block bitmap is not set [ 53.936815][ T3754] loop3: lost filesystem error report for type 5 error -117 [ 53.938303][ T3754] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.62: Failed to acquire dquot type 0 [ 53.946187][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 53.946231][ C1] EXT4-fs (loop3): initial error at time 1781827049: ext4_validate_block_bitmap:441 [ 53.946258][ C1] EXT4-fs (loop3): last error at time 1781827049: ext4_validate_block_bitmap:441 [ 53.987348][ T3754] loop3: lost filesystem error report for type 5 error -117 [ 54.012049][ T3754] EXT4-fs (loop3): 1 truncate cleaned up [ 54.102418][ T3763] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 54.129345][ T3754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.144172][ T3616] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.168383][ T3616] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.244996][ T3616] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.294487][ T3754] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.328339][ T3616] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.681309][ T3754] syz.3.62 (3754) used greatest stack depth: 9568 bytes left [ 54.693739][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.705352][ T3774] netlink: 165 bytes leftover after parsing attributes in process `syz.4.66'. [ 54.739589][ T3769] loop2: detected capacity change from 0 to 2048 [ 54.787010][ T3769] Alternate GPT is invalid, using primary GPT. [ 54.793707][ T3769] loop2: p1 p2 p3 [ 54.830801][ T3769] SELinux: failed to load policy [ 55.060108][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 55.060143][ T28] audit: type=1326 audit(1781827049.969:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3760 comm="syz.0.63" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5094eece59 code=0x7ffc0000 [ 55.275552][ T28] audit: type=1400 audit(1781827050.069:347): avc: denied { read write } for pid=3780 comm="syz.3.69" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 55.505394][ T28] audit: type=1400 audit(1781827050.069:348): avc: denied { open } for pid=3780 comm="syz.3.69" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 55.641319][ T28] audit: type=1326 audit(1781827050.189:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.1.70" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 55.702846][ T28] audit: type=1326 audit(1781827050.189:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.1.70" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 55.729367][ T28] audit: type=1326 audit(1781827050.189:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.1.70" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 55.757627][ T28] audit: type=1326 audit(1781827050.199:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.1.70" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 55.786647][ T28] audit: type=1326 audit(1781827050.199:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.1.70" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 55.859728][ T3795] syzkaller0: entered promiscuous mode [ 55.868508][ T3788] loop2: detected capacity change from 0 to 512 [ 55.879322][ T3795] syzkaller0: entered allmulticast mode [ 55.893623][ T28] audit: type=1326 audit(1781827050.219:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.1.70" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 55.960108][ T3795] tipc: Started in network mode [ 55.982908][ T3795] tipc: Node identity 5eab28d68311, cluster identity 4711 [ 55.992678][ T3798] usb usb7: usbfs: process 3798 (syz.0.75) did not claim interface 0 before use [ 56.013886][ T3795] tipc: Enabled bearer , priority 0 [ 56.014896][ T28] audit: type=1326 audit(1781827050.219:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3782 comm="syz.1.70" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 56.047651][ T3792] tipc: Resetting bearer [ 56.089351][ T3792] tipc: Disabling bearer [ 56.107718][ T3800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3800 comm=syz.1.76 [ 56.351292][ T3814] loop0: detected capacity change from 0 to 164 [ 56.354441][ T3812] loop1: detected capacity change from 0 to 512 [ 56.374529][ T3814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.396747][ T3812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.437166][ T3814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.450589][ T3812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 56.465774][ T3814] rock: directory entry would overflow storage [ 56.474812][ T3812] System zones: 1-12 [ 56.485376][ T3814] rock: sig=0x4f50, size=4, remaining=3 [ 56.498600][ T3812] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.516662][ T3814] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 56.537456][ T3812] EXT4-fs (loop1): 1 truncate cleaned up [ 56.546829][ T3820] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.551419][ T3812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.572389][ T3820] Symlink component flag not implemented [ 56.670431][ T3824] loop2: detected capacity change from 0 to 512 [ 56.685209][ T3824] ext4: Unknown parameter 'obj_role' [ 56.731854][ T3827] netlink: 'syz.3.85': attribute type 9 has an invalid length. [ 56.746213][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.768518][ T3827] netlink: 'syz.3.85': attribute type 6 has an invalid length. [ 56.817243][ T3829] syzkaller0: entered promiscuous mode [ 56.846830][ T3829] syzkaller0: entered allmulticast mode [ 56.900615][ T3827] loop3: detected capacity change from 0 to 512 [ 56.936220][ T3827] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 57.101730][ T3837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.88'. [ 57.139463][ T3615] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.155488][ T3615] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.171470][ T3615] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.235242][ T3838] loop0: detected capacity change from 0 to 512 [ 57.501380][ T3831] loop1: detected capacity change from 0 to 2048 [ 58.170090][ T3615] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.200401][ T3838] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.88: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 58.501190][ T3838] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 58.520000][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 58.535979][ C1] EXT4-fs (loop0): initial error at time 1781827053: ext4_ext_check_inode:521: inode 4 [ 58.545973][ C1] EXT4-fs (loop0): last error at time 1781827053: ext4_ext_check_inode:521: inode 4 [ 59.220086][ T3838] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.88: Bad quota inode: 4, type: 1 [ 59.541160][ T3838] loop0: lost filesystem error report for type 5 error -117 [ 59.573095][ T3838] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.302518][ T3838] EXT4-fs (loop0): mount failed [ 60.504679][ T3852] xt_CT: No such helper "snmp_trap" [ 60.508525][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 60.508582][ T28] audit: type=1400 audit(1781827055.579:380): avc: denied { bind } for pid=3856 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.515447][ T3831] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 60.523950][ T28] audit: type=1400 audit(1781827055.599:381): avc: denied { setopt } for pid=3856 comm="syz.0.93" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.636121][ T3862] loop2: detected capacity change from 0 to 512 [ 60.672313][ T3831] EXT4-fs: failed to create workqueue [ 60.684285][ T3831] EXT4-fs (loop1): mount failed [ 60.721927][ T3861] loop4: detected capacity change from 0 to 4096 [ 60.778058][ T3861] EXT4-fs: Ignoring removed orlov option [ 60.815077][ T3862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.829713][ T3862] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.941033][ T3861] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.001840][ T3861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.523528][ T28] audit: type=1400 audit(1781827055.939:382): avc: denied { connect } for pid=3848 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.553681][ T3869] loop0: detected capacity change from 0 to 512 [ 61.561023][ T28] audit: type=1400 audit(1781827056.209:383): avc: denied { write } for pid=3851 comm="syz.4.92" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.630204][ T3869] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 61.644292][ T3871] tcf_pedit_act: 22 callbacks suppressed [ 61.644309][ T3871] tc action pedit 'at' offset 5 out of bounds [ 61.661099][ T3869] EXT4-fs (loop0): group descriptors corrupted! [ 61.821946][ T3873] loop1: detected capacity change from 0 to 1024 [ 61.831540][ T3876] loop0: detected capacity change from 0 to 512 [ 61.855916][ T3873] EXT4-fs: Ignoring removed bh option [ 61.919321][ T3873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 61.965605][ T3876] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 3: comm syz.0.94: lblock 0 mapped to illegal pblock 3 (length 1) [ 62.073501][ T3876] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 62.078261][ T3876] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.94: error -EUCLEAN reading directory block [ 62.087453][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 62.087475][ C1] EXT4-fs (loop0): initial error at time 1781827057: ext4_map_blocks:791: inode 2: block 3 [ 62.087526][ C1] EXT4-fs (loop0): last error at time 1781827057: ext4_map_blocks:791: inode 2: block 3 [ 62.367735][ T3876] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 62.407707][ T3876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.535981][ T28] audit: type=1400 audit(1781827056.229:384): avc: denied { read } for pid=3851 comm="syz.4.92" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.558927][ T28] audit: type=1400 audit(1781827057.069:385): avc: denied { write } for pid=3872 comm="syz.1.96" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.581110][ T28] audit: type=1400 audit(1781827057.259:386): avc: denied { mount } for pid=3875 comm="syz.3.97" name="/" dev="autofs" ino=6543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 62.630829][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.675501][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 62.702866][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.762817][ T3885] vhci_hcd vhci_hcd.4: invalid port number 255 [ 62.769501][ T3885] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 62.788747][ T3885] netlink: 'syz.0.98': attribute type 1 has an invalid length. [ 62.877798][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.907866][ T3895] netlink: 380 bytes leftover after parsing attributes in process `syz.2.100'. [ 63.150692][ T3898] loop2: detected capacity change from 0 to 764 [ 63.829841][ T28] audit: type=1400 audit(1781827058.899:387): avc: denied { compute_member } for pid=3902 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 64.011970][ T28] audit: type=1400 audit(1781827059.079:388): avc: denied { create } for pid=3902 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.074481][ T28] audit: type=1400 audit(1781827059.079:389): avc: denied { write } for pid=3902 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.779169][ T3911] loop0: detected capacity change from 0 to 2368 [ 64.845946][ T3913] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 64.855320][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.879676][ T3913] erspan1: entered allmulticast mode [ 64.932339][ T3915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 65.112613][ T3923] loop0: detected capacity change from 0 to 128 [ 65.140347][ T3923] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.404725][ T3926] loop2: detected capacity change from 0 to 512 [ 65.516593][ T3926] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.107: corrupted inode contents [ 65.531096][ T3926] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.534796][ T3926] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.107: mark_inode_dirty error [ 65.544881][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 65.544910][ C0] EXT4-fs (loop2): initial error at time 1781827060: ext4_do_update_inode:5742: inode 16 [ 65.545090][ C0] EXT4-fs (loop2): last error at time 1781827060: ext4_do_update_inode:5742: inode 16 [ 65.587151][ T3926] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.592421][ T3926] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.107: corrupted inode contents [ 65.615636][ T3926] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.617445][ T3926] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.107: mark_inode_dirty error [ 65.640039][ T3926] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.642228][ T3926] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.107: corrupted inode contents [ 65.666630][ T3926] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.669183][ T3926] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 65.688718][ T3926] loop2: lost filesystem error report for type 5 error -117 [ 65.690409][ T3926] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.107: corrupted inode contents [ 65.713092][ T3926] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.716842][ T3926] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.107: mark_inode_dirty error [ 65.740997][ T3926] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.743468][ T3926] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 65.763585][ T3926] loop2: lost filesystem error report for type 5 error -117 [ 65.777792][ T3926] EXT4-fs (loop2): 1 truncate cleaned up [ 65.868524][ T3926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.884734][ T3926] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.971884][ T3609] __quota_error: 2 callbacks suppressed [ 65.971914][ T3609] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 66.017014][ T3923] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.153129][ T3609] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:15: Failed to release dquot type 1 [ 66.366250][ T3925] loop4: detected capacity change from 0 to 2048 [ 66.366346][ T3923] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 66.384157][ T3923] FAT-fs (loop0): Filesystem has been set read-only [ 66.427822][ T3934] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 66.441801][ T28] audit: type=1400 audit(1781827061.489:392): avc: denied { create } for pid=3932 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.506232][ T3927] SELinux: failed to load policy [ 66.563253][ T28] audit: type=1400 audit(1781827061.499:393): avc: denied { setopt } for pid=3922 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.673535][ T28] audit: type=1400 audit(1781827061.519:394): avc: denied { setopt } for pid=3932 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.763858][ T28] audit: type=1400 audit(1781827061.689:395): avc: denied { write } for pid=3932 comm="/dev/ttyS3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.850915][ T3940] loop1: detected capacity change from 0 to 512 [ 66.933926][ T3940] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 66.946655][ T3940] EXT4-fs (loop1): group descriptors corrupted! [ 67.110625][ T3926] syz.2.107 (3926) used greatest stack depth: 9152 bytes left [ 67.213069][ T3941] loop1: detected capacity change from 0 to 512 [ 67.264292][ T3941] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.111: lblock 0 mapped to illegal pblock 3 (length 1) [ 67.374306][ T3954] loop4: detected capacity change from 0 to 128 [ 67.386221][ T3941] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 67.386473][ T3941] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.111: error -EUCLEAN reading directory block [ 67.395620][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 67.395639][ C0] EXT4-fs (loop1): initial error at time 1781827062: ext4_map_blocks:791: inode 2: block 3 [ 67.395686][ C0] EXT4-fs (loop1): last error at time 1781827062: ext4_map_blocks:791: inode 2: block 3 [ 67.443911][ T3954] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.471696][ T3954] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.471913][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.493695][ T3941] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 67.504248][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.634698][ T3955] batman_adv: batadv0: Adding interface: dummy0 [ 67.643612][ T3955] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.676174][ T3955] batman_adv: batadv0: Interface activated: dummy0 [ 67.684748][ T3957] net_ratelimit: 10 callbacks suppressed [ 67.684768][ T3957] batadv0: mtu less than device minimum [ 67.719639][ T3957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.720593][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 67.731294][ T3957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.750866][ T3957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.762755][ T3957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.777469][ T3957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.788755][ T3957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.800466][ T3957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.809019][ T3964] loop2: detected capacity change from 0 to 2368 [ 67.813008][ T3957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.832148][ T3957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.925111][ T3967] loop0: detected capacity change from 0 to 128 [ 67.936228][ T3967] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.949292][ T3967] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.965958][ T28] audit: type=1400 audit(1781827063.039:396): avc: denied { bind } for pid=3968 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.091515][ T3975] loop2: detected capacity change from 0 to 128 [ 68.113886][ T3975] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.145987][ T3975] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.183908][ T3975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 68.193577][ T3975] FAT-fs (loop2): Filesystem has been set read-only [ 68.202510][ T3975] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 68.220992][ T3980] loop3: detected capacity change from 0 to 2048 [ 68.238176][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.311665][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.324427][ T3986] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 68.335895][ T3980] Alternate GPT is invalid, using primary GPT. [ 68.345465][ T3980] loop3: p1 p2 p3 [ 68.358066][ T3986] bond1: entered promiscuous mode [ 68.372600][ T3986] bond1: entered allmulticast mode [ 68.378293][ T3986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.393064][ T3980] SELinux: failed to load policy [ 68.400963][ T3986] erspan1: entered allmulticast mode [ 68.410917][ T3986] bond1: (slave erspan1): making interface the new active one [ 68.450580][ T3986] erspan1: entered promiscuous mode [ 68.457252][ T3986] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 68.503017][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 68.583768][ T3986] bond1 (unregistering): (slave erspan1): Releasing active interface [ 68.592343][ T3986] erspan1: left promiscuous mode [ 68.599084][ T3986] bond1 (unregistering): Released all slaves [ 68.857847][ T3997] loop1: detected capacity change from 0 to 512 [ 68.987936][ T3997] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.128: corrupted inode contents [ 69.000899][ T3997] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 69.005360][ T3997] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.128: mark_inode_dirty error [ 69.061444][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 69.061492][ C0] EXT4-fs (loop1): initial error at time 1781827064: ext4_do_update_inode:5742: inode 16 [ 69.061687][ C0] EXT4-fs (loop1): last error at time 1781827064: ext4_do_update_inode:5742: inode 16 [ 69.126065][ T3997] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 69.137209][ T3997] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.128: corrupted inode contents [ 69.170960][ T3997] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.128: mark_inode_dirty error [ 69.198173][ T3997] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.128: corrupted inode contents [ 69.215620][ T3997] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 69.225850][ T3997] loop1: lost filesystem error report for type 5 error -117 [ 69.232127][ T3997] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.128: corrupted inode contents [ 69.261047][ T3997] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.128: mark_inode_dirty error [ 69.278846][ T3997] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 69.290328][ T3997] loop1: lost filesystem error report for type 5 error -117 [ 69.300593][ T3997] EXT4-fs (loop1): 1 truncate cleaned up [ 69.331640][ T3997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.348078][ T3997] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.467062][ T3617] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 69.703528][ T3617] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:23: Failed to release dquot type 1 [ 69.826289][ T4001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 70.086978][ T3997] syz.1.128 (3997) used greatest stack depth: 8960 bytes left [ 70.131300][ T4005] batman_adv: batadv0: Adding interface: dummy0 [ 70.152255][ T4005] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.198019][ T4005] batman_adv: batadv0: Interface activated: dummy0 [ 70.436892][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.642192][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.842481][ T4020] loop4: detected capacity change from 0 to 128 [ 70.874664][ T4020] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.892739][ T4020] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.732075][ T4037] loop2: detected capacity change from 0 to 128 [ 71.998845][ T4037] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.072085][ T4037] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.092155][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.189778][ T4009] loop3: detected capacity change from 0 to 2368 [ 72.263947][ T4029] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 72.445822][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.476944][ T28] audit: type=1400 audit(1781827067.549:397): avc: denied { bind } for pid=4041 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.848233][ T4045] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.990720][ T4048] netlink: 380 bytes leftover after parsing attributes in process `syz.1.144'. [ 73.107797][ T4045] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.174863][ T4048] loop1: detected capacity change from 0 to 764 [ 73.353871][ T4045] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.322705][ T4045] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.436588][ T3615] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.449668][ T3615] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.467509][ T3615] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.494450][ T3615] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.264032][ T4071] loop4: detected capacity change from 0 to 1024 [ 75.328915][ T4071] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 75.393163][ T4071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.573716][ T4076] loop2: detected capacity change from 0 to 512 [ 75.594927][ T4076] EXT4-fs: test_dummy_encryption option not supported [ 76.118833][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 76.204219][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 77.240418][ T4084] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 77.353884][ T4091] process 'syz.0.157' launched '/dev/fd/5' with NULL argv: empty string added [ 77.381088][ T28] audit: type=1400 audit(1781827072.429:398): avc: denied { execute } for pid=4090 comm="syz.0.157" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.403727][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.422893][ T28] audit: type=1400 audit(1781827072.459:399): avc: denied { execute_no_trans } for pid=4090 comm="syz.0.157" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.558903][ T4101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 78.842664][ T4112] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 78.905099][ T4112] bond1: entered promiscuous mode [ 78.930223][ T4112] bond1: entered allmulticast mode [ 78.936935][ T4112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.989000][ T4112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 79.773834][ T4122] loop3: detected capacity change from 0 to 512 [ 79.954980][ T4116] erspan1: entered allmulticast mode [ 79.975398][ T4116] bond1: (slave erspan1): making interface the new active one [ 79.987835][ T4116] erspan1: entered promiscuous mode [ 80.829529][ T4116] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 81.852227][ T4112] bond1 (unregistering): (slave erspan1): Releasing active interface [ 81.861722][ T4112] erspan1: left promiscuous mode [ 81.870951][ T4112] bond1 (unregistering): Released all slaves [ 82.695795][ T4129] capability: warning: `syz.2.175' uses 32-bit capabilities (legacy support in use) [ 82.708320][ T4122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.721644][ T4122] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.885204][ T4132] random: crng reseeded on system resumption [ 82.894098][ T28] audit: type=1400 audit(1781827077.959:400): avc: denied { write } for pid=4131 comm="syz.4.178" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.583154][ T4137] Restarting kernel threads ... [ 83.588693][ T4137] Done restarting kernel threads. [ 83.627350][ T28] audit: type=1400 audit(1781827077.959:401): avc: denied { open } for pid=4131 comm="syz.4.178" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.654174][ T28] audit: type=1400 audit(1781827078.659:402): avc: denied { ioctl } for pid=4131 comm="syz.4.178" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 83.859047][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.877694][ T4143] netlink: 380 bytes leftover after parsing attributes in process `syz.4.170'. [ 84.081583][ T4143] loop4: detected capacity change from 0 to 764 [ 84.209082][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 84.231500][ T4141] batman_adv: batadv0: Adding interface: dummy0 [ 84.251480][ T4141] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.300681][ T4141] batman_adv: batadv0: Interface activated: dummy0 [ 84.318135][ T4152] loop3: detected capacity change from 0 to 512 [ 84.343305][ T4148] net_ratelimit: 30 callbacks suppressed [ 84.343327][ T4148] batadv0: mtu less than device minimum [ 84.364783][ T4152] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 84.377305][ T4148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.383831][ T4152] EXT4-fs (loop3): group descriptors corrupted! [ 84.391412][ T4148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.408582][ T4148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.420481][ T4148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.432298][ T4148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.443770][ T4148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.456385][ T4148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.469385][ T4148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.481507][ T4148] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.624254][ T4160] loop3: detected capacity change from 0 to 512 [ 84.635484][ T4163] netlink: 'syz.2.176': attribute type 4 has an invalid length. [ 84.688275][ T4168] netlink: 'syz.2.176': attribute type 4 has an invalid length. [ 84.708549][ T4160] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.171: lblock 0 mapped to illegal pblock 3 (length 1) [ 84.828575][ T4160] fserror_report: 5 callbacks suppressed [ 84.828599][ T4160] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 84.870323][ T4160] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.171: error -EUCLEAN reading directory block [ 84.892754][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 84.892784][ C0] EXT4-fs (loop3): initial error at time 1781827079: ext4_map_blocks:791: inode 2: block 3 [ 84.892832][ C0] EXT4-fs (loop3): last error at time 1781827079: ext4_map_blocks:791: inode 2: block 3 [ 84.940199][ T4160] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 84.969546][ T4160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.077062][ T4178] loop0: detected capacity change from 0 to 512 [ 85.103369][ T4178] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.132707][ T4178] ext4: Unknown parameter 'm' [ 85.295912][ T4173] netlink: 14 bytes leftover after parsing attributes in process `syz.2.180'. [ 85.413635][ T4130] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 85.555428][ T4173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.606961][ T4173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.658812][ T4173] bond0 (unregistering): Released all slaves [ 85.748822][ T28] audit: type=1400 audit(1781827080.819:403): avc: denied { map } for pid=4187 comm="syz.4.186" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=6120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.750388][ T4190] netlink: 380 bytes leftover after parsing attributes in process `syz.0.195'. [ 85.797584][ T28] audit: type=1400 audit(1781827080.819:404): avc: denied { read write } for pid=4187 comm="syz.4.186" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=6120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.850043][ T28] audit: type=1400 audit(1781827080.819:405): avc: denied { ioctl } for pid=4187 comm="syz.4.186" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=6120 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.897322][ T4197] netlink: 700 bytes leftover after parsing attributes in process `syz.2.187'. [ 85.944044][ T28] audit: type=1400 audit(1781827080.859:406): avc: denied { write } for pid=4187 comm="syz.4.186" path="socket:[6119]" dev="sockfs" ino=6119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.975886][ T4190] loop0: detected capacity change from 0 to 764 [ 86.039169][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.769423][ T4212] batman_adv: batadv0: Adding interface: dummy0 [ 86.792011][ T4212] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.844244][ T4212] batman_adv: batadv0: Interface activated: dummy0 [ 86.979491][ T4219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.066700][ T4219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.093398][ T4216] loop2: detected capacity change from 0 to 512 [ 87.155594][ T4219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.194375][ T4216] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.193: bad orphan inode 13 [ 87.222179][ T4216] loop2: lost filesystem error report for type 5 error -117 [ 87.225261][ T4216] ext4_test_bit(bit=12, block=4) = 1 [ 87.233181][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 87.233491][ C0] EXT4-fs (loop2): initial error at time 1781827082: ext4_orphan_get:1425 [ 87.233559][ C0] EXT4-fs (loop2): last error at time 1781827082: ext4_orphan_get:1425 [ 87.285039][ T4219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.339524][ T4216] is_bad_inode(inode)=0 [ 87.414395][ T4216] NEXT_ORPHAN(inode)=0 [ 87.425759][ T3616] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.454148][ T4216] max_ino=32 [ 87.470840][ T4216] i_nlink=1 [ 87.516833][ T4216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.559291][ T3617] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.638649][ T3609] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.710401][ T3609] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.790777][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.489191][ T4243] loop3: detected capacity change from 0 to 1024 [ 89.526565][ T4243] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 89.627484][ T4243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.524497][ T4255] loop1: detected capacity change from 0 to 512 [ 90.577857][ T4255] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.640050][ T28] audit: type=1400 audit(1781827085.699:407): avc: denied { bind } for pid=4251 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.677146][ T4255] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.204: bad orphan inode 131083 [ 90.728099][ T4255] loop1: lost filesystem error report for type 5 error -117 [ 90.729990][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 90.744705][ C0] EXT4-fs (loop1): initial error at time 1781827085: ext4_orphan_get:1425 [ 90.754012][ C0] EXT4-fs (loop1): last error at time 1781827085: ext4_orphan_get:1425 [ 90.765099][ T4255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.782267][ T4259] loop2: detected capacity change from 0 to 128 [ 90.800127][ T28] audit: type=1400 audit(1781827085.769:408): avc: denied { setopt } for pid=4251 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.838769][ T4259] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.863909][ T4254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.889833][ T4259] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.905684][ T28] audit: type=1400 audit(1781827085.899:409): avc: denied { write } for pid=4254 comm="syz.1.204" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.020466][ T28] audit: type=1400 audit(1781827085.909:410): avc: denied { mounton } for pid=4254 comm="syz.1.204" path="/39/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.149888][ T28] audit: type=1400 audit(1781827085.929:411): avc: denied { unmount } for pid=4254 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.170643][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.257850][ T28] audit: type=1400 audit(1781827086.039:412): avc: denied { read write } for pid=4261 comm="syz.4.205" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 91.396468][ T28] audit: type=1400 audit(1781827086.039:413): avc: denied { open } for pid=4261 comm="syz.4.205" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 91.433572][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.468834][ T4272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 91.530678][ T28] audit: type=1400 audit(1781827086.599:414): avc: denied { bind } for pid=4261 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.663888][ T28] audit: type=1400 audit(1781827086.739:415): avc: denied { create } for pid=4269 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 91.817613][ T4283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.111974][ T4283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.329518][ T4283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.685199][ T4283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.776361][ T3616] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.791801][ T3616] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.836581][ T3616] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.856340][ T3616] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.600286][ T4312] loop2: detected capacity change from 0 to 1024 [ 93.688960][ T4312] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 93.748344][ T4312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.104438][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 94.185363][ T4320] loop0: detected capacity change from 0 to 256 [ 96.920814][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.354897][ T4352] loop2: detected capacity change from 0 to 256 [ 97.500512][ T4353] mmap: syz.1.231 (4353) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.923802][ T9] IPVS: starting estimator thread 0... [ 97.961003][ T4360] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.053872][ T4362] IPVS: using max 2256 ests per chain, 112800 per kthread [ 98.057002][ T4342] loop2: detected capacity change from 0 to 1024 [ 98.128799][ T4360] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.234401][ T4342] EXT4-fs: inline encryption not supported [ 98.262209][ T4360] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.282850][ T28] audit: type=1400 audit(1781827093.349:416): avc: denied { read write } for pid=4366 comm="syz.4.234" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.459676][ T28] audit: type=1400 audit(1781827093.349:417): avc: denied { ioctl open } for pid=4366 comm="syz.4.234" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.708163][ T4371] loop4: detected capacity change from 0 to 1024 [ 98.824821][ T4371] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 99.266748][ T4371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.525929][ T4342] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.696739][ T4360] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.785446][ T4376] syzkaller0: entered promiscuous mode [ 99.797112][ T4370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.871005][ T28] audit: type=1400 audit(1781827094.859:418): avc: denied { ioctl } for pid=4375 comm="syz.3.236" path="socket:[8412]" dev="sockfs" ino=8412 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.933103][ T3609] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.951244][ T4342] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.227: lblock 2 mapped to illegal pblock 2 (length 1) [ 100.025376][ T3617] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.098789][ T3617] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.115524][ T4342] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 100.116611][ T4342] EXT4-fs (loop2): Remounting filesystem read-only [ 100.126381][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 100.126601][ C1] EXT4-fs (loop2): initial error at time 1781827095: ext4_map_blocks:791: inode 3: block 2 [ 100.126731][ C1] EXT4-fs (loop2): last error at time 1781827095: ext4_map_blocks:791: inode 3: block 2 [ 100.220342][ T3617] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.379792][ T4342] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 100.391968][ T4342] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 100.403308][ T4342] EXT4-fs (loop2): 1 orphan inode deleted [ 100.426754][ T4342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.426888][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.484297][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.831603][ T4399] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 101.616453][ T4403] loop0: detected capacity change from 0 to 1024 [ 101.730945][ T4403] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 103.743682][ T4403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.040248][ T28] audit: type=1400 audit(1781827098.939:419): avc: denied { write } for pid=4397 comm="syz.0.243" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.530172][ T28] audit: type=1400 audit(1781827098.939:420): avc: denied { accept } for pid=4406 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 104.583627][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.924228][ T4420] loop4: detected capacity change from 0 to 256 [ 104.940894][ T28] audit: type=1400 audit(1781827100.009:421): avc: denied { bind } for pid=4425 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.016298][ T4420] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.064607][ T28] audit: type=1400 audit(1781827100.069:422): avc: denied { read } for pid=4425 comm="syz.0.246" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.194991][ T28] audit: type=1400 audit(1781827100.069:423): avc: denied { open } for pid=4425 comm="syz.0.246" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.324291][ T28] audit: type=1400 audit(1781827100.379:424): avc: denied { write } for pid=4441 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.359890][ T4443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.252'. [ 105.450761][ T4443] unsupported nlmsg_type 40 [ 105.994980][ T4452] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 106.107489][ T4450] loop3: detected capacity change from 0 to 8192 [ 107.132385][ T4465] netlink: 700 bytes leftover after parsing attributes in process `syz.0.262'. [ 107.158368][ T4466] loop2: detected capacity change from 0 to 2048 [ 107.285284][ T4476] loop3: detected capacity change from 0 to 256 [ 107.309474][ T4476] vfat: Unknown parameter 'check.relaxed' [ 107.508351][ T28] audit: type=1400 audit(1781827102.569:425): avc: denied { mount } for pid=4475 comm="syz.3.264" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.728261][ T28] audit: type=1400 audit(1781827102.639:426): avc: denied { name_bind } for pid=4460 comm="syz.2.258" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 107.802913][ T4486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 107.969552][ T4489] netlink: 'syz.4.267': attribute type 4 has an invalid length. [ 108.038048][ T4490] netlink: 'syz.4.267': attribute type 4 has an invalid length. [ 108.271631][ T4492] loop3: detected capacity change from 0 to 2048 [ 108.302100][ T4492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.524864][ T4502] bond0: (slave bridge_slave_0): Error: Device is in use and cannot be enslaved [ 110.294336][ T4520] loop4: detected capacity change from 0 to 128 [ 110.353597][ T4520] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.432627][ T4520] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.636099][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.772588][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.851140][ T4545] loop3: detected capacity change from 0 to 512 [ 110.922050][ T4545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.952828][ T4545] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.969663][ T4536] loop0: detected capacity change from 0 to 512 [ 110.988735][ T4536] EXT4-fs: test_dummy_encryption option not supported [ 111.029652][ T28] audit: type=1400 audit(1781827106.099:427): avc: denied { getopt } for pid=4543 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.053262][ T4545] netlink: 'syz.3.284': attribute type 16 has an invalid length. [ 111.071595][ T36] IPVS: starting estimator thread 0... [ 111.161522][ T4552] IPVS: using max 2256 ests per chain, 112800 per kthread [ 111.259763][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.267374][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.331217][ T4545] batman_adv: batadv0: Interface deactivated: dummy0 [ 111.509440][ T4565] netlink: 'syz.1.288': attribute type 4 has an invalid length. [ 111.561659][ T4566] netlink: 'syz.1.288': attribute type 4 has an invalid length. [ 111.606954][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.646127][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.852668][ T4564] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.289'. [ 111.877524][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.882534][ T3609] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.908293][ T3609] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.933942][ T3609] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.974253][ T3609] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.841974][ T4605] netlink: 14 bytes leftover after parsing attributes in process `syz.4.302'. [ 113.181830][ T4605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.381075][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.487559][ T28] audit: type=1400 audit(1781827108.559:428): avc: denied { connect } for pid=4620 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.545600][ T4605] bond0 (unregistering): Released all slaves [ 113.627350][ T4622] loop0: detected capacity change from 0 to 128 [ 113.780874][ T4606] syzkaller0: entered promiscuous mode [ 113.812629][ T4606] syzkaller0: entered allmulticast mode [ 115.282606][ T4622] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.673449][ T4622] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.990405][ T3382] IPVS: starting estimator thread 0... [ 116.090225][ T4649] IPVS: using max 1488 ests per chain, 74400 per kthread [ 116.128639][ T4621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.364403][ T4622] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.408583][ T4658] loop4: detected capacity change from 0 to 128 [ 116.449008][ T4658] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.509731][ T4658] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.769571][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.160563][ T4675] loop4: detected capacity change from 0 to 512 [ 117.225836][ T4675] EXT4-fs: test_dummy_encryption option not supported [ 117.409048][ T4678] netlink: 14 bytes leftover after parsing attributes in process `syz.1.319'. [ 117.570653][ T4678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.676814][ T4678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.713895][ T4678] bond0 (unregistering): Released all slaves [ 117.838115][ T4688] loop3: detected capacity change from 0 to 2048 [ 117.913332][ T4688] loop3: p2 < > p3 < p5 > p4 [ 117.927573][ T4688] loop3: partition table partially beyond EOD, truncated [ 117.951425][ T4688] loop3: p2 start 4278190080 is beyond EOD, truncated [ 117.977799][ T4688] loop3: p4 size 8192 extends beyond EOD, truncated [ 118.005504][ T4682] loop4: detected capacity change from 0 to 512 [ 118.019771][ T4688] loop3: p5 size 8192 extends beyond EOD, truncated [ 118.224672][ T4682] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.320: bad orphan inode 13 [ 118.283085][ T4682] loop4: lost filesystem error report for type 5 error -117 [ 118.300044][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 118.316943][ C0] EXT4-fs (loop4): initial error at time 1781827113: ext4_orphan_get:1425 [ 118.326778][ C0] EXT4-fs (loop4): last error at time 1781827113: ext4_orphan_get:1425 [ 118.360076][ T4682] ext4_test_bit(bit=12, block=4) = 1 [ 118.385413][ T4682] is_bad_inode(inode)=0 [ 118.420236][ T4682] NEXT_ORPHAN(inode)=0 [ 118.430114][ T4682] max_ino=32 [ 118.454094][ T4682] i_nlink=1 [ 118.533941][ T4682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.838534][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.039469][ T4703] loop4: detected capacity change from 0 to 256 [ 120.018145][ T4703] msdos: Unknown parameter 'nodos' [ 121.373380][ T4707] gre0 speed is unknown, defaulting to 1000 [ 121.403858][ T4707] gre0 speed is unknown, defaulting to 1000 [ 121.440539][ T4707] gre0 speed is unknown, defaulting to 1000 [ 121.716840][ T4707] infiniband ryz1: set active [ 121.721665][ T11] gre0 speed is unknown, defaulting to 1000 [ 121.734038][ T4707] infiniband ryz1: added gre0 [ 121.755280][ T4707] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 121.772062][ T4707] infiniband ryz1: Couldn't open port 1 [ 121.861534][ T4707] RDS/IB: ryz1: added [ 121.891643][ T4707] smc: adding ib device ryz1 with port count 1 [ 121.901585][ T4707] smc: ib device ryz1 port 1 has no pnetid [ 121.955802][ T11] gre0 speed is unknown, defaulting to 1000 [ 122.081554][ T4707] gre0 speed is unknown, defaulting to 1000 [ 123.201939][ T4731] syzkaller0: entered promiscuous mode [ 123.250689][ T4731] syzkaller0: entered allmulticast mode [ 123.306390][ T4707] gre0 speed is unknown, defaulting to 1000 [ 123.958426][ T28] audit: type=1400 audit(1781827119.029:429): avc: denied { search } for pid=4738 comm="syz.1.339" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.030522][ T28] audit: type=1400 audit(1781827119.059:430): avc: denied { search } for pid=4738 comm="syz.1.339" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.123083][ T4707] gre0 speed is unknown, defaulting to 1000 [ 124.141624][ T28] audit: type=1400 audit(1781827119.059:431): avc: denied { read } for pid=4738 comm="syz.1.339" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.249817][ T28] audit: type=1400 audit(1781827119.059:432): avc: denied { read open } for pid=4738 comm="syz.1.339" path="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.329204][ T4742] netlink: 68 bytes leftover after parsing attributes in process `syz.0.342'. [ 124.338720][ T4707] gre0 speed is unknown, defaulting to 1000 [ 124.434771][ T4707] gre0 speed is unknown, defaulting to 1000 [ 124.463435][ T4737] loop3: detected capacity change from 0 to 4096 [ 124.506484][ T4737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.530004][ T28] audit: type=1400 audit(1781827119.599:433): avc: denied { write } for pid=4736 comm="syz.3.340" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.650470][ T28] audit: type=1400 audit(1781827119.599:434): avc: denied { add_name } for pid=4736 comm="syz.3.340" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.710228][ T4748] loop0: detected capacity change from 0 to 512 [ 124.719043][ T28] audit: type=1400 audit(1781827119.639:435): avc: denied { map } for pid=4736 comm="syz.3.340" path="/66/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.743119][ T28] audit: type=1400 audit(1781827119.639:436): avc: denied { execute } for pid=4736 comm="syz.3.340" path="/66/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.768051][ T28] audit: type=1400 audit(1781827119.649:437): avc: denied { write } for pid=4736 comm="syz.3.340" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.777930][ T4748] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.344: bad orphan inode 13 [ 124.810309][ T28] audit: type=1400 audit(1781827119.649:438): avc: denied { mounton } for pid=4736 comm="syz.3.340" path="/66/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.835010][ T4748] loop0: lost filesystem error report for type 5 error -117 [ 124.839989][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 124.854529][ C0] EXT4-fs (loop0): initial error at time 1781827119: ext4_orphan_get:1425 [ 124.863218][ C0] EXT4-fs (loop0): last error at time 1781827119: ext4_orphan_get:1425 [ 124.873399][ T4748] ext4_test_bit(bit=12, block=4) = 1 [ 124.879872][ T4748] is_bad_inode(inode)=0 [ 124.887729][ T4748] NEXT_ORPHAN(inode)=0 [ 124.898733][ T4748] max_ino=32 [ 124.904973][ T4748] i_nlink=1 [ 124.922980][ T4748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.953989][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.145958][ T4757] loop4: detected capacity change from 0 to 2048 [ 125.160462][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.184419][ T4757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.513605][ T4770] bond0: (slave bridge_slave_0): Error: Device is in use and cannot be enslaved [ 128.056068][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.535738][ T4782] loop0: detected capacity change from 0 to 256 [ 128.559752][ T4775] Cannot find add_set index 0 as target [ 128.570679][ T4782] vfat: Unknown parameter 'check.relaxed' [ 128.931370][ T4801] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.357'. [ 128.962446][ T4796] loop3: detected capacity change from 0 to 128 [ 128.994525][ T4796] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.043433][ T4796] ext4 filesystem being mounted at /70/bus/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.064198][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 129.064220][ T28] audit: type=1400 audit(1781827124.109:456): avc: denied { mount } for pid=4799 comm="syz.1.358" name="/" dev="hugetlbfs" ino=8190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 129.161184][ T28] audit: type=1400 audit(1781827124.149:457): avc: denied { write } for pid=4792 comm="syz.3.355" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.233036][ T28] audit: type=1400 audit(1781827124.149:458): avc: denied { create } for pid=4792 comm="syz.3.355" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 129.301761][ T28] audit: type=1400 audit(1781827124.189:459): avc: denied { write } for pid=4792 comm="syz.3.355" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.374233][ T4808] loop0: detected capacity change from 0 to 2048 [ 129.635164][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.681217][ T4817] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 130.414811][ T4838] loop0: detected capacity change from 0 to 256 [ 130.507384][ T4841] net_ratelimit: 30 callbacks suppressed [ 130.507405][ T4841] Dead loop on virtual device ip6_vti0 (net 37), fix it urgently! [ 130.634274][ T4838] loop0: detected capacity change from 0 to 1024 [ 130.691066][ T4843] program syz.3.368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.693636][ T4838] EXT4-fs: inline encryption not supported [ 130.797894][ T4838] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.887886][ T4838] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.366: lblock 2 mapped to illegal pblock 2 (length 1) [ 130.940824][ T4838] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 130.941877][ T4838] EXT4-fs (loop0): Remounting filesystem read-only [ 130.951945][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 130.952152][ C1] EXT4-fs (loop0): initial error at time 1781827126: ext4_map_blocks:791: inode 3: block 2 [ 130.952385][ C1] EXT4-fs (loop0): last error at time 1781827126: ext4_map_blocks:791: inode 3: block 2 [ 131.018058][ T4853] tipc: Started in network mode [ 131.036906][ T4838] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 131.042263][ T4853] tipc: Node identity c6b6e9873a1, cluster identity 4711 [ 131.086946][ T4853] tipc: Enabled bearer , priority 0 [ 131.094077][ T4838] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 131.121947][ T4838] EXT4-fs (loop0): 1 orphan inode deleted [ 131.122557][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.183348][ T4838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.354111][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.570405][ C0] Dead loop on virtual device ip6_vti0 (net 37), fix it urgently! [ 132.439616][ T4859] syzkaller0: entered promiscuous mode [ 132.460408][ T4859] syzkaller0: entered allmulticast mode [ 132.565856][ T3670] tipc: Node number set to 4238797191 [ 132.573511][ T4863] tipc: Resetting bearer [ 132.589525][ T4851] tipc: Resetting bearer [ 132.620795][ T4851] tipc: Disabling bearer [ 132.807098][ T4876] syzkaller0: entered promiscuous mode [ 132.834521][ T4876] syzkaller0: entered allmulticast mode [ 132.864116][ T4876] 0: reclassify loop, rule prio 0, protocol 800 [ 133.650182][ C0] Dead loop on virtual device ip6_vti0 (net 37), fix it urgently! [ 134.258423][ T4890] netlink: 68 bytes leftover after parsing attributes in process `syz.1.382'. [ 134.344995][ T4892] loop0: detected capacity change from 0 to 512 [ 134.462449][ T4892] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 134.493356][ T4892] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 134.529260][ T4905] loop4: detected capacity change from 0 to 256 [ 134.571008][ T4905] vfat: Unknown parameter 'check.relaxed' [ 134.715536][ T4907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 134.731079][ T4907] netlink: 60 bytes leftover after parsing attributes in process `syz.3.388'. [ 134.813179][ T4913] netlink: 44 bytes leftover after parsing attributes in process `syz.2.389'. [ 135.149505][ T4918] loop0: detected capacity change from 0 to 1764 [ 137.255679][ T4922] loop4: detected capacity change from 0 to 2048 [ 137.699617][ T4933] loop2: detected capacity change from 0 to 512 [ 137.730230][ C0] Dead loop on virtual device ip6_vti0 (net 37), fix it urgently! [ 137.781670][ T4933] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.827964][ T4933] ext4: Unknown parameter 'm' [ 137.932148][ T28] audit: type=1400 audit(1781827133.009:460): avc: denied { nlmsg_read } for pid=4934 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.262316][ T4938] gre0 speed is unknown, defaulting to 1000 [ 138.573647][ T4959] loop4: detected capacity change from 0 to 512 [ 138.618276][ T4959] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.406: bg 0: block 127: padding at end of block bitmap is not set [ 138.703702][ T4959] loop4: lost filesystem error report for type 5 error -117 [ 138.704097][ T4959] ------------[ cut here ]------------ [ 138.712339][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 138.712386][ C0] EXT4-fs (loop4): initial error at time 1781827133: ext4_validate_block_bitmap:441 [ 138.712410][ C0] EXT4-fs (loop4): last error at time 1781827133: ext4_validate_block_bitmap:441 [ 138.748900][ T4959] EA inode 11 i_nlink=0 [ 138.749013][ T4959] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.4.406/4959 [ 138.767324][ T4959] Modules linked in: [ 138.772720][ T4959] CPU: 0 UID: 0 PID: 4959 Comm: syz.4.406 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.782502][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.793359][ T4959] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 138.800238][ T4959] Code: 86 1c 97 ff 49 8d 7e 40 4c 8d 2d bb c7 5a 05 e8 b6 ed b5 ff 49 8b 6e 40 4c 89 e7 e8 ea e8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 f1 70 d8 03 90 90 90 90 90 90 90 [ 138.821075][ T4959] RSP: 0000:ffffc90002f537f8 EFLAGS: 00010246 [ 138.823318][ T4965] loop2: detected capacity change from 0 to 256 [ 138.827245][ T4959] RAX: ffff888104d83e30 RBX: ffff8881005db788 RCX: ffffffff81c25ef6 [ 138.827268][ T4959] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d26a0 [ 138.852407][ T4959] RBP: 000000000000000b R08: 00018881005db73b R09: 0000000000000000 [ 138.860736][ T4959] R10: ffffc90002f53728 R11: 0001c90002f53728 R12: ffff8881005db738 [ 138.869644][ T4959] R13: ffffffff871d26a0 R14: ffff8881005db6f0 R15: 0000000000000001 [ 138.877896][ T4959] FS: 00007f66fc01f6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 138.887473][ T4959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.894184][ T4959] CR2: 0000001b32d23ffc CR3: 000000014a3f8000 CR4: 00000000003506f0 [ 138.902267][ T4959] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.910345][ T4959] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 138.920488][ T4959] Call Trace: [ 138.924225][ T4959] [ 138.927222][ T4959] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 138.933738][ T4959] ext4_xattr_delete_inode+0x6b5/0x790 [ 138.938065][ T4965] vfat: Unknown parameter 'check.relaxed' [ 138.945359][ T4959] ext4_evict_inode+0xb18/0xdf0 [ 138.950420][ T4959] ? __pfx_ext4_evict_inode+0x10/0x10 [ 138.956056][ T4959] evict+0x2a5/0x510 [ 138.960297][ T4959] iput+0x430/0x5a0 [ 138.964376][ T4959] ext4_process_orphan+0x1a4/0x1c0 [ 138.969704][ T4959] ext4_orphan_cleanup+0x6a6/0xa10 [ 138.975066][ T4959] ? ext4_register_li_request+0x403/0x440 [ 138.981268][ T4959] ext4_fill_super+0x33d5/0x3780 [ 138.986763][ T4959] ? set_blocksize+0x14c/0x270 [ 138.991715][ T4959] ? __pfx_ext4_fill_super+0x10/0x10 [ 138.997420][ T4959] get_tree_bdev_flags+0x291/0x300 [ 139.002691][ T4959] ? __pfx_ext4_fill_super+0x10/0x10 [ 139.008368][ T4959] get_tree_bdev+0x1f/0x30 [ 139.016525][ T4959] ext4_get_tree+0x1c/0x30 [ 139.021226][ T4959] vfs_get_tree+0x57/0x1d0 [ 139.025941][ T4959] do_new_mount+0x288/0x8d0 [ 139.030736][ T4959] path_mount+0x4ad/0xb90 [ 139.035369][ T4959] __se_sys_mount+0x28c/0x2e0 [ 139.040153][ T4959] __x64_sys_mount+0x67/0x80 [ 139.044803][ T4959] x64_sys_call+0x2d61/0x3020 [ 139.049651][ T4959] do_syscall_64+0x136/0x3c0 [ 139.054496][ T4959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.060542][ T4959] RIP: 0033:0x7f66fd5ce0ca [ 139.065008][ T4959] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.086239][ T4959] RSP: 002b:00007f66fc01ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.096550][ T4959] RAX: ffffffffffffffda RBX: 00007f66fc01eee0 RCX: 00007f66fd5ce0ca [ 139.105029][ T4959] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f66fc01eea0 [ 139.113127][ T4959] RBP: 0000200000000180 R08: 00007f66fc01eee0 R09: 0000000000000000 [ 139.121284][ T4959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 139.129966][ T4959] R13: 00007f66fc01eea0 R14: 0000000000000476 R15: 00002000000001c0 [ 139.138220][ T4959] [ 139.141343][ T4959] ---[ end trace 0000000000000000 ]--- [ 139.174894][ T28] audit: type=1326 audit(1781827134.079:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.1.409" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 139.217522][ T4959] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.406: bit already cleared for inode 11 [ 139.238248][ T4959] loop4: lost filesystem error report for type 5 error -117 [ 139.238500][ T4959] EXT4-fs (loop4): 1 orphan inode deleted [ 139.261513][ T28] audit: type=1326 audit(1781827134.159:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.1.409" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 139.300417][ T4959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.320069][ T28] audit: type=1326 audit(1781827134.159:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.1.409" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 139.410428][ T28] audit: type=1326 audit(1781827134.159:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.1.409" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 139.484788][ T28] audit: type=1326 audit(1781827134.159:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.1.409" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 139.565705][ T28] audit: type=1326 audit(1781827134.159:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.1.409" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 139.632966][ T28] audit: type=1326 audit(1781827134.179:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4966 comm="syz.1.409" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81ed3ace59 code=0x7ffc0000 [ 139.666540][ T4985] loop0: detected capacity change from 0 to 512 [ 139.704951][ T4985] ext4: Unknown parameter 'dont_hash' [ 139.726653][ T28] audit: type=1400 audit(1781827134.219:468): avc: denied { write } for pid=4966 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.763761][ T28] audit: type=1400 audit(1781827134.329:469): avc: denied { recv } for pid=2981 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.91 dest=47576 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 139.796769][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.804363][ T4987] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 140.837819][ T5012] gretap0 speed is unknown, defaulting to 1000 [ 140.892642][ T5012] gretap0 speed is unknown, defaulting to 1000 [ 141.003169][ T5012] gretap0 speed is unknown, defaulting to 1000 [ 141.063741][ T5012] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 141.134727][ T5012] gretap0 speed is unknown, defaulting to 1000 [ 141.185542][ T5012] gretap0 speed is unknown, defaulting to 1000 [ 141.221046][ T5012] gretap0 speed is unknown, defaulting to 1000 [ 141.249659][ T5012] gretap0 speed is unknown, defaulting to 1000 [ 141.286342][ T5012] gretap0 speed is unknown, defaulting to 1000 [ 141.319902][ T5012] gretap0 speed is unknown, defaulting to 1000 [ 141.589507][ T5029] loop4: detected capacity change from 0 to 512 [ 141.638331][ T5029] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.682492][ T5029] ext4: Unknown parameter 'm' [ 142.561815][ T5037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 142.779546][ T5037] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 143.331944][ T5041] Cannot find add_set index 0 as target [ 143.810254][ C0] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 144.496218][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 144.496239][ T28] audit: type=1400 audit(1781827139.569:472): avc: denied { create } for pid=5063 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 144.750999][ T5068] loop4: detected capacity change from 0 to 128 [ 144.932336][ T28] audit: type=1400 audit(1781827139.999:473): avc: denied { ioctl } for pid=5074 comm="syz.1.439" path="socket:[9827]" dev="sockfs" ino=9827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.063003][ T5081] syzkaller0: entered promiscuous mode [ 145.071826][ T5068] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.071883][ T5081] syzkaller0: entered allmulticast mode [ 145.123382][ T5081] 0: reclassify loop, rule prio 0, protocol 800 [ 145.127648][ T5068] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.214226][ T5072] syz.0.438 (5072): /proc/5071/oom_adj is deprecated, please use /proc/5071/oom_score_adj instead. [ 145.544467][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.681669][ T5087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.444'. [ 145.810207][ C0] Dead loop on virtual device ip6_vti0 (net 37), fix it urgently! [ 145.896737][ T28] audit: type=1400 audit(1781827140.899:474): avc: denied { getopt } for pid=5085 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.900736][ C0] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 146.298529][ T28] audit: type=1400 audit(1781827141.269:475): avc: denied { getopt } for pid=5093 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.679253][ T5105] sctp: [Deprecated]: syz.1.448 (pid 5105) Use of int in maxseg socket option. [ 146.679253][ T5105] Use struct sctp_assoc_value instead [ 146.713851][ T28] audit: type=1400 audit(1781827141.289:476): avc: denied { mounton } for pid=5093 comm="syz.2.445" path="/84/file0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.818309][ T28] audit: type=1326 audit(1781827141.449:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.0.447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5094eece59 code=0x7ffc0000 [ 146.889609][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 146.937578][ T28] audit: type=1326 audit(1781827141.449:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.0.447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5094eece59 code=0x7ffc0000 [ 146.969429][ T5118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'. [ 147.000615][ T5113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.022089][ T28] audit: type=1326 audit(1781827141.469:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.0.447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5094eece59 code=0x7ffc0000 [ 147.084460][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 147.127318][ T5118] bond1: entered promiscuous mode [ 147.147441][ T28] audit: type=1326 audit(1781827141.469:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.0.447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5094eece59 code=0x7ffc0000 [ 147.178250][ T5118] bond1: entered allmulticast mode [ 147.205899][ T5113] batman_adv: batadv0: Interface deactivated: dummy0 [ 147.224052][ T5113] batman_adv: batadv0: Removing interface: dummy0 [ 147.249571][ T5124] loop3: detected capacity change from 0 to 128 [ 147.261495][ T5113] dummy0: entered promiscuous mode [ 147.266960][ T28] audit: type=1326 audit(1781827141.469:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.0.447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5094eece59 code=0x7ffc0000 [ 147.298049][ T5113] dummy0: entered allmulticast mode [ 147.308717][ T5124] /dev/loop3: Can't open blockdev [ 147.317516][ T5113] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 147.355176][ T5120] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 147.376042][ T5120] dummy0: left promiscuous mode [ 147.386680][ T5120] dummy0: left allmulticast mode [ 147.399707][ T5120] bond1 (unregistering): Released all slaves [ 147.579371][ T5127] loop0: detected capacity change from 0 to 128 [ 147.765368][ T5127] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.049548][ T5127] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.120260][ T5132] gre0 speed is unknown, defaulting to 1000 [ 148.499660][ T5132] gretap0 speed is unknown, defaulting to 1000 [ 149.737297][ T5148] syzkaller0: entered promiscuous mode [ 149.755189][ T5148] syzkaller0: entered allmulticast mode [ 149.980499][ C0] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 150.215528][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.330550][ T5156] usb usb8: usbfs: process 5156 (syz.4.462) did not claim interface 2 before use [ 150.537525][ T3617] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.567094][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 151.567117][ T28] audit: type=1400 audit(1781827146.639:513): avc: denied { read } for pid=5191 comm="syz.4.475" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 151.645084][ T5192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.475'. [ 151.690314][ T28] audit: type=1400 audit(1781827146.639:514): avc: denied { open } for pid=5191 comm="syz.4.475" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 151.752327][ T28] audit: type=1400 audit(1781827146.679:515): avc: denied { create } for pid=5188 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.870875][ T5195] loop3: detected capacity change from 0 to 128 [ 152.204279][ T5195] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.254235][ T28] audit: type=1400 audit(1781827147.309:516): avc: denied { egress } for pid=5194 comm="syz.3.476" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 152.417161][ T28] audit: type=1400 audit(1781827147.309:517): avc: denied { sendto } for pid=5194 comm="syz.3.476" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 152.508082][ T5195] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.614440][ T3660] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.634914][ T28] audit: type=1326 audit(1781827147.379:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.2.479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079e60ce59 code=0x7ffc0000 [ 152.743407][ T28] audit: type=1326 audit(1781827147.379:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.2.479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079e60ce59 code=0x7ffc0000 [ 152.856463][ T28] audit: type=1326 audit(1781827147.389:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.2.479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f079e60ce59 code=0x7ffc0000 [ 152.996159][ T28] audit: type=1326 audit(1781827147.389:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.2.479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079e60ce59 code=0x7ffc0000 [ 153.124488][ T28] audit: type=1326 audit(1781827147.399:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5205 comm="syz.2.479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f079e60ce59 code=0x7ffc0000 [ 153.392284][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.421648][ T5243] netlink: 'syz.1.485': attribute type 1 has an invalid length. [ 154.451113][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 155.667788][ T5258] syzkaller0: entered promiscuous mode [ 155.810421][ T5258] syzkaller0: entered allmulticast mode [ 155.823022][ T5260] loop4: detected capacity change from 0 to 512 [ 156.204542][ T5260] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.414932][ T5260] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.491: bad orphan inode 131083 [ 156.451026][ T5251] loop2: detected capacity change from 0 to 512 [ 156.482899][ T5260] loop4: lost filesystem error report for type 5 error -117 [ 156.488319][ T5260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.633129][ T5251] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.490: bad orphan inode 15 [ 156.669221][ T5251] loop2: lost filesystem error report for type 5 error -117 [ 156.675030][ T3603] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.683197][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 156.683219][ C0] EXT4-fs (loop2): initial error at time 1781827151: ext4_orphan_get:1425 [ 156.683240][ C0] EXT4-fs (loop2): last error at time 1781827151: ext4_orphan_get:1425 [ 156.719572][ T5251] ext4_test_bit(bit=14, block=5) = 0 [ 156.798577][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 156.798598][ T28] audit: type=1400 audit(1781827151.869:547): avc: denied { mount } for pid=5268 comm="syz.1.495" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 156.804942][ T5251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.861673][ T3603] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.881640][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.900600][ T3603] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.912425][ T3603] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.995069][ T5251] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.490: reserved inode found cleared - inode=1 [ 157.051754][ T28] audit: type=1400 audit(1781827152.059:548): avc: denied { write } for pid=5246 comm="syz.2.490" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.100029][ T28] audit: type=1400 audit(1781827152.069:549): avc: denied { create } for pid=5246 comm="syz.2.490" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 157.195429][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.257184][ T28] audit: type=1400 audit(1781827152.289:550): avc: denied { allowed } for pid=5278 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 157.402337][ T28] audit: type=1400 audit(1781827152.479:551): avc: denied { create } for pid=5282 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.630730][ T28] audit: type=1400 audit(1781827152.699:552): avc: denied { map } for pid=5280 comm="syz.4.499" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.205943][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 158.294773][ T28] audit: type=1400 audit(1781827153.359:553): avc: denied { bind } for pid=5312 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.480533][ T5331] loop0: detected capacity change from 0 to 128 [ 158.526932][ T28] audit: type=1400 audit(1781827153.599:554): avc: denied { ioctl } for pid=5332 comm="syz.4.510" path="socket:[11267]" dev="sockfs" ino=11267 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.554238][ T5333] netlink: 14 bytes leftover after parsing attributes in process `syz.4.510'. [ 158.567217][ T5333] batman_adv: batadv0: Interface deactivated: dummy0 [ 158.575072][ T5336] syz.0.509: attempt to access beyond end of device [ 158.575072][ T5336] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 158.576213][ T28] audit: type=1400 audit(1781827153.629:555): avc: denied { bind } for pid=5332 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.589902][ T5336] syz.0.509: attempt to access beyond end of device [ 158.589902][ T5336] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 158.623238][ C0] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 158.631935][ T5336] syz.0.509: attempt to access beyond end of device [ 158.631935][ T5336] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 158.632364][ T5333] batman_adv: batadv0: Removing interface: dummy0 [ 158.646868][ T5336] syz.0.509: attempt to access beyond end of device [ 158.646868][ T5336] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 158.674338][ T5336] syz.0.509: attempt to access beyond end of device [ 158.674338][ T5336] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 158.688815][ T5336] syz.0.509: attempt to access beyond end of device [ 158.688815][ T5336] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 158.703453][ T5336] syz.0.509: attempt to access beyond end of device [ 158.703453][ T5336] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 158.732768][ T5336] syz.0.509: attempt to access beyond end of device [ 158.732768][ T5336] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 158.745295][ T5331] random: crng reseeded on system resumption [ 158.753653][ T28] audit: type=1400 audit(1781827153.809:556): avc: denied { write } for pid=5330 comm="syz.0.509" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.753769][ T5336] syz.0.509: attempt to access beyond end of device [ 158.753769][ T5336] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 158.753861][ T5336] syz.0.509: attempt to access beyond end of device [ 158.753861][ T5336] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 159.109965][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.513'. [ 159.985682][ T5366] netlink: 44 bytes leftover after parsing attributes in process `syz.1.516'. [ 160.293424][ T5371] loop2: detected capacity change from 0 to 32768 [ 160.337448][ T5371] loop2: p1 p3 < > [ 160.567828][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 160.579962][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 160.730106][ T5363] ================================================================== [ 160.738278][ T5363] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 160.745699][ T5363] [ 160.748081][ T5363] write to 0xffff888103698918 of 4 bytes by task 5367 on cpu 0: [ 160.755893][ T5363] touch_atime+0x1cb/0x300 [ 160.760408][ T5363] shmem_file_read_iter+0x3ed/0x4b0 [ 160.765763][ T5363] copy_splice_read+0x47a/0x6b0 [ 160.770739][ T5363] splice_direct_to_actor+0x27c/0x680 [ 160.776735][ T5363] do_splice_direct+0x119/0x1a0 [ 160.781639][ T5363] do_sendfile+0x37d/0x640 [ 160.786117][ T5363] __x64_sys_sendfile64+0x105/0x150 [ 160.791392][ T5363] x64_sys_call+0x2dc4/0x3020 [ 160.796136][ T5363] do_syscall_64+0x136/0x3c0 [ 160.800787][ T5363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.806750][ T5363] [ 160.809138][ T5363] read to 0xffff888103698918 of 4 bytes by task 5363 on cpu 1: [ 160.816722][ T5363] atime_needs_update+0x25f/0x3e0 [ 160.821807][ T5363] touch_atime+0x4a/0x300 [ 160.826196][ T5363] shmem_file_read_iter+0x3ed/0x4b0 [ 160.826218][ T5394] siw: device registration error -23 [ 160.837457][ T5363] copy_splice_read+0x47a/0x6b0 [ 160.842379][ T5363] splice_direct_to_actor+0x27c/0x680 [ 160.847824][ T5363] do_splice_direct+0x119/0x1a0 [ 160.852750][ T5363] do_sendfile+0x37d/0x640 [ 160.857620][ T5363] __x64_sys_sendfile64+0x105/0x150 [ 160.862873][ T5363] x64_sys_call+0x2dc4/0x3020 [ 160.867597][ T5363] do_syscall_64+0x136/0x3c0 [ 160.872243][ T5363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.878494][ T5363] [ 160.880856][ T5363] value changed: 0x2fec638c -> 0x303fe825 [ 160.886614][ T5363] [ 160.888970][ T5363] Reported by Kernel Concurrency Sanitizer on: [ 160.895159][ T5363] CPU: 1 UID: 0 PID: 5363 Comm: syz.4.523 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 160.906064][ T5363] Tainted: [W]=WARN [ 160.909974][ T5363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.920152][ T5363] ================================================================== [ 160.934772][ T5392] syzkaller0: entered promiscuous mode [ 160.940921][ T5392] syzkaller0: entered allmulticast mode [ 162.450233][ C0] Dead loop on virtual device ip6_vti0 (net 37), fix it urgently!