last executing test programs: 4m44.352706636s ago: executing program 32 (id=127): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_enter(0xffffffffffffffff, 0x39bd, 0x5881, 0x4, 0x0, 0x0) read$msr(r0, &(0x7f00000004c0)=""/4096, 0x1000) 4m25.636208614s ago: executing program 3 (id=618): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0xffe4, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 4m25.498242436s ago: executing program 3 (id=629): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x20, 0x0}, 0x10) 4m25.351510549s ago: executing program 3 (id=631): r0 = io_uring_setup(0xcd7, &(0x7f0000000000)={0x0, 0x1c38, 0x400, 0x8000006, 0x60}) close_range(r0, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) accept(r1, 0x0, 0x0) 4m24.504447453s ago: executing program 3 (id=668): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 4m24.453027738s ago: executing program 3 (id=670): r0 = inotify_init1(0x80000) r1 = dup(r0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x208000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',n', @ANYRESHEX=0x0]) 4m24.235984577s ago: executing program 3 (id=676): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4m24.215734929s ago: executing program 33 (id=676): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4m13.768335388s ago: executing program 2 (id=970): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @dev, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000740)={0x1, 0x8}, 0x8) close(r0) 4m13.750535109s ago: executing program 2 (id=973): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 4m13.717355042s ago: executing program 2 (id=975): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_io_uring_setup(0x49b, &(0x7f0000000440)={0x0, 0x237b, 0x80, 0x0, 0x148}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@ll={0x11, 0x11, 0x0, 0x1, 0xd, 0x6, @random="91e6a17f5833"}, 0x80, 0x0}, 0x0, 0x8040}) io_uring_enter(r1, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 4m13.673438426s ago: executing program 2 (id=978): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m13.593723113s ago: executing program 2 (id=980): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4m13.423714717s ago: executing program 2 (id=989): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) 4m13.3967146s ago: executing program 34 (id=989): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) 3m16.161965762s ago: executing program 7 (id=2350): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0xfa7, 0x2003) 3m16.120887896s ago: executing program 7 (id=2351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 3m16.056003032s ago: executing program 7 (id=2352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfffd, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20048054) 3m16.014672915s ago: executing program 7 (id=2353): syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r1, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f00000000c0)="20f18043", 0x4, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x40, r0, 0x0, 0x0, 0x1}]) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x25e, &(0x7f0000000ec0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m15.763384127s ago: executing program 7 (id=2358): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 3m15.492103171s ago: executing program 7 (id=2359): socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) 3m15.491966141s ago: executing program 35 (id=2359): socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) 3m7.488908285s ago: executing program 1 (id=2548): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) close(r0) 3m7.264607074s ago: executing program 1 (id=2555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3m7.147790825s ago: executing program 1 (id=2560): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028005000900040000001400030000000000000000000000ff"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3m7.112718258s ago: executing program 1 (id=2563): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@sb={'sb', 0x3d, 0x1}}, {@lazytime}]}, 0x2, 0x467, &(0x7f0000000fc0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 3m6.86042109s ago: executing program 1 (id=2567): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00h'], 0x2c}}, 0x4000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m5.992063327s ago: executing program 1 (id=2585): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/235, 0xeb}}], 0x1, 0x10020, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 3m5.991916846s ago: executing program 36 (id=2585): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/235, 0xeb}}], 0x1, 0x10020, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 2m48.700050417s ago: executing program 9 (id=2968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 2m48.632114893s ago: executing program 9 (id=2969): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100), 0x8) 2m48.593097876s ago: executing program 9 (id=2972): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2m47.960872531s ago: executing program 9 (id=2981): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@sb={'sb', 0x3d, 0x1}}, {@lazytime}]}, 0x2, 0x467, &(0x7f0000000fc0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 2m47.606602583s ago: executing program 9 (id=2986): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003"], 0xe8}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 2m47.235178466s ago: executing program 9 (id=2997): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e20, 0x80, 0x2, 0xa0, 0xa0, 0x29}, {0x104, 0x5, 0xb702, 0x9, 0x0, 0x2000002, 0x7, 0x4}, {0x401, 0x5, 0x6, 0x2}, 0x0, 0xfffffffe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x9, 0x8, 0x0, 0x6}}, 0xe8) r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 2m47.188861289s ago: executing program 37 (id=2997): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e20, 0x80, 0x2, 0xa0, 0xa0, 0x29}, {0x104, 0x5, 0xb702, 0x9, 0x0, 0x2000002, 0x7, 0x4}, {0x401, 0x5, 0x6, 0x2}, 0x0, 0xfffffffe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x9, 0x8, 0x0, 0x6}}, 0xe8) r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 2.572352633s ago: executing program 4 (id=7337): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0x4006d1c, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x1, 0x7e77, 0x8000000a}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 1.729094957s ago: executing program 4 (id=7361): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3, 0x7}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x26}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) syz_read_part_table(0x406c, &(0x7f000000c180)="$eJzszzFKxEAYBeCXzYZECSyCVoIoFraxs8ottpc9g5WFirmJpXgA7+EdLD2DVVbWCBYi4vJ91TzePz8z4a+V307Um7FI8rx62ktyfJKh65ImyXzsdz5Gu/NUu80sbZKr6eLl4w/fDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/F+zJPU63SYZXq7Pxtysm9Vhhps+F23SHCyS+zJVf1RkP/Mv95bJa5IiyVuS5eK3PwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbIfLjVR/rtvxcDe9+nCaoa/e2Z1DAwBAKISCRBd0SZfEZvb3u0rgvbVtv29Xss+0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCyAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//RwoVBA==") socket$nl_netfilter(0x10, 0x3, 0xc) 1.59010536s ago: executing program 8 (id=7370): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0xa, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) wait4(0x0, 0x0, 0x20000000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x40044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.386247588s ago: executing program 8 (id=7375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xa}, {0xc, 0x4}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.230219411s ago: executing program 8 (id=7380): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) 1.077929814s ago: executing program 4 (id=7383): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb197dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb2", 0x86}], 0x2}}], 0x1, 0x2010) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.055450056s ago: executing program 4 (id=7384): socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff7}}}, 0x24}}, 0x0) r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 973.337204ms ago: executing program 4 (id=7386): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x8, 0x4) 882.189312ms ago: executing program 0 (id=7389): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 694.485158ms ago: executing program 8 (id=7392): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 644.399043ms ago: executing program 8 (id=7393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 644.186533ms ago: executing program 5 (id=7394): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000540)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x44080, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8) 594.771117ms ago: executing program 6 (id=7395): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) 496.052755ms ago: executing program 6 (id=7397): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 391.535265ms ago: executing program 0 (id=7398): setfsgid(0xee00) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@noauto_da_alloc}, {@norecovery}]}, 0xff, 0x56a, &(0x7f00000015c0)="$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") 391.292805ms ago: executing program 6 (id=7399): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x40a, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000000000018"], 0x38}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x11, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 390.735915ms ago: executing program 5 (id=7400): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0) 313.289562ms ago: executing program 5 (id=7401): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x208810, &(0x7f0000000100), 0xff, 0x4c4, &(0x7f00000001c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 254.085237ms ago: executing program 6 (id=7402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000440)="4791c70a5ae532", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0xffbf) 253.665257ms ago: executing program 5 (id=7403): socket(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0x7ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 244.442748ms ago: executing program 8 (id=7404): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto, @datasec={0x3, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x2}], "34aa"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "0374"}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/143, 0x51, 0x8f, 0x1}, 0x20) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = syz_io_uring_setup(0x3ce8, &(0x7f00000000c0)={0x0, 0x20000, 0x800, 0x0, 0x42}, &(0x7f0000000140)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r2, 0x1) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0xff0b) 188.589663ms ago: executing program 0 (id=7405): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 188.281533ms ago: executing program 5 (id=7406): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x82) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = dup(r1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480), 0x4080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 169.817844ms ago: executing program 4 (id=7407): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00') fchdir(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3M9vFNcdAPDvrtc2LlC79Be/WralVa1Wxdj8PPQAqJW4VKrUqqLHrW0QxUCFXQksq5iqAqmHVvwF/XGrlL8gp+QSJVEOiXIF5RpFQpEvkByiiWZ3ZrPr3bXXZu2V8ecjzfJm5s3M+87Mw2/e29kAdq1y+lGI2BcRTyJitDbbnKFc++fFytL0ZytL04VIkt9+Wqjme76yNJ1nzbfbm82MFyOKfy/EkdbDDs/fW7xRmZubvZMtmFgoZqmblWuz12ZvTZ0/f/rUyLmzU2d6EmdapueH/3r76KHLf3j86+krj//4zmtpeZNsfWMcNWPVz6GujzDQsqQc5eZz2eDH3Rd9R9jfkC6U0s9i/wpD19K7tpTV3ScxGgPVuZrR+NXf+lo4YEslSZIMtyyt/y1bThoVCrUNkuRBArwCCtHvEgD9kf+hf76SPgEsTbc+B7/anl2M6hNQGveLbKqtKVWfYMtjEYNRm7bCtyLiyvLn/06naNsPAQDQW29cjHh0qdbuyKfammJ8pyHf17OxobGI+EZEHIiIb2btl29HVPN+NyIONmyzv4tRgPKq+db2zwcjWaKxudozafvvF9nYVnP7r17ysYFsbn81/sHC1etzsyezczIeg8Pp/GTrruvdam/+8sN/dTp+uaH9l07p8fO2YFaOT0qrOuhmKguVl4079+xB9cTeb42/EKVCnoo4FBGHN7H/9Jxd/+n/j3Za3xR/GmdL/P/svPPSJgq0SvLfiJ/Urv9yVOPP+z5rwQ9lqYmFm3+emL+3+PPrjeOTk+fOTp2Z2BNzsycn8rui1bvvP/xNlmx5jGi+/knScP3zqrGlA2np9f9a2/u/PnI5lqbq47XzGz/Gw6ePOj7TbPb+Hyr8rprOx2fvVhYW7kxGDBWWW5dPfbXt3cpIU/40/vHj7ev/gYgv/pNtdyQi0pv4exHx/Yg4lpX9BxHxw4g4vkb8b1/60Z86PUKuH//WSuOf2dD1v7c4ElmiviRNXHgvonlJnhi48dbrLQf+R7kl/sHodP1PV1Pj2ZKZysKe9eJqU8C2iZc+gQAAALADHIuIfVEonsg6mvZFsXjiRMTeeg/K/MLPrt7+y62Z2jsCYzFYzHu6Rhv6QyezvuF0Pt1qqmE+XX+q2m+cJEkyks6nz+9zB/sbOux6ezvU/9THra+0AK+aDY2jdXqjDdiRVtf/p11v2fsvZADbqwffowF2KPUfdq+u6/9WvQUH9E27+n8/4kUfigJss3b1//ctSy5sS1mA7dWu/hv7h91h8/1/vgwAO53+f9iVunpJfhOJA5fXyFModbefUtev8a+XKMbavwIwFvXfNMjbNGvv8KNiRG/O2EBPz/xI0zUtts2zJ3pxrCium6e0gR9i2N5EsTI3l7/g0vfyDEfEOndv/Wa7nycWt7pg1XPzv/79zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAbXwYAAP//363OhA==") 125.781468ms ago: executing program 5 (id=7408): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpriority(0x2, 0x80000000) ptrace$peekuser(0x3, 0x0, 0x80) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001a80)={0xffffffffffffffff, 0x8, {0x0, 0x0, 0x0, 0x40, 0xfffffffffffffff7, 0x0, 0x2, 0x1c, 0x8, "5f858fc6427ddc12a66a32719b249016f1ea4c7f2493ae5f93090728e69ad5266469a797efa4941d9ddab6c120049d548d48dcd892468fea89997ad802b7c9a6", "a03acbf5100ba06d1e381a32e3346a2fb2a6581922f039986156d413f3246ba1b5b7d55e5063791d2bc83b8a5075df1514240fc48c57eefe94d34f738d61bddb", "acb275ebe9e7c62f2d4c8153ff0afdf94753d0850ae9bc27820c0c39c7f87fb7", [0x80000001, 0xb]}}) openat$urandom(0xffffffffffffff9c, 0x0, 0x8000, 0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) 90.634131ms ago: executing program 6 (id=7409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') 87.898041ms ago: executing program 0 (id=7419): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="9a", 0x1}], 0x1) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 46.970955ms ago: executing program 6 (id=7410): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 46.554016ms ago: executing program 0 (id=7411): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}]}, 0x34}}, 0x0) 0s ago: executing program 0 (id=7412): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0xfffffff9, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/137, 0x89}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/23, 0x17}, 0x80}], 0x2, 0x45833af92e4b39ff, 0x0) kernel console output (not intermixed with test programs): N> HID v0.00 Device [syz1] on syz0 [ 198.952394][T14635] bond5: option miimon: invalid value (18446744073709551615) [ 198.986200][T14635] bond5: option miimon: allowed values 0 - 2147483647 [ 199.014278][T14635] bond5 (unregistering): Released all slaves [ 199.388019][ T5897] Bluetooth: hci0: Frame reassembly failed (-84) [ 199.658597][T14693] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.4164'. [ 199.715583][T14700] loop6: detected capacity change from 0 to 128 [ 199.723727][T14700] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.776281][ T9063] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.825809][T14768] bond5: option miimon: invalid value (18446744073709551615) [ 200.833496][T14768] bond5: option miimon: allowed values 0 - 2147483647 [ 200.847002][T14768] bond5 (unregistering): Released all slaves [ 201.002779][T14783] loop0: detected capacity change from 0 to 512 [ 201.028304][T14783] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.4201: corrupted in-inode xattr: e_value out of bounds [ 201.059841][T14783] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 201.059938][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 201.075561][ C1] EXT4-fs (loop0): initial error at time 1771880813: ext4_iget_extra_inode:5025: inode 15 [ 201.085592][ C1] EXT4-fs (loop0): last error at time 1771880813: ext4_iget_extra_inode:5025: inode 15 [ 201.097841][T14787] syz_tun: entered allmulticast mode [ 201.104413][T14786] syz_tun: left allmulticast mode [ 201.129614][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4203'. [ 201.138311][T14783] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4201: couldn't read orphan inode 15 (err -117) [ 201.160311][T14783] loop0: lost filesystem error report for type 5 error -117 [ 201.160780][T14783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.205469][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.309055][T14801] loop6: detected capacity change from 0 to 1764 [ 201.340422][T14801] iso9660: Unknown parameter '' [ 201.400337][ T3528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.456664][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 201.456678][ T28] audit: type=1400 audit(1771880814.189:8489): avc: denied { read } for pid=14809 comm="syz.8.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 201.566570][T14819] loop6: detected capacity change from 0 to 2048 [ 201.635533][T14819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.711680][T14828] loop8: detected capacity change from 0 to 164 [ 202.151799][ T28] audit: type=1400 audit(1771880814.889:8490): avc: denied { watch } for pid=14844 comm="syz.5.4228" path="/808/file0" dev="tmpfs" ino=4197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 202.494757][T14819] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4217: bg 0: block 234: padding at end of block bitmap is not set [ 202.500113][T14865] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4236'. [ 202.528652][T14819] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 202.551574][T14869] loop8: detected capacity change from 0 to 512 [ 202.558133][T14819] EXT4-fs (loop6): This should not happen!! Data will be lost [ 202.558133][T14819] [ 202.580040][T14819] EXT4-fs (loop6): Total free blocks count 0 [ 202.587523][T14819] EXT4-fs (loop6): Free/Dirty block details [ 202.603497][T14819] EXT4-fs (loop6): free_blocks=0 [ 202.608512][T14819] EXT4-fs (loop6): dirty_blocks=8032 [ 202.613944][T14819] EXT4-fs (loop6): Block reservation details [ 202.615145][T14869] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.619969][T14819] EXT4-fs (loop6): i_reserved_data_blocks=502 [ 202.654937][ T5895] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 202.660103][T14869] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.680321][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4238'. [ 202.726053][ T28] audit: type=1400 audit(1771880815.459:8491): avc: denied { rename } for pid=14868 comm="syz.8.4237" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.731108][T14875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.792342][ T9680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.914618][T14880] hsr1: left promiscuous mode [ 202.969247][ T28] audit: type=1400 audit(1771880815.699:8492): avc: denied { getopt } for pid=14889 comm="syz.6.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.002487][ T28] audit: type=1326 audit(1771880815.739:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.0.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbb8ec629 code=0x7ffc0000 [ 203.028277][ T28] audit: type=1326 audit(1771880815.739:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.0.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbb8ec629 code=0x7ffc0000 [ 203.053157][ T28] audit: type=1326 audit(1771880815.739:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.0.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fccbb8ec629 code=0x7ffc0000 [ 203.077284][ T28] audit: type=1326 audit(1771880815.739:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.0.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbb8ec629 code=0x7ffc0000 [ 203.121707][ T28] audit: type=1326 audit(1771880815.739:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.0.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbb8ec629 code=0x7ffc0000 [ 203.179165][ T28] audit: type=1326 audit(1771880815.739:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.0.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fccbb8ec629 code=0x7ffc0000 [ 203.355013][T14904] loop0: detected capacity change from 0 to 1024 [ 203.373325][T14904] EXT4-fs: Ignoring removed nobh option [ 203.386755][T14904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.442681][T14904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.456950][T14904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.464464][T14904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.612466][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.968203][T14976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.982951][T14976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.125571][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4279'. [ 204.139401][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4279'. [ 204.172126][T14989] loop8: detected capacity change from 0 to 512 [ 204.194731][T14989] EXT4-fs: Ignoring removed orlov option [ 204.203746][T14989] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 204.220039][T14989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 204.230036][T14989] System zones: 1-12 [ 204.234209][T14989] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.4278: corrupted in-inode xattr: e_value size too large [ 204.248690][T14989] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.248852][T14989] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4278: couldn't read orphan inode 15 (err -117) [ 204.258007][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 204.258023][ C0] EXT4-fs (loop8): initial error at time 1771880816: ext4_iget_extra_inode:5025: inode 15 [ 204.258049][ C0] EXT4-fs (loop8): last error at time 1771880816: ext4_iget_extra_inode:5025: inode 15 [ 204.296109][T14989] loop8: lost filesystem error report for type 5 error -117 [ 204.296744][T14989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.343734][ T9680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.370844][T15001] loop8: detected capacity change from 0 to 128 [ 204.829638][T15027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.847716][T15027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.227330][T15052] loop8: detected capacity change from 0 to 1764 [ 205.249706][T15052] ISOFS: Unable to identify CD-ROM format. [ 205.373677][ T3403] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.583970][ T3403] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.671329][T15078] netlink: 'syz.6.4316': attribute type 1 has an invalid length. [ 205.697177][T15078] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.280152][ T9065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.590083][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4339'. [ 206.620400][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4339'. [ 207.320320][ T5890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.332551][ T5890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.357359][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 207.357374][ T28] audit: type=1326 audit(1771880820.089:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.0.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbb8ec629 code=0x7ffc0000 [ 207.437778][ T28] audit: type=1326 audit(1771880820.089:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.0.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fccbb8ec629 code=0x7ffc0000 [ 207.484659][ T28] audit: type=1326 audit(1771880820.129:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.0.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbb8ec629 code=0x7ffc0000 [ 207.484747][ T28] audit: type=1326 audit(1771880820.129:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.0.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbb8ec629 code=0x7ffc0000 [ 207.497518][T15162] loop0: detected capacity change from 0 to 2048 [ 207.532175][T15162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.935093][T15162] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4352: bg 0: block 234: padding at end of block bitmap is not set [ 207.950589][T15162] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 207.978698][T15162] EXT4-fs (loop0): This should not happen!! Data will be lost [ 207.978698][T15162] [ 207.988438][T15162] EXT4-fs (loop0): Total free blocks count 0 [ 207.994517][T15162] EXT4-fs (loop0): Free/Dirty block details [ 208.000786][T15162] EXT4-fs (loop0): free_blocks=0 [ 208.007616][T15162] EXT4-fs (loop0): dirty_blocks=8192 [ 208.012942][T15162] EXT4-fs (loop0): Block reservation details [ 208.018945][T15162] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 208.040041][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 208.114190][ T9063] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 208.460659][T15206] bond2: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 208.477595][T15206] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.527458][T15206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.684150][ T28] audit: type=1400 audit(1771880821.419:8505): avc: denied { setopt } for pid=15222 comm="syz.6.4378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 208.732301][T15227] loop5: detected capacity change from 0 to 7 [ 209.002404][T15254] loop6: detected capacity change from 0 to 512 [ 209.017525][T15254] EXT4-fs: Ignoring removed oldalloc option [ 209.034699][T15254] EXT4-fs (loop6): 1 truncate cleaned up [ 209.050378][T15254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.072535][T15254] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.4390: invalid indirect mapped block 234881024 (level 0) [ 209.096646][T15254] EXT4-fs (loop6): Remounting filesystem read-only [ 209.137113][ T5201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.275271][T15271] loop8: detected capacity change from 0 to 512 [ 209.291475][ T28] audit: type=1326 audit(1771880822.019:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f795c629 code=0x7ffc0000 [ 209.325328][T15271] EXT4-fs: Ignoring removed bh option [ 209.340597][T15271] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 209.348879][ T28] audit: type=1326 audit(1771880822.019:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f795c629 code=0x7ffc0000 [ 209.373718][T15271] EXT4-fs (loop8): 1 truncate cleaned up [ 209.379847][T15271] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.380052][ T28] audit: type=1326 audit(1771880822.059:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f795c629 code=0x7ffc0000 [ 209.415952][ T28] audit: type=1326 audit(1771880822.059:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8f795c629 code=0x7ffc0000 [ 209.441028][ T28] audit: type=1326 audit(1771880822.059:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.4.4397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc8f795c629 code=0x7ffc0000 [ 209.488506][ T9680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.405591][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4425'. [ 211.357418][T10051] Process accounting resumed [ 211.495005][T15415] team0: Port device syz_tun added [ 211.511992][T15415] lo: entered allmulticast mode [ 211.540466][T15415] bond3: (slave lo): Releasing backup interface [ 211.557422][T15415] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 211.567040][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 211.598712][T15421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15421 comm=syz.4.4462 [ 211.612815][T15415] tunl0: entered allmulticast mode [ 211.618570][T15415] gre0: entered allmulticast mode [ 211.641304][T15415] gretap0: entered allmulticast mode [ 211.647409][T15415] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 211.775154][T15430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4466'. [ 212.029226][T15455] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4476'. [ 212.047556][T15455] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4476'. [ 212.075581][T15461] ipip0: entered promiscuous mode [ 212.089995][T15461] ipip0: entered allmulticast mode [ 212.160068][T15465] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4483'. [ 212.364990][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 212.365007][ T28] audit: type=1400 audit(1771880825.099:8611): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.397184][ T28] audit: type=1400 audit(1771880825.099:8612): avc: denied { map_create } for pid=15470 comm="syz.0.4485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 212.443069][ T28] audit: type=1400 audit(1771880825.109:8613): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.467468][ T28] audit: type=1400 audit(1771880825.139:8614): avc: denied { allowed } for pid=15472 comm="syz.5.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 212.539843][ T28] audit: type=1400 audit(1771880825.269:8615): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.592762][ T28] audit: type=1400 audit(1771880825.329:8616): avc: denied { allowed } for pid=15482 comm="syz.5.4491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 212.625914][ T28] audit: type=1400 audit(1771880825.349:8617): avc: denied { allowed } for pid=15482 comm="syz.5.4491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 212.648070][ T28] audit: type=1400 audit(1771880825.389:8618): avc: denied { create } for pid=15485 comm="syz.5.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 212.669575][ T28] audit: type=1400 audit(1771880825.409:8619): avc: denied { open } for pid=15485 comm="syz.5.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 212.735326][ T28] audit: type=1400 audit(1771880825.469:8620): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.941447][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4504'. [ 212.987838][T15516] netlink: 'syz.0.4506': attribute type 1 has an invalid length. [ 213.058126][T15516] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.089091][T15516] bond5: (slave bond6): making interface the new active one [ 213.097006][T15516] bond5: (slave bond6): Enslaving as an active interface with an up link [ 213.204965][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4515'. [ 213.224282][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4515'. [ 213.247050][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4515'. [ 213.259455][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4515'. [ 213.280046][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.340841][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.540010][T15565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4528'. [ 213.846298][T15588] bridge0: port 3(syz_tun) entered disabled state [ 213.853706][T15588] syz_tun: left allmulticast mode [ 213.858769][T15588] syz_tun: left promiscuous mode [ 213.878708][T15588] bridge0: port 3(syz_tun) entered disabled state [ 213.903157][T15588] team0: Port device syz_tun added [ 213.918697][T15594] lo: entered allmulticast mode [ 213.931982][T15594] tunl0: entered allmulticast mode [ 213.949198][T15594] gre0: entered allmulticast mode [ 213.975430][T15594] gretap0: entered allmulticast mode [ 213.982681][T15594] erspan0: entered allmulticast mode [ 213.991889][T15594] ip_vti0: entered allmulticast mode [ 214.010997][T15594] ip6_vti0: entered allmulticast mode [ 214.018105][T15594] sit0: entered allmulticast mode [ 214.025333][T15594] ip6tnl0: entered allmulticast mode [ 214.033135][T15594] ip6gre0: entered allmulticast mode [ 214.048103][T15594] syz_tun: entered allmulticast mode [ 214.097715][T15594] team0: Port device syz_tun removed [ 214.137764][T15594] bridge0: entered allmulticast mode [ 214.149811][T15594] vcan0: entered allmulticast mode [ 214.157138][T15594] bond0: entered allmulticast mode [ 214.162508][T15594] bond_slave_0: entered allmulticast mode [ 214.172776][T15594] bond_slave_1: entered allmulticast mode [ 214.191976][T15594] team0: entered allmulticast mode [ 214.197165][T15594] team_slave_0: entered allmulticast mode [ 214.213495][T15594] team_slave_1: entered allmulticast mode [ 214.231641][T15594] dummy0: entered allmulticast mode [ 214.237249][T15594] nlmon0: entered allmulticast mode [ 214.254266][T15594] caif0: entered allmulticast mode [ 214.269690][T15594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.543415][T15631] geneve3: entered promiscuous mode [ 214.549674][T15631] geneve3: entered allmulticast mode [ 214.560607][ T5897] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.573431][T15633] netlink: 'syz.0.4558': attribute type 4 has an invalid length. [ 214.573427][ T5897] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.573463][ T5897] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.620120][ T5897] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.629292][T15639] netlink: 'syz.0.4558': attribute type 4 has an invalid length. [ 214.766236][T15651] syz_tun: left allmulticast mode [ 214.790826][T15651] syz_tun: left promiscuous mode [ 214.796024][T15651] bridge0: port 3(syz_tun) entered disabled state [ 214.861730][T15651] team0: Port device syz_tun added [ 214.880153][T15658] lo: entered allmulticast mode [ 214.903306][T15658] tunl0: entered allmulticast mode [ 214.931469][T15658] gre0: entered allmulticast mode [ 214.959076][T15658] gretap0: entered allmulticast mode [ 214.970927][T15658] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 215.281068][T15700] team0: Port device syz_tun added [ 215.287833][T15700] lo: entered allmulticast mode [ 215.312273][T15700] tunl0: entered allmulticast mode [ 215.317877][T15700] gre0: entered allmulticast mode [ 215.330335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.389118][T15700] gretap0: entered allmulticast mode [ 215.410502][T15700] erspan0: entered allmulticast mode [ 215.416278][T15700] ip_vti0: entered allmulticast mode [ 215.452592][T15700] ip6_vti0: entered allmulticast mode [ 215.470786][T15700] sit0: entered allmulticast mode [ 215.477929][T15700] ip6tnl0: entered allmulticast mode [ 215.484392][T15700] ip6gre0: entered allmulticast mode [ 215.510501][T15700] syz_tun: entered allmulticast mode [ 215.519179][T15700] team0: Port device syz_tun removed [ 215.534042][T15700] bridge0: entered allmulticast mode [ 215.551056][T15700] vcan0: entered allmulticast mode [ 215.557119][T15700] bond0: entered allmulticast mode [ 215.562517][T15700] bond_slave_0: entered allmulticast mode [ 215.578651][T15700] bond_slave_1: entered allmulticast mode [ 215.590853][T15700] team0: entered allmulticast mode [ 215.599992][T15700] team_slave_0: entered allmulticast mode [ 215.610166][T15700] team_slave_1: entered allmulticast mode [ 215.626885][T15700] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.641532][T15700] dummy0: entered allmulticast mode [ 215.657737][T15700] nlmon0: entered allmulticast mode [ 215.671854][T15700] caif0: entered allmulticast mode [ 215.677009][T15700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.748190][T15735] netlink: 'syz.0.4603': attribute type 7 has an invalid length. [ 215.770181][T15735] netlink: 'syz.0.4603': attribute type 7 has an invalid length. [ 216.482241][T15780] geneve2: entered promiscuous mode [ 216.487690][T15780] geneve2: entered allmulticast mode [ 216.860217][T15811] __nla_validate_parse: 7 callbacks suppressed [ 216.860236][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4635'. [ 216.951330][T15821] netlink: 'syz.8.4639': attribute type 4 has an invalid length. [ 216.961380][T15821] netlink: 'syz.8.4639': attribute type 4 has an invalid length. [ 217.073918][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4649'. [ 217.143238][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4657'. [ 217.160289][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4657'. [ 217.169332][T15856] netlink: 'syz.4.4657': attribute type 7 has an invalid length. [ 217.177951][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4657'. [ 217.188555][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4657'. [ 217.197712][T15856] netlink: 'syz.4.4657': attribute type 7 has an invalid length. [ 217.371770][ T28] kauditd_printk_skb: 351 callbacks suppressed [ 217.371787][ T28] audit: type=1400 audit(1771880830.109:8972): avc: denied { create } for pid=15891 comm="syz.5.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 217.460025][ T28] audit: type=1400 audit(1771880830.159:8973): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 217.584956][ T28] audit: type=1400 audit(1771880830.169:8974): avc: denied { module_request } for pid=15894 comm="syz.6.4675" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 217.627548][ T28] audit: type=1400 audit(1771880830.169:8975): avc: denied { mount } for pid=15894 comm="syz.6.4675" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=0 [ 217.663048][ T28] audit: type=1400 audit(1771880830.189:8976): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 217.699624][ T28] audit: type=1400 audit(1771880830.229:8977): avc: denied { create } for pid=15897 comm="syz.6.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 217.748765][T15918] pim6reg1: entered promiscuous mode [ 217.758887][ T28] audit: type=1400 audit(1771880830.229:8978): avc: denied { open } for pid=15897 comm="syz.6.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 217.775686][T15918] pim6reg1: entered allmulticast mode [ 217.778621][ T28] audit: type=1400 audit(1771880830.229:8979): avc: denied { prog_load } for pid=15897 comm="syz.6.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 217.808590][ T28] audit: type=1400 audit(1771880830.229:8980): avc: denied { kexec_image_load } for pid=15897 comm="syz.6.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=0 [ 217.829385][ T28] audit: type=1400 audit(1771880830.239:8981): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 217.910845][T15929] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.931736][T15929] bond3: (slave lo): Enslaving as an active interface with an up link [ 217.950791][T15929] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 218.097229][T15944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4693'. [ 218.340538][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4704'. [ 218.349579][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4704'. [ 218.358650][T15960] netlink: 'syz.6.4704': attribute type 6 has an invalid length. [ 218.367261][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4704'. [ 218.376356][T15960] netlink: 'syz.6.4704': attribute type 6 has an invalid length. [ 218.716617][T15987] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.943078][T15995] netlink: 'syz.5.4720': attribute type 14 has an invalid length. [ 218.951129][T15995] netlink: 'syz.5.4720': attribute type 14 has an invalid length. [ 219.312648][T16063] netlink: 'syz.8.4752': attribute type 7 has an invalid length. [ 219.324626][T16063] netlink: 'syz.8.4752': attribute type 8 has an invalid length. [ 219.335516][T16063] erspan0: entered promiscuous mode [ 219.343125][T16063] erspan0: left promiscuous mode [ 219.812030][T16109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16109 comm=syz.8.4771 [ 220.439984][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.405692][ T28] kauditd_printk_skb: 373 callbacks suppressed [ 222.405708][ T28] audit: type=1400 audit(1771880835.139:9355): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.469963][ T28] audit: type=1400 audit(1771880835.179:9356): avc: denied { read write } for pid=16343 comm="syz.6.4880" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.542720][ T28] audit: type=1400 audit(1771880835.239:9357): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.603263][ T28] audit: type=1400 audit(1771880835.259:9358): avc: denied { create } for pid=16346 comm="syz.6.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 222.670056][ T28] audit: type=1400 audit(1771880835.259:9359): avc: denied { create } for pid=16346 comm="syz.6.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 222.721775][ T28] audit: type=1400 audit(1771880835.289:9360): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.799968][ T28] audit: type=1400 audit(1771880835.309:9361): avc: denied { open } for pid=16348 comm="syz.6.4882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 222.833894][ T28] audit: type=1400 audit(1771880835.309:9362): avc: denied { prog_load } for pid=16348 comm="syz.6.4882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 222.881058][ T28] audit: type=1400 audit(1771880835.309:9363): avc: denied { mounton } for pid=16348 comm="syz.6.4882" path="/780/file0" dev="tmpfs" ino=4054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 222.921930][ T28] audit: type=1400 audit(1771880835.339:9364): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.416984][T16396] __nla_validate_parse: 11 callbacks suppressed [ 223.416995][T16396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4903'. [ 223.891994][T16452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4928'. [ 223.901751][T16452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4928'. [ 224.330975][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4935'. [ 224.385908][T16474] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 224.392540][T16474] dvmrp1: ignored: set checksum enabled [ 225.159978][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 225.160229][ T3528] Bluetooth: hci0: command 0x1003 tx timeout [ 226.522356][T16621] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=16621 comm=syz.6.5000 [ 226.540488][T16621] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=16621 comm=syz.6.5000 [ 227.095584][T16661] ip6gre1: entered promiscuous mode [ 227.101030][T16661] ip6gre1: entered allmulticast mode [ 227.136255][T16665] netlink: 'syz.5.5020': attribute type 4 has an invalid length. [ 227.450040][ T28] kauditd_printk_skb: 261 callbacks suppressed [ 227.450057][ T28] audit: type=1400 audit(1771880840.179:9626): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.550180][ T28] audit: type=1400 audit(1771880840.239:9627): avc: denied { module_request } for pid=16693 comm="syz.5.5033" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 227.610073][ T28] audit: type=1400 audit(1771880840.239:9628): avc: denied { sys_module } for pid=16693 comm="syz.5.5033" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 227.664933][ T28] audit: type=1400 audit(1771880840.249:9629): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.698984][ T28] audit: type=1400 audit(1771880840.249:9630): avc: denied { map_create } for pid=16698 comm="syz.4.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 227.723172][T16716] pim6reg1: entered promiscuous mode [ 227.728489][T16716] pim6reg1: entered allmulticast mode [ 227.745244][ T28] audit: type=1400 audit(1771880840.259:9631): avc: denied { open } for pid=16700 comm="syz.0.5037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 227.784471][ T28] audit: type=1400 audit(1771880840.269:9632): avc: denied { open } for pid=16700 comm="syz.0.5037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 227.817040][ T28] audit: type=1400 audit(1771880840.289:9633): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.851843][ T28] audit: type=1400 audit(1771880840.289:9634): avc: denied { allowed } for pid=16703 comm="syz.4.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 227.899328][ T28] audit: type=1400 audit(1771880840.319:9635): avc: denied { open } for pid=16704 comm="syz.8.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 228.042874][T16743] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5054'. [ 228.131753][T16753] netlink: 'syz.8.5059': attribute type 4 has an invalid length. [ 228.552172][T16785] netlink: 'syz.0.5072': attribute type 4 has an invalid length. [ 228.853848][T16809] netlink: 'syz.5.5084': attribute type 1 has an invalid length. [ 228.896712][T16809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.943546][T16815] bond6: (slave gretap2): making interface the new active one [ 228.951957][T16815] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 229.278434][T16835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.962027][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5111'. [ 230.103186][T16897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5122'. [ 230.188011][T16912] gretap1: entered promiscuous mode [ 230.351055][T16940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16940 comm=syz.4.5142 [ 230.959163][T16975] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 230.986589][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5160'. [ 231.001007][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5160'. [ 231.236223][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5166'. [ 231.252911][T16996] erspan0: entered promiscuous mode [ 231.258338][T16996] macvtap1: entered promiscuous mode [ 231.299111][T16996] macvtap1: entered allmulticast mode [ 231.319954][T16996] erspan0: entered allmulticast mode [ 231.344122][T16999] erspan0: left allmulticast mode [ 231.349405][T16999] erspan0: left promiscuous mode [ 231.355569][T17005] netlink: 'syz.5.5170': attribute type 1 has an invalid length. [ 231.383924][T17005] bond7: entered promiscuous mode [ 231.389078][T17005] bond7: entered allmulticast mode [ 231.444439][T17007] bond7: (slave ip6gretap0): making interface the new active one [ 231.470458][T17007] ip6gretap0: entered promiscuous mode [ 231.476033][T17007] ip6gretap0: entered allmulticast mode [ 231.506209][T17016] xt_limit: Overflow, try lower: 65536/2147483648 [ 231.508017][T17007] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 231.761711][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5186'. [ 231.771208][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5186'. [ 231.830312][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5186'. [ 231.846748][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5186'. [ 231.960302][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.039955][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 232.040038][ T3528] Bluetooth: hci0: command 0x1003 tx timeout [ 232.197864][T17088] ipip0: entered promiscuous mode [ 232.253614][T17079] Process accounting resumed [ 232.461748][ T28] kauditd_printk_skb: 343 callbacks suppressed [ 232.461762][ T28] audit: type=1400 audit(1771880845.199:9979): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.492598][ T28] audit: type=1400 audit(1771880845.199:9980): avc: denied { watch watch_reads } for pid=17102 comm="syz.0.5212" path="/1127" dev="tmpfs" ino=5835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 232.516408][ T28] audit: type=1400 audit(1771880845.199:9981): avc: denied { open } for pid=17102 comm="syz.0.5212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 232.536117][ T28] audit: type=1400 audit(1771880845.199:9982): avc: denied { watch watch_reads } for pid=17102 comm="syz.0.5212" path="/1127" dev="tmpfs" ino=5835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 232.559748][ T28] audit: type=1400 audit(1771880845.229:9983): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.584218][ T28] audit: type=1400 audit(1771880845.229:9984): avc: denied { create } for pid=17104 comm="syz.0.5213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 232.604131][ T28] audit: type=1400 audit(1771880845.229:9985): avc: denied { create } for pid=17104 comm="syz.0.5213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 232.624205][ T28] audit: type=1400 audit(1771880845.229:9986): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.648744][ T28] audit: type=1400 audit(1771880845.259:9987): avc: denied { prog_load } for pid=17107 comm="syz.0.5214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 232.667940][ T28] audit: type=1400 audit(1771880845.259:9988): avc: denied { prog_load } for pid=17107 comm="syz.0.5214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 233.000047][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.365984][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5263'. [ 234.623792][ T3528] Bluetooth: hci0: sending frame failed (-49) [ 234.632034][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 235.326905][T17330] __nla_validate_parse: 7 callbacks suppressed [ 235.326929][T17330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5312'. [ 235.650158][T17342] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5318'. [ 235.698127][T17347] netlink: 'syz.5.5320': attribute type 1 has an invalid length. [ 235.737393][T17347] bond8: (slave geneve4): Opening slave failed [ 235.782372][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5324'. [ 235.891700][T17367] netlink: 'syz.5.5329': attribute type 1 has an invalid length. [ 235.915762][T17367] bond9: entered promiscuous mode [ 235.925916][T17367] 8021q: adding VLAN 0 to HW filter on device bond9 [ 235.959282][T17367] 8021q: adding VLAN 0 to HW filter on device bond9 [ 235.973197][T17367] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 235.983650][T17367] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 235.995433][T17367] bond9: (slave vti0): making interface the new active one [ 236.003735][T17367] vti0: entered promiscuous mode [ 236.011128][T17367] bond9: (slave vti0): Enslaving as an active interface with an up link [ 236.108714][T17380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5337'. [ 237.473857][ T28] kauditd_printk_skb: 385 callbacks suppressed [ 237.473873][ T28] audit: type=1400 audit(1771880850.209:10374): avc: denied { name_bind } for pid=17499 comm="syz.6.5391" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 237.557981][ T28] audit: type=1400 audit(1771880850.239:10375): avc: denied { prog_load } for pid=17499 comm="syz.6.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.604813][T17512] netlink: 5272 bytes leftover after parsing attributes in process `syz.6.5397'. [ 237.624213][T17512] netlink: 680 bytes leftover after parsing attributes in process `syz.6.5397'. [ 237.638884][ T28] audit: type=1400 audit(1771880850.239:10376): avc: denied { create } for pid=17499 comm="syz.6.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 237.664707][ T28] audit: type=1400 audit(1771880850.259:10377): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.690187][ T28] audit: type=1400 audit(1771880850.269:10378): avc: denied { execmem } for pid=17501 comm="syz.5.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 237.717751][ T28] audit: type=1400 audit(1771880850.269:10379): avc: denied { mounton } for pid=17503 comm="syz.6.5393" path="/896/file0" dev="tmpfs" ino=4650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 237.720001][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.744669][ T28] audit: type=1400 audit(1771880850.289:10380): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.776061][ T28] audit: type=1400 audit(1771880850.319:10381): avc: denied { open } for pid=17507 comm="syz.6.5395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 237.795769][ T28] audit: type=1400 audit(1771880850.319:10382): avc: denied { map_create } for pid=17507 comm="syz.6.5395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.820354][ T28] audit: type=1400 audit(1771880850.319:10383): avc: denied { prog_load } for pid=17507 comm="syz.6.5395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 238.609091][T17580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5424'. [ 239.065641][T17603] netlink: 'syz.6.5436': attribute type 13 has an invalid length. [ 239.237144][ T5897] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.250369][ T5897] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.269158][ T5897] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.325792][ T5897] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.468995][ T5895] Bluetooth: hci0: Frame reassembly failed (-84) [ 239.519084][T17634] netlink: 'syz.6.5449': attribute type 1 has an invalid length. [ 239.553162][T17634] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.589175][T17634] team0: Port device syz_tun removed [ 239.625806][T17634] bond6: (slave syz_tun): making interface the new active one [ 239.665578][T17634] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 239.819642][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5460'. [ 239.834050][T17655] netlink: 'syz.5.5460': attribute type 5 has an invalid length. [ 239.843257][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5460'. [ 239.855648][T17655] geneve4: entered promiscuous mode [ 239.862846][T17655] geneve4: entered allmulticast mode [ 239.870370][ T5897] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 50917 - 0 [ 239.879317][ T5897] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 50917 - 0 [ 239.889119][ T5897] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 50917 - 0 [ 239.909045][ T5897] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 50917 - 0 [ 239.941080][T17664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17664 comm=syz.5.5464 [ 239.954095][T17664] netlink: 'syz.5.5464': attribute type 1 has an invalid length. [ 239.975083][T17664] bond10: (slave bridge4): making interface the new active one [ 240.000586][T17664] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 241.479996][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.269531][T17752] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17752 comm=syz.0.5502 [ 242.353463][T17715] syz.6.5486 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 242.368070][T17715] CPU: 0 UID: 0 PID: 17715 Comm: syz.6.5486 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.368106][T17715] Tainted: [W]=WARN [ 242.368114][T17715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.368188][T17715] Call Trace: [ 242.368195][T17715] [ 242.368204][T17715] __dump_stack+0x1d/0x30 [ 242.368234][T17715] dump_stack_lvl+0x95/0xd0 [ 242.368261][T17715] dump_stack+0x15/0x1b [ 242.368334][T17715] dump_header+0x80/0x240 [ 242.368416][T17715] oom_kill_process+0x295/0x350 [ 242.368437][T17715] out_of_memory+0x97d/0xb80 [ 242.368538][T17715] try_charge_memcg+0x62e/0xa10 [ 242.368580][T17715] obj_cgroup_charge_pages+0x23/0xc0 [ 242.368607][T17715] __memcg_kmem_charge_page+0x9e/0x170 [ 242.368674][T17715] __alloc_frozen_pages_noprof+0x18a/0x360 [ 242.368703][T17715] alloc_pages_mpol+0xb3/0x260 [ 242.368729][T17715] alloc_pages_noprof+0x8f/0x130 [ 242.368766][T17715] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 242.368807][T17715] __kvmalloc_node_noprof+0x3d4/0x650 [ 242.368882][T17715] ? futex_hash_allocate+0x190/0x9d0 [ 242.368926][T17715] ? futex_hash_allocate+0x190/0x9d0 [ 242.368955][T17715] futex_hash_allocate+0x190/0x9d0 [ 242.368988][T17715] ? cap_task_prctl+0x13f/0x6e0 [ 242.369012][T17715] futex_hash_prctl+0xd8/0xf0 [ 242.369132][T17715] __se_sys_prctl+0xa3d/0x13f0 [ 242.369162][T17715] __x64_sys_prctl+0x67/0x80 [ 242.369190][T17715] x64_sys_call+0x2533/0x3020 [ 242.369281][T17715] do_syscall_64+0x12c/0x370 [ 242.369319][T17715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.369348][T17715] RIP: 0033:0x7f925d29c629 [ 242.369366][T17715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.369387][T17715] RSP: 002b:00007f925bcef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 242.369409][T17715] RAX: ffffffffffffffda RBX: 00007f925d515fa0 RCX: 00007f925d29c629 [ 242.369424][T17715] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 242.369440][T17715] RBP: 00007f925d332b39 R08: 0000000000000000 R09: 0000000000000000 [ 242.369480][T17715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.369494][T17715] R13: 00007f925d516038 R14: 00007f925d515fa0 R15: 00007ffcbffbdf78 [ 242.369513][T17715] [ 242.469947][T17715] memory: usage 307200kB, limit 307200kB, failcnt 459 [ 242.582091][ T28] kauditd_printk_skb: 225 callbacks suppressed [ 242.582109][ T28] audit: type=1400 audit(1771880855.299:10609): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.584833][T17715] memory+swap: usage 308292kB, limit 9007199254740988kB, failcnt 0 [ 242.606768][ T28] audit: type=1400 audit(1771880855.339:10610): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.611922][T17715] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 242.668057][ T28] audit: type=1400 audit(1771880855.409:10611): avc: denied { open } for pid=17758 comm="syz.0.5505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 242.673411][T17715] Memory cgroup stats for /syz6: [ 242.694019][T17715] cache 0 [ 242.702009][T17715] rss 0 [ 242.704751][T17715] shmem 0 [ 242.707662][T17715] mapped_file 0 [ 242.711163][T17715] dirty 0 [ 242.714144][T17715] writeback 0 [ 242.717408][T17715] workingset_refault_anon 4233 [ 242.722259][T17715] workingset_refault_file 1792 [ 242.727057][T17715] swap 1118208 [ 242.730466][T17715] swapcached 7548928 [ 242.734349][T17715] pgpgin 248830 [ 242.737817][T17715] pgpgout 248829 [ 242.741387][T17715] pgfault 246531 [ 242.745077][T17715] pgmajfault 675 [ 242.748762][T17715] inactive_anon 0 [ 242.752901][T17715] active_anon 0 [ 242.756607][T17715] inactive_file 0 [ 242.758676][ T28] audit: type=1400 audit(1771880855.489:10612): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.761101][T17715] active_file 4096 [ 242.788754][T17715] unevictable 0 [ 242.792527][T17715] hierarchical_memory_limit 314572800 [ 242.801298][T17715] hierarchical_memsw_limit 9223372036854771712 [ 242.807461][T17715] total_cache 0 [ 242.811633][T17715] total_rss 0 [ 242.814945][T17715] total_shmem 0 [ 242.818390][T17715] total_mapped_file 0 [ 242.822469][T17715] total_dirty 0 [ 242.825943][T17715] total_writeback 0 [ 242.829788][T17715] total_workingset_refault_anon 4233 [ 242.835226][T17715] total_workingset_refault_file 1792 [ 242.840799][T17715] total_swap 1118208 [ 242.844798][T17715] total_swapcached 7548928 [ 242.850073][T17715] total_pgpgin 248831 [ 242.854190][T17715] total_pgpgout 248830 [ 242.858308][T17715] total_pgfault 246534 [ 242.863048][T17715] total_pgmajfault 675 [ 242.867502][ T28] audit: type=1400 audit(1771880855.599:10613): avc: denied { prog_load } for pid=17763 comm="syz.4.5507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.879979][T17715] total_inactive_anon 0 [ 242.891247][T17715] total_active_anon 0 [ 242.895253][T17715] total_inactive_file 0 [ 242.899444][T17715] total_active_file 4096 [ 242.901180][ T28] audit: type=1400 audit(1771880855.639:10614): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.904128][T17715] total_unevictable 0 [ 242.939973][ T28] audit: type=1400 audit(1771880855.669:10615): avc: denied { block_suspend } for pid=17767 comm="syz.0.5508" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 242.948293][T17715] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5486,pid=17714,uid=0 [ 242.986593][ T28] audit: type=1400 audit(1771880855.669:10616): avc: denied { allowed } for pid=17767 comm="syz.0.5508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 243.016568][ T28] audit: type=1400 audit(1771880855.699:10617): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.032376][T17715] Memory cgroup out of memory: Killed process 17714 (syz.6.5486) total-vm:96208kB, anon-rss:1220kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 243.051518][ T28] audit: type=1400 audit(1771880855.719:10618): avc: denied { open } for pid=17769 comm="syz.0.5509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 243.095158][T17774] netlink: 'syz.4.5511': attribute type 6 has an invalid length. [ 243.103104][T17774] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5511'. [ 244.395094][T17871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5555'. [ 244.421443][T17875] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5557'. [ 244.556871][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5567'. [ 244.567010][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5567'. [ 244.576157][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5567'. [ 244.585390][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5567'. [ 245.259422][T17924] netlink: 'syz.8.5579': attribute type 1 has an invalid length. [ 245.283429][T17924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.291092][T17924] bond4: (slave bond5): making interface the new active one [ 245.298632][T17924] bond4: (slave bond5): Enslaving as an active interface with an up link [ 245.359789][T17936] netlink: 'syz.8.5583': attribute type 2 has an invalid length. [ 245.470299][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5585'. [ 245.483670][T17941] netlink: 'syz.0.5585': attribute type 5 has an invalid length. [ 245.491859][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5585'. [ 245.512774][T17941] geneve3: entered promiscuous mode [ 245.518131][T17941] geneve3: entered allmulticast mode [ 245.526505][ T357] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 41193 - 0 [ 245.535177][ T357] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 41193 - 0 [ 245.561468][ T357] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 41193 - 0 [ 245.580682][ T357] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 41193 - 0 [ 245.703485][T17961] netlink: 'syz.8.5595': attribute type 1 has an invalid length. [ 245.741067][T17961] bond6: entered promiscuous mode [ 245.746243][T17961] bond6: entered allmulticast mode [ 245.759596][T17961] bond6: (slave ip6gretap2): making interface the new active one [ 245.767715][T17961] ip6gretap2: entered promiscuous mode [ 245.773370][T17961] ip6gretap2: entered allmulticast mode [ 245.779490][T17961] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 245.926881][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5607'. [ 246.439982][ T3537] Bluetooth: hci0: command 0x1003 tx timeout [ 246.446123][ T3528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 246.552418][T18012] netlink: 'syz.6.5617': attribute type 29 has an invalid length. [ 247.070773][T18068] netlink: 'syz.4.5643': attribute type 1 has an invalid length. [ 247.084283][T18068] bond3: entered promiscuous mode [ 247.089487][T18068] bond3: entered allmulticast mode [ 247.103742][T18068] bond3: (slave ip6gretap1): making interface the new active one [ 247.111807][T18068] ip6gretap1: entered promiscuous mode [ 247.117686][T18068] ip6gretap1: entered allmulticast mode [ 247.124151][T18068] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 247.583850][ T28] kauditd_printk_skb: 298 callbacks suppressed [ 247.583864][ T28] audit: type=1400 audit(1771880860.319:10917): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 247.658331][ T28] audit: type=1400 audit(1771880860.389:10918): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 247.684385][ T28] audit: type=1400 audit(1771880860.419:10919): avc: denied { open } for pid=18089 comm="syz.8.5652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 247.711872][ T28] audit: type=1400 audit(1771880860.449:10920): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 247.739729][ T28] audit: type=1400 audit(1771880860.469:10921): avc: denied { open } for pid=18091 comm="syz.8.5653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 247.762356][ T28] audit: type=1400 audit(1771880860.499:10922): avc: denied { open } for pid=18091 comm="syz.8.5653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 247.790415][ T28] audit: type=1400 audit(1771880860.529:10923): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 247.867583][ T28] audit: type=1400 audit(1771880860.599:10924): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 247.928429][ T28] audit: type=1400 audit(1771880860.629:10925): avc: denied { open } for pid=18095 comm="syz.0.5655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 247.955856][ T28] audit: type=1400 audit(1771880860.649:10926): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.174932][T18112] __nla_validate_parse: 8 callbacks suppressed [ 248.175120][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5662'. [ 248.257427][T18094] syz.8.5654 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 248.284744][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5662'. [ 248.294844][T18094] CPU: 0 UID: 0 PID: 18094 Comm: syz.8.5654 Tainted: G W syzkaller #0 PREEMPT(full) [ 248.294885][T18094] Tainted: [W]=WARN [ 248.294893][T18094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.294906][T18094] Call Trace: [ 248.294914][T18094] [ 248.294923][T18094] __dump_stack+0x1d/0x30 [ 248.294992][T18094] dump_stack_lvl+0x95/0xd0 [ 248.295015][T18094] dump_stack+0x15/0x1b [ 248.295036][T18094] dump_header+0x80/0x240 [ 248.295127][T18094] oom_kill_process+0x295/0x350 [ 248.295149][T18094] out_of_memory+0x97d/0xb80 [ 248.295167][T18094] try_charge_memcg+0x62e/0xa10 [ 248.295201][T18094] obj_cgroup_charge_pages+0x23/0xc0 [ 248.295238][T18094] __memcg_kmem_charge_page+0x9e/0x170 [ 248.295270][T18094] __alloc_frozen_pages_noprof+0x18a/0x360 [ 248.295346][T18094] alloc_pages_bulk_noprof+0x4aa/0x530 [ 248.295375][T18094] ? policy_nodemask+0x417/0x5e0 [ 248.295424][T18094] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 248.295473][T18094] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 248.295510][T18094] ? alloc_pages_mpol+0x217/0x260 [ 248.295614][T18094] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 248.295699][T18094] __kvmalloc_node_noprof+0x3d4/0x650 [ 248.295733][T18094] ? futex_hash_allocate+0x190/0x9d0 [ 248.295768][T18094] ? futex_hash_allocate+0x190/0x9d0 [ 248.295822][T18094] futex_hash_allocate+0x190/0x9d0 [ 248.295849][T18094] ? cap_task_prctl+0x13f/0x6e0 [ 248.295869][T18094] futex_hash_prctl+0xd8/0xf0 [ 248.295955][T18094] __se_sys_prctl+0xa3d/0x13f0 [ 248.295987][T18094] __x64_sys_prctl+0x67/0x80 [ 248.296074][T18094] x64_sys_call+0x2533/0x3020 [ 248.296103][T18094] do_syscall_64+0x12c/0x370 [ 248.296140][T18094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.296182][T18094] RIP: 0033:0x7f438449c629 [ 248.296200][T18094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.296221][T18094] RSP: 002b:00007f4382eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 248.296242][T18094] RAX: ffffffffffffffda RBX: 00007f4384715fa0 RCX: 00007f438449c629 [ 248.296259][T18094] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 248.296274][T18094] RBP: 00007f4384532b39 R08: 0000000000000000 R09: 0000000000000000 [ 248.296313][T18094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.296329][T18094] R13: 00007f4384716038 R14: 00007f4384715fa0 R15: 00007ffe3eb068a8 [ 248.296350][T18094] [ 248.296358][T18094] memory: usage 279640kB, limit 307200kB, failcnt 1315 [ 248.579931][T18094] memory+swap: usage 223920kB, limit 9007199254740988kB, failcnt 0 [ 248.587850][T18094] kmem: usage 222676kB, limit 9007199254740988kB, failcnt 0 [ 248.625053][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5667'. [ 248.629962][T18094] Memory cgroup stats for /syz8: [ 248.634305][T18094] cache 0 [ 248.666361][T18094] rss 32768 [ 248.669485][T18094] shmem 0 [ 248.683531][T18094] mapped_file 0 [ 248.692826][T18094] dirty 0 [ 248.700538][T18130] netlink: 'syz.6.5669': attribute type 29 has an invalid length. [ 248.712935][T18094] writeback 0 [ 248.716243][T18094] workingset_refault_anon 601 [ 248.730881][T18094] workingset_refault_file 0 [ 248.741751][T18094] swap 983040 [ 248.745170][T18094] swapcached 39182336 [ 248.759598][T18094] pgpgin 222170 [ 248.781071][T18094] pgpgout 222148 [ 248.784635][T18094] pgfault 176008 [ 248.788170][T18094] pgmajfault 269 [ 248.798461][ T5895] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.815671][T18094] inactive_anon 86016 [ 248.819676][T18094] active_anon 4096 [ 248.845155][T18094] inactive_file 0 [ 248.869812][T18094] active_file 0 [ 248.878820][T18094] unevictable 0 [ 248.885962][T18094] hierarchical_memory_limit 314572800 [ 248.892925][T18094] hierarchical_memsw_limit 9223372036854771712 [ 248.899591][T18094] total_cache 0 [ 248.903686][T18094] total_rss 32768 [ 248.907533][T18094] total_shmem 0 [ 248.911425][T18094] total_mapped_file 0 [ 248.915700][T18094] total_dirty 0 [ 248.919219][T18094] total_writeback 0 [ 248.923320][T18094] total_workingset_refault_anon 601 [ 248.928803][T18094] total_workingset_refault_file 0 [ 248.934193][T18094] total_swap 983040 [ 248.938080][T18094] total_swapcached 39182336 [ 248.943190][T18094] total_pgpgin 222170 [ 248.947301][T18094] total_pgpgout 222148 [ 248.951634][T18094] total_pgfault 176008 [ 248.955885][T18094] total_pgmajfault 269 [ 248.961243][T18094] total_inactive_anon 86016 [ 248.971464][T18094] total_active_anon 4096 [ 248.975799][T18094] total_inactive_file 0 [ 248.981256][T18094] total_active_file 0 [ 248.985368][T18094] total_unevictable 0 [ 248.989620][T18094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0 [ 248.989987][T18145] netlink: 'syz.4.5675': attribute type 1 has an invalid length. [ 249.008330][T18094] ,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.5654,pid=18093,uid=0 [ 249.017339][T18094] Memory cgroup out of memory: Killed process 18094 (syz.8.5654) total-vm:96208kB, anon-rss:1336kB, file-rss:22268kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 249.056565][T18145] gretap2: entered allmulticast mode [ 249.079377][T18145] bond4: (slave gretap2): making interface the new active one [ 249.113998][T18145] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 249.415285][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5688'. [ 249.707478][T18197] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 249.752577][T18197] bond11: (slave lo): Enslaving as an active interface with an up link [ 249.879010][T18197] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 250.758483][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5715'. [ 250.839967][ T3528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 250.846154][ T3537] Bluetooth: hci0: command 0x1003 tx timeout [ 252.650639][ T28] kauditd_printk_skb: 212 callbacks suppressed [ 252.650654][ T28] audit: type=1400 audit(1771880865.389:11139): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 252.721676][ T28] audit: type=1400 audit(1771880865.459:11140): avc: denied { allowed } for pid=18335 comm="syz.4.5757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 252.741446][ T28] audit: type=1400 audit(1771880865.479:11141): avc: denied { prog_load } for pid=18332 comm="syz.6.5756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 252.773328][ T28] audit: type=1400 audit(1771880865.479:11142): avc: denied { prog_load } for pid=18332 comm="syz.6.5756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 252.793071][ T28] audit: type=1400 audit(1771880865.519:11143): avc: denied { execute } for pid=18335 comm="syz.4.5757" path="/534/cpu.stat" dev="tmpfs" ino=2793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 252.817027][ T28] audit: type=1400 audit(1771880865.529:11144): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 252.852238][ T28] audit: type=1400 audit(1771880865.589:11145): avc: denied { prog_load } for pid=18342 comm="syz.4.5759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 252.945228][ T28] audit: type=1400 audit(1771880865.589:11146): avc: denied { open } for pid=18342 comm="syz.4.5759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 252.977385][ T28] audit: type=1400 audit(1771880865.589:11147): avc: denied { prog_load } for pid=18342 comm="syz.4.5759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 253.020048][ T28] audit: type=1400 audit(1771880865.589:11148): avc: denied { open } for pid=18342 comm="syz.4.5759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 253.603827][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5767'. [ 253.651372][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5767'. [ 254.314074][T18387] netlink: 'syz.0.5775': attribute type 1 has an invalid length. [ 254.379956][T18387] netlink: 'syz.0.5775': attribute type 4 has an invalid length. [ 254.388651][T18387] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5775'. [ 254.660862][T18412] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5789'. [ 254.953583][T18435] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5799'. [ 254.981051][T18435] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5799'. [ 255.806270][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5825'. [ 255.844261][T18488] bond7: entered promiscuous mode [ 255.849533][T18488] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.956136][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5825'. [ 256.003007][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5825'. [ 256.730729][T13625] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.748746][T18564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5859'. [ 256.785175][T18564] bond8: entered promiscuous mode [ 256.795963][T18564] bond8: entered allmulticast mode [ 256.807914][T18564] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.836762][T18564] A link change request failed with some changes committed already. Interface bond8 may have been left with an inconsistent configuration, please check. [ 257.203211][T18588] netlink: 'syz.0.5869': attribute type 4 has an invalid length. [ 257.480012][T13625] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.662997][ T28] kauditd_printk_skb: 251 callbacks suppressed [ 257.663010][ T28] audit: type=1400 audit(1771880870.402:11400): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.714045][ T28] audit: type=1400 audit(1771880870.442:11401): avc: denied { mount } for pid=18608 comm="syz.6.5878" name="/" dev="hugetlbfs" ino=54695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=0 [ 257.798352][ T28] audit: type=1400 audit(1771880870.462:11402): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.853606][T18615] netlink: 'syz.8.5880': attribute type 1 has an invalid length. [ 257.869947][T18615] netlink: 'syz.8.5880': attribute type 4 has an invalid length. [ 257.880145][ T28] audit: type=1400 audit(1771880870.582:11403): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.925745][ T28] audit: type=1400 audit(1771880870.662:11404): avc: denied { map_create } for pid=18616 comm="syz.4.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.950870][ T28] audit: type=1400 audit(1771880870.662:11405): avc: denied { open } for pid=18616 comm="syz.4.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 257.972156][ T28] audit: type=1400 audit(1771880870.662:11406): avc: denied { prog_load } for pid=18616 comm="syz.4.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.992717][ T28] audit: type=1400 audit(1771880870.692:11407): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 258.017825][ T28] audit: type=1400 audit(1771880870.732:11408): avc: denied { prog_load } for pid=18618 comm="syz.8.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 258.037349][ T28] audit: type=1400 audit(1771880870.732:11409): avc: denied { create } for pid=18618 comm="syz.8.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 260.042412][T18753] __nla_validate_parse: 3 callbacks suppressed [ 260.042434][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5941'. [ 260.099428][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5941'. [ 260.473261][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5957'. [ 261.601728][T18935] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6025'. [ 261.769628][T18960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.199059][T18994] geneve4: entered promiscuous mode [ 262.209509][ T357] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 262.231293][ T357] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 262.242266][ T357] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 262.265327][ T357] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 262.629686][T19014] hugetlbfs: syz.8.6059 (19014): Using mlock ulimits for SHM_HUGETLB is obsolete [ 262.699319][ T28] kauditd_printk_skb: 462 callbacks suppressed [ 262.699333][ T28] audit: type=1400 audit(1771880875.432:11872): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.757101][ T28] audit: type=1400 audit(1771880875.472:11873): avc: denied { allowed } for pid=19015 comm="syz.8.6060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 262.797550][ T28] audit: type=1400 audit(1771880875.492:11874): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.847621][ T28] audit: type=1400 audit(1771880875.492:11875): avc: denied { create } for pid=19017 comm="syz.8.6061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 262.850284][T18956] syz.5.6035 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 262.888049][ T28] audit: type=1400 audit(1771880875.492:11876): avc: denied { create } for pid=19017 comm="syz.8.6061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=0 [ 262.924414][T18956] CPU: 1 UID: 0 PID: 18956 Comm: syz.5.6035 Tainted: G W syzkaller #0 PREEMPT(full) [ 262.924474][T18956] Tainted: [W]=WARN [ 262.924481][T18956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.924493][T18956] Call Trace: [ 262.924499][T18956] [ 262.924507][T18956] __dump_stack+0x1d/0x30 [ 262.924568][T18956] dump_stack_lvl+0x95/0xd0 [ 262.924655][T18956] dump_stack+0x15/0x1b [ 262.924682][T18956] dump_header+0x80/0x240 [ 262.924752][T18956] oom_kill_process+0x295/0x350 [ 262.924774][T18956] out_of_memory+0x97d/0xb80 [ 262.924794][T18956] try_charge_memcg+0x62e/0xa10 [ 262.924833][T18956] obj_cgroup_charge_pages+0x23/0xc0 [ 262.924940][T18956] __memcg_kmem_charge_page+0x9e/0x170 [ 262.925041][T18956] __alloc_frozen_pages_noprof+0x18a/0x360 [ 262.925075][T18956] alloc_pages_mpol+0xb3/0x260 [ 262.925107][T18956] alloc_pages_noprof+0x8f/0x130 [ 262.925132][T18956] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 262.925212][T18956] __kvmalloc_node_noprof+0x3d4/0x650 [ 262.925239][T18956] ? futex_hash_allocate+0x190/0x9d0 [ 262.925315][T18956] ? futex_hash_allocate+0x190/0x9d0 [ 262.925348][T18956] futex_hash_allocate+0x190/0x9d0 [ 262.925376][T18956] ? cap_task_prctl+0x13f/0x6e0 [ 262.925400][T18956] futex_hash_prctl+0xd8/0xf0 [ 262.925442][T18956] __se_sys_prctl+0xa3d/0x13f0 [ 262.925535][T18956] __x64_sys_prctl+0x67/0x80 [ 262.925559][T18956] x64_sys_call+0x2533/0x3020 [ 262.925585][T18956] do_syscall_64+0x12c/0x370 [ 262.925623][T18956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.925652][T18956] RIP: 0033:0x7f1ea9cfc629 [ 262.925671][T18956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.925689][T18956] RSP: 002b:00007f1ea874f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 262.925709][T18956] RAX: ffffffffffffffda RBX: 00007f1ea9f75fa0 RCX: 00007f1ea9cfc629 [ 262.925726][T18956] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 262.925790][T18956] RBP: 00007f1ea9d92b39 R08: 0000000000000000 R09: 0000000000000000 [ 262.925802][T18956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.925814][T18956] R13: 00007f1ea9f76038 R14: 00007f1ea9f75fa0 R15: 00007fff0be50038 [ 262.925992][T18956] [ 262.929133][ T28] audit: type=1400 audit(1771880875.522:11877): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.941639][T18956] memory: usage 307200kB, limit 307200kB, failcnt 783 [ 262.957589][ T28] audit: type=1400 audit(1771880875.662:11878): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.981062][T18956] memory+swap: usage 309432kB, limit 9007199254740988kB, failcnt 0 [ 262.993279][ T28] audit: type=1400 audit(1771880875.682:11879): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 263.039969][T18956] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 263.041371][ T28] audit: type=1400 audit(1771880875.702:11880): avc: denied { wake_alarm } for pid=19022 comm="syz.4.6063" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 263.075742][T18956] Memory cgroup stats for [ 263.080332][ T28] audit: type=1400 audit(1771880875.722:11881): avc: denied { create } for pid=19025 comm="syz.6.6064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 263.107300][T18956] /syz5: [ 263.337872][T18956] cache 0 [ 263.346435][T19035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6067'. [ 263.348324][T18956] rss 0 [ 263.358579][T18956] shmem 0 [ 263.363488][T18956] mapped_file 0 [ 263.367009][T18956] dirty 0 [ 263.370337][T18956] writeback 0 [ 263.373669][T18956] workingset_refault_anon 3299 [ 263.378452][T18956] workingset_refault_file 3050 [ 263.383520][T18956] swap 2285568 [ 263.386894][T18956] swapcached 11411456 [ 263.391137][T18956] pgpgin 422296 [ 263.394706][T18956] pgpgout 422293 [ 263.398189][T19035] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.398501][T18956] pgfault 364721 [ 263.408697][T18956] pgmajfault 491 [ 263.412427][T18956] inactive_anon 0 [ 263.416390][T18956] active_anon 4096 [ 263.420311][T18956] inactive_file 0 [ 263.423932][T18956] active_file 8192 [ 263.427873][T18956] unevictable 0 [ 263.432188][T18956] hierarchical_memory_limit 314572800 [ 263.435936][T19038] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 263.437558][T18956] hierarchical_memsw_limit 9223372036854771712 [ 263.437570][T18956] total_cache 0 [ 263.437579][T18956] total_rss 0 [ 263.460097][T18956] total_shmem 0 [ 263.463614][T18956] total_mapped_file 0 [ 263.467619][T18956] total_dirty 0 [ 263.471422][T18956] total_writeback 0 [ 263.481831][T18956] total_workingset_refault_anon 3299 [ 263.487330][T18956] total_workingset_refault_file 3050 [ 263.494081][T18956] total_swap 2285568 [ 263.498045][T18956] total_swapcached 11411456 [ 263.502960][T18956] total_pgpgin 422296 [ 263.506971][T18956] total_pgpgout 422293 [ 263.533402][T18956] total_pgfault 364721 [ 263.541842][T18956] total_pgmajfault 491 [ 263.579067][T18956] total_inactive_anon 0 [ 263.588514][T18956] total_active_anon 4096 [ 263.605007][T18956] total_inactive_file 0 [ 263.616861][T18956] total_active_file 8192 [ 263.626916][T18956] total_unevictable 0 [ 263.635353][T18956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1147,pid=6656,uid=0 [ 263.664267][T18956] Memory cgroup out of memory: Killed process 6656 (syz.5.1147) total-vm:94028kB, anon-rss:1224kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 263.699412][T18955] syz.5.6035 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 263.715878][T18955] CPU: 0 UID: 0 PID: 18955 Comm: syz.5.6035 Tainted: G W syzkaller #0 PREEMPT(full) [ 263.715910][T18955] Tainted: [W]=WARN [ 263.715917][T18955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.715929][T18955] Call Trace: [ 263.715982][T18955] [ 263.715991][T18955] __dump_stack+0x1d/0x30 [ 263.716053][T18955] dump_stack_lvl+0x95/0xd0 [ 263.716073][T18955] dump_stack+0x15/0x1b [ 263.716096][T18955] dump_header+0x80/0x240 [ 263.716147][T18955] oom_kill_process+0x295/0x350 [ 263.716166][T18955] out_of_memory+0x97d/0xb80 [ 263.716183][T18955] try_charge_memcg+0x62e/0xa10 [ 263.716297][T18955] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 263.716323][T18955] __swap_cache_prepare_and_add+0x386/0x530 [ 263.716418][T18955] swap_cache_alloc_folio+0xa2/0x120 [ 263.716449][T18955] swap_cluster_readahead+0x26e/0x3d0 [ 263.716476][T18955] swapin_readahead+0xde/0x840 [ 263.716504][T18955] ? _raw_spin_unlock+0x9/0x30 [ 263.716526][T18955] ? swap_put_entries_cluster+0x385/0x3a0 [ 263.716610][T18955] ? __rcu_read_unlock+0x4e/0x70 [ 263.716632][T18955] ? swap_cache_get_folio+0x26f/0x280 [ 263.716661][T18955] do_swap_page+0x309/0x2210 [ 263.716684][T18955] ? update_curr+0xbe/0x140 [ 263.716772][T18955] ? css_rstat_updated+0xbb/0x280 [ 263.716793][T18955] ? __rcu_read_lock+0x36/0x50 [ 263.716814][T18955] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 263.716850][T18955] handle_mm_fault+0xb40/0x3020 [ 263.716876][T18955] ? vma_start_read+0x1c7/0x2c0 [ 263.716931][T18955] do_user_addr_fault+0x62f/0x1050 [ 263.716967][T18955] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 263.716992][T18955] ? trace_page_fault_user+0x1f/0xe0 [ 263.717017][T18955] exc_page_fault+0x62/0xa0 [ 263.717099][T18955] asm_exc_page_fault+0x26/0x30 [ 263.717119][T18955] RIP: 0033:0x7f1ea9bccbb9 [ 263.717136][T18955] Code: f0 0f 83 c0 00 00 00 48 89 75 00 49 89 4c 24 f8 48 8b 4d 08 48 8b 55 00 eb 91 0f 1f 80 00 00 00 00 4c 89 ea 4c 89 e6 48 89 df 02 ff ff ff 48 89 d8 48 29 e8 48 3d 80 00 00 00 0f 8e 7d 00 00 [ 263.717157][T18955] RSP: 002b:00007fff0be50080 EFLAGS: 00010212 [ 263.717215][T18955] RAX: 00007f1ea989c658 RBX: 00007f1ea989c660 RCX: ffffffff817f6c38 [ 263.717229][T18955] RDX: 000000000000001e RSI: 00007f1ea989ddb8 RDI: 00007f1ea989c660 [ 263.717241][T18955] RBP: 00007f1ea98106c0 R08: 00007f1ea9f60000 R09: 00007f1ea9f76038 [ 263.717253][T18955] R10: 0000000000000001 R11: 0000000000000006 R12: 00007f1ea989ddb8 [ 263.717265][T18955] R13: 000000000000001e R14: 0000000000011adf R15: 0000000000000001 [ 263.717279][T18955] ? get_pte_pfn+0x18/0x3e0 [ 263.717350][T18955] [ 263.717553][T18955] memory: usage 307200kB, limit 307200kB, failcnt 804 [ 263.960006][T19051] Falling back ldisc for ptm0. [ 263.977199][T18955] memory+swap: usage 309296kB, limit 9007199254740988kB, failcnt 0 [ 263.987541][T19053] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 264.090042][T18955] kmem: usage 307088kB, limit 9007199254740988kB, failcnt 0 [ 264.097436][T18955] Memory cgroup stats for /syz5: [ 264.097580][T18955] cache 0 [ 264.104249][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6078'. [ 264.118344][T18955] rss 0 [ 264.127298][T18955] shmem 0 [ 264.135090][T18955] mapped_file 0 [ 264.138805][T18955] dirty 0 [ 264.160120][T18955] writeback 0 [ 264.163422][T18955] workingset_refault_anon 3299 [ 264.168179][T18955] workingset_refault_file 3050 [ 264.190681][T18955] swap 2146304 [ 264.194429][T18955] swapcached 11411456 [ 264.214075][T18955] pgpgin 422296 [ 264.217558][T18955] pgpgout 422294 [ 264.226109][T18955] pgfault 364721 [ 264.230827][T18955] pgmajfault 491 [ 264.237761][T18955] inactive_anon 0 [ 264.245070][T18955] active_anon 0 [ 264.265165][T18955] inactive_file 0 [ 264.269173][T18955] active_file 8192 [ 264.276450][T18955] unevictable 0 [ 264.281674][T18955] hierarchical_memory_limit 314572800 [ 264.292906][T18955] hierarchical_memsw_limit 9223372036854771712 [ 264.299403][T18955] total_cache 0 [ 264.304815][T18955] total_rss 0 [ 264.308328][T18955] total_shmem 0 [ 264.314496][T18955] total_mapped_file 0 [ 264.319916][T18955] total_dirty 0 [ 264.323610][T18955] total_writeback 0 [ 264.327621][T18955] total_workingset_refault_anon 3299 [ 264.329151][T19089] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 264.329151][T19089] The task syz.8.6083 (19089) triggered the difference, watch for misbehavior. [ 264.339467][T18955] total_workingset_refault_file 3050 [ 264.370276][T18955] total_swap 2146304 [ 264.374178][T18955] total_swapcached 11411456 [ 264.378673][T18955] total_pgpgin 422296 [ 264.394496][T18955] total_pgpgout 422294 [ 264.410634][T18955] total_pgfault 364721 [ 264.419229][T18955] total_pgmajfault 491 [ 264.428773][T18955] total_inactive_anon 0 [ 264.438255][T18955] total_active_anon 0 [ 264.447203][T18955] total_inactive_file 0 [ 264.456944][T18955] total_active_file 8192 [ 264.466864][T18955] total_unevictable 0 [ 264.476531][T18955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1313,pid=7065,uid=0 [ 264.508818][T18955] Memory cgroup out of memory: Killed process 7065 (syz.5.1313) total-vm:96076kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 264.582531][ T3776] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 264.651437][ T3776] CPU: 1 UID: 0 PID: 3776 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 264.651469][ T3776] Tainted: [W]=WARN [ 264.651540][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.651553][ T3776] Call Trace: [ 264.651559][ T3776] [ 264.651567][ T3776] __dump_stack+0x1d/0x30 [ 264.651593][ T3776] dump_stack_lvl+0x95/0xd0 [ 264.651613][ T3776] dump_stack+0x15/0x1b [ 264.651661][ T3776] dump_header+0x80/0x240 [ 264.651683][ T3776] oom_kill_process+0x295/0x350 [ 264.651705][ T3776] out_of_memory+0x97d/0xb80 [ 264.651728][ T3776] try_charge_memcg+0x62e/0xa10 [ 264.651821][ T3776] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 264.651849][ T3776] __swap_cache_prepare_and_add+0x386/0x530 [ 264.651888][ T3776] swap_cache_alloc_folio+0xa2/0x120 [ 264.651922][ T3776] swap_cluster_readahead+0x26e/0x3d0 [ 264.651950][ T3776] swapin_readahead+0xde/0x840 [ 264.652002][ T3776] ? mm_trace_rss_stat+0x1d/0xf0 [ 264.652026][ T3776] ? __rcu_read_unlock+0x33/0x70 [ 264.652047][ T3776] ? __rcu_read_unlock+0x4e/0x70 [ 264.652066][ T3776] ? swap_cache_get_folio+0x26f/0x280 [ 264.652162][ T3776] do_swap_page+0x309/0x2210 [ 264.652223][ T3776] ? css_rstat_updated+0xbb/0x280 [ 264.652244][ T3776] ? __rcu_read_lock+0x36/0x50 [ 264.652279][ T3776] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 264.652304][ T3776] handle_mm_fault+0xb40/0x3020 [ 264.652334][ T3776] ? vma_start_read+0x1c7/0x2c0 [ 264.652358][ T3776] do_user_addr_fault+0x62f/0x1050 [ 264.652403][ T3776] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 264.652423][ T3776] ? trace_page_fault_user+0x1f/0xe0 [ 264.652461][ T3776] exc_page_fault+0x62/0xa0 [ 264.652486][ T3776] asm_exc_page_fault+0x26/0x30 [ 264.652507][ T3776] RIP: 0033:0x7f1ea9bca6b7 [ 264.652524][ T3776] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 39 7c 24 [ 264.652602][ T3776] RSP: 002b:00007fff0be503a0 EFLAGS: 00010202 [ 264.652620][ T3776] RAX: 0000001b30524000 RBX: 0000000000000ab9 RCX: 000000000003ff70 [ 264.652635][ T3776] RDX: 000000000be3152c RSI: 00007fff0be50430 RDI: 0000000000000006 [ 264.652648][ T3776] RBP: 00007fff0be503dc R08: 000000002d587074 R09: 7fffffffffffffff [ 264.652660][ T3776] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 264.652671][ T3776] R13: 00000000000927c0 R14: 000000000003fedb R15: 00007fff0be50430 [ 264.652688][ T3776] [ 264.656012][ T3776] memory: usage 307132kB, limit 307200kB, failcnt 845 [ 264.950898][ T3776] memory+swap: usage 309188kB, limit 9007199254740988kB, failcnt 0 [ 264.996638][ T3776] kmem: usage 306972kB, limit 9007199254740988kB, failcnt 0 [ 265.013782][ T3776] Memory cgroup stats for /syz5: [ 265.014032][ T3776] cache 73728 [ 265.028359][ T3776] rss 0 [ 265.034575][ T3776] shmem 0 [ 265.086567][ T3776] mapped_file 0 [ 265.101797][ T3776] dirty 0 [ 265.116099][ T3776] writeback 0 [ 265.140994][ T3776] workingset_refault_anon 3308 [ 265.157579][ T3776] workingset_refault_file 3233 [ 265.186734][ T3776] swap 2048000 [ 265.204628][ T3776] swapcached 11411456 [ 265.220993][ T3776] pgpgin 422488 [ 265.259638][ T3776] pgpgout 422468 [ 265.271565][ T3776] pgfault 364737 [ 265.278106][ T3776] pgmajfault 503 [ 265.288279][ T3776] inactive_anon 0 [ 265.310047][ T3776] active_anon 0 [ 265.313983][ T3776] inactive_file 77824 [ 265.329952][ T3776] active_file 0 [ 265.342759][ T3776] unevictable 0 [ 265.370372][ T3776] hierarchical_memory_limit 314572800 [ 265.395138][ T3776] hierarchical_memsw_limit 9223372036854771712 [ 265.401182][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6114'. [ 265.437699][ T3776] total_cache 73728 [ 265.450068][ T3776] total_rss 0 [ 265.464577][ T3776] total_shmem 0 [ 265.468054][ T3776] total_mapped_file 0 [ 265.497708][ T3776] total_dirty 0 [ 265.521698][ T3776] total_writeback 0 [ 265.543620][ T3776] total_workingset_refault_anon 3308 [ 265.569690][ T3776] total_workingset_refault_file 3233 [ 265.581217][T19154] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6118'. [ 265.589419][ T3776] total_swap 2048000 [ 265.603319][ T3776] total_swapcached 11411456 [ 265.616324][ T3776] total_pgpgin 422488 [ 265.628123][ T3776] total_pgpgout 422468 [ 265.640436][ T3776] total_pgfault 364737 [ 265.654736][ T3776] total_pgmajfault 503 [ 265.677927][ T3776] total_inactive_anon 0 [ 265.693635][ T3776] total_active_anon 0 [ 265.706666][ T3776] total_inactive_file 77824 [ 265.720843][ T3776] total_active_file 0 [ 265.736920][ T3776] total_unevictable 0 [ 265.758217][ T3776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1114,pid=6580,uid=0 [ 265.819961][ T3776] Memory cgroup out of memory: Killed process 6580 (syz.5.1114) total-vm:96076kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 265.993829][T19169] gretap0: left allmulticast mode [ 266.003691][T19169] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6125'. [ 266.020126][T19169] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 266.111825][T19178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6129'. [ 266.300525][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6135'. [ 266.938756][T19231] sch_fq: defrate 7 ignored. [ 267.258783][T19267] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6171'. [ 267.700011][ T28] kauditd_printk_skb: 14970 callbacks suppressed [ 267.700028][ T28] audit: type=1400 audit(1771880880.442:26780): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.711106][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.768114][ T9680] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.778276][ T3039] audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 [ 267.778348][ T9680] audit: audit_lost=26 audit_rate_limit=0 audit_backlog_limit=64 [ 267.797248][ T3039] audit: backlog limit exceeded [ 267.800341][ T28] audit: type=1400 audit(1771880880.442:26781): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.831380][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.843904][ T9680] audit: backlog limit exceeded [ 267.856011][ T3039] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 267.958213][T19316] netlink: 'syz.4.6193': attribute type 2 has an invalid length. [ 268.002620][T19316] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6193'. [ 268.492571][T19347] netlink: 'syz.8.6205': attribute type 4 has an invalid length. [ 268.551328][T19347] netlink: 'syz.8.6205': attribute type 4 has an invalid length. [ 268.626101][T19349] lo: left allmulticast mode [ 268.690156][T19351] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.6207'. [ 268.860329][T19360] netlink: 'syz.8.6211': attribute type 1 has an invalid length. [ 269.017013][T19360] bond7: (slave ip6gretap3): making interface the new active one [ 269.065644][T19360] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 269.140005][T19360] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 269.150099][T19360] bond7: (slave ip6gretap3): Enslaving as an active interface with an up link [ 270.395590][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6255'. [ 270.434786][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6255'. [ 270.549633][T19455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.580520][T19455] bond2: (slave bond0): Enslaving as a backup interface with an up link [ 272.159945][T19579] netlink: 'syz.6.6311': attribute type 11 has an invalid length. [ 272.196880][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6311'. [ 272.254228][ T5895] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.254236][T19579] netlink: 'syz.6.6311': attribute type 11 has an invalid length. [ 272.254256][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6311'. [ 272.254299][ T5895] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.254329][ T5895] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.348279][ T5895] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.710856][ T28] kauditd_printk_skb: 23632 callbacks suppressed [ 272.710870][ T28] audit: type=1400 audit(1771880885.452:47548): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 272.770797][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 272.780081][ T28] audit: type=1400 audit(1771880885.452:47549): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 272.801758][ T3039] audit: audit_lost=983 audit_rate_limit=0 audit_backlog_limit=64 [ 272.809598][ T3039] audit: backlog limit exceeded [ 272.815119][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 272.816004][T19624] audit: audit_backlog=65 > audit_backlog_limit=64 [ 272.822074][ T3039] audit: audit_lost=984 audit_rate_limit=0 audit_backlog_limit=64 [ 272.836283][T19624] audit: audit_lost=985 audit_rate_limit=0 audit_backlog_limit=64 [ 272.846906][T19626] audit: audit_backlog=65 > audit_backlog_limit=64 [ 272.919948][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.058201][T19646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.444518][T19678] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6356'. [ 273.471628][T19678] gtp0: entered promiscuous mode [ 274.402821][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6376'. [ 274.875577][T19735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6381'. [ 274.896050][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6381'. [ 274.990116][T19735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6381'. [ 275.000915][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6381'. [ 275.722103][T19802] netlink: 'syz.5.6412': attribute type 1 has an invalid length. [ 275.784942][T19802] bond12: (slave geneve5): making interface the new active one [ 275.812338][T19802] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 275.829960][T19807] netlink: 'syz.6.6414': attribute type 1 has an invalid length. [ 275.849273][ T5890] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 275.874515][ T5890] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 275.923082][ T5890] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 276.000555][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6420'. [ 276.069135][T19807] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.096328][T19813] bond7: option tlb_dynamic_lb: unable to set because the bond device is up [ 276.125026][ T5890] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 276.137139][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6420'. [ 276.545549][T19864] ipip1: entered promiscuous mode [ 277.723316][ T28] kauditd_printk_skb: 27268 callbacks suppressed [ 277.723332][ T28] audit: type=1400 audit(1771880890.462:73485): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 277.738367][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 277.759341][T19950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 277.777786][ T3039] audit: audit_lost=1430 audit_rate_limit=0 audit_backlog_limit=64 [ 277.780601][ T9680] audit: audit_backlog=65 > audit_backlog_limit=64 [ 277.796536][ T3039] audit: backlog limit exceeded [ 277.806648][T19950] audit: audit_lost=1431 audit_rate_limit=0 audit_backlog_limit=64 [ 277.816431][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 277.848678][ T3039] audit: audit_lost=1432 audit_rate_limit=0 audit_backlog_limit=64 [ 277.858748][T19950] audit: backlog limit exceeded [ 278.712968][T20013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.721855][T20013] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.733054][T20013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.771557][T20019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.865265][T20066] netlink: 'syz.8.6530': attribute type 29 has an invalid length. [ 279.911039][T20066] netlink: 'syz.8.6530': attribute type 29 has an invalid length. [ 279.960802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.887206][T20171] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6579'. [ 282.730086][ T28] kauditd_printk_skb: 27341 callbacks suppressed [ 282.730102][ T28] audit: type=1400 audit(1771880895.472:98601): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 282.740254][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 282.761433][ T9680] audit: audit_backlog=65 > audit_backlog_limit=64 [ 282.787015][ T9680] audit: audit_lost=2175 audit_rate_limit=0 audit_backlog_limit=64 [ 282.795843][ T3318] audit: audit_backlog=65 > audit_backlog_limit=64 [ 282.810082][ T9680] audit: backlog limit exceeded [ 282.816601][ T28] audit: type=1400 audit(1771880895.472:98602): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 282.820018][ T3318] audit: audit_lost=2176 audit_rate_limit=0 audit_backlog_limit=64 [ 282.846197][ T3039] audit: audit_lost=2177 audit_rate_limit=0 audit_backlog_limit=64 [ 282.866226][ T3039] audit: backlog limit exceeded [ 284.150175][T20317] lo: left allmulticast mode [ 285.188817][T20366] all: renamed from lo [ 285.391429][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6671'. [ 285.419972][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6671'. [ 285.434592][T20375] bond0: left allmulticast mode [ 285.439576][T20375] bond_slave_0: left allmulticast mode [ 285.455332][T20375] bond_slave_1: left allmulticast mode [ 285.547652][T20383] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.6675'. [ 285.810975][T20400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6683'. [ 285.829575][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6683'. [ 286.315183][ T5890] Bluetooth: hci0: Frame reassembly failed (-84) [ 287.583925][T20505] macvlan1: entered promiscuous mode [ 287.589635][T20505] bond0: entered promiscuous mode [ 287.595441][T20505] bond_slave_0: entered promiscuous mode [ 287.603137][T20505] bond_slave_1: entered promiscuous mode [ 287.618832][T20505] macvlan3: entered promiscuous mode [ 287.740305][ T28] kauditd_printk_skb: 27495 callbacks suppressed [ 287.740320][ T28] audit: type=1400 audit(1771880900.472:124801): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 287.747458][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.768746][T20517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.781432][T20517] audit: audit_lost=2610 audit_rate_limit=0 audit_backlog_limit=64 [ 287.783166][ T3039] audit: audit_lost=2611 audit_rate_limit=0 audit_backlog_limit=64 [ 287.789368][T20517] audit: backlog limit exceeded [ 287.791161][ T28] audit: type=1400 audit(1771880900.482:124802): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 287.803834][ T3039] audit: backlog limit exceeded [ 287.828817][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.837962][T20517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.360111][ T3528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 288.414887][T20546] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.422122][T20546] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.504013][T20546] tipc: Resetting bearer [ 288.805445][ T5895] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.826243][ T5895] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.851659][ T5895] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 41193 - 0 [ 288.864145][ T5895] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 288.882198][ T5895] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.902898][ T5895] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.943466][ T5895] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 41193 - 0 [ 288.967543][ T5895] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 288.992982][ T5895] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.027518][ T5895] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.045928][ T5895] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 41193 - 0 [ 289.074831][ T5895] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 289.094813][ T5895] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.114464][ T5895] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.133522][ T5895] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 41193 - 0 [ 289.152535][ T5895] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 289.180601][T20593] geneve3: entered promiscuous mode [ 289.198309][T20593] geneve3: entered allmulticast mode [ 289.224070][ T5895] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.248800][ T5895] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.268110][ T5895] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.301595][ T5895] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.852874][T20641] netlink: 'syz.6.6792': attribute type 1 has an invalid length. [ 289.921002][T20641] bond8: (slave geneve3): making interface the new active one [ 289.945856][T20641] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 289.957033][ T5890] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.970129][ T5890] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.978599][ T5890] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.987062][ T5890] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 290.142270][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6808'. [ 290.281632][T20690] netlink: 'syz.6.6816': attribute type 10 has an invalid length. [ 290.321009][T20690] team0: Port device dummy0 added [ 290.502853][T20708] netlink: 'syz.6.6823': attribute type 6 has an invalid length. [ 291.784280][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6856'. [ 291.793879][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6856'. [ 291.933358][T20797] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 291.945486][T20797] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 291.973604][T20797] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 292.261918][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6877'. [ 292.271584][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6877'. [ 292.751617][ T28] kauditd_printk_skb: 29806 callbacks suppressed [ 292.751633][ T28] audit: type=1400 audit(1771880905.492:153468): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 292.763136][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.783232][ T28] audit: type=1400 audit(1771880905.492:153469): avc: denied { mount } for pid=20865 comm="syz.5.6894" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=0 [ 292.811742][ T3039] audit: audit_lost=2993 audit_rate_limit=0 audit_backlog_limit=64 [ 292.811761][ T3039] audit: backlog limit exceeded [ 292.821076][ T28] audit: type=1400 audit(1771880905.492:153470): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.846549][ T28] audit: type=1400 audit(1771880905.492:153471): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.846663][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.868454][ T28] audit: type=1400 audit(1771880905.492:153472): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 292.878045][T20868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 293.702336][T20910] netlink: 'syz.5.6915': attribute type 2 has an invalid length. [ 293.728275][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6915'. [ 293.741684][ T5897] Bluetooth: hci0: Frame reassembly failed (-84) [ 293.746001][T20910] netlink: 'syz.5.6915': attribute type 2 has an invalid length. [ 293.820037][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6915'. [ 295.258548][T20989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.284844][T20989] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.334840][T20989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.360280][T20991] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6952'. [ 295.459615][T20993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.487067][T20994] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 295.602679][T21012] dummy0: Caught tx_queue_len zero misconfig [ 295.800069][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 295.806303][ T3528] Bluetooth: hci0: command 0x1003 tx timeout [ 297.759962][ T28] kauditd_printk_skb: 29278 callbacks suppressed [ 297.759978][ T28] audit: type=1400 audit(1771880910.492:178172): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.772433][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 297.794233][ T28] audit: type=1400 audit(1771880910.492:178173): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.816004][ T28] audit: type=1400 audit(1771880910.502:178174): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.816865][ T3039] audit: audit_lost=4521 audit_rate_limit=0 audit_backlog_limit=64 [ 297.852709][ T28] audit: type=1400 audit(1771880910.502:178175): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 297.898607][ T3039] audit: backlog limit exceeded [ 297.903436][ T5201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 297.910965][ T9680] audit: audit_backlog=65 > audit_backlog_limit=64 [ 297.917594][ T9680] audit: audit_lost=4522 audit_rate_limit=0 audit_backlog_limit=64 [ 298.023776][T21116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.035316][T21116] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.063477][T21116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.130463][T21121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.975980][T21186] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.7033'. [ 300.064667][T21194] gretap0: entered promiscuous mode [ 300.133257][T21194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.201862][T21197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.607012][T21237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.692342][T21244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.377922][T21294] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.7080'. [ 302.782330][ T28] kauditd_printk_skb: 32213 callbacks suppressed [ 302.782346][ T28] audit: type=1400 audit(1771880915.522:203777): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 302.830288][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 302.836888][ T3039] audit: audit_lost=6727 audit_rate_limit=0 audit_backlog_limit=64 [ 302.879905][ T3039] audit: backlog limit exceeded [ 302.880033][ T28] audit: type=1400 audit(1771880915.522:203778): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 302.902296][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 302.921672][T21301] audit: audit_backlog=65 > audit_backlog_limit=64 [ 302.941754][ T3039] audit: audit_lost=6728 audit_rate_limit=0 audit_backlog_limit=64 [ 302.949675][ T3039] audit: backlog limit exceeded [ 302.954825][ T28] audit: type=1400 audit(1771880915.522:203779): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 303.481695][T21335] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.7095'. [ 303.546070][T21344] IPVS: lc: FWM 3 0x00000003 - no destination available [ 304.481655][T21379] netlink: 1363 bytes leftover after parsing attributes in process `syz.8.7113'. [ 304.578052][T21387] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7119'. [ 304.633032][T21387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7119'. [ 305.583800][T21428] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.7134'. [ 307.790367][ T28] kauditd_printk_skb: 28836 callbacks suppressed [ 307.790391][ T28] audit: type=1400 audit(1771880920.522:230712): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 307.842427][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 307.848539][ T28] audit: type=1400 audit(1771880920.532:230713): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 307.848940][ T3039] audit: audit_lost=7364 audit_rate_limit=0 audit_backlog_limit=64 [ 307.892179][ T28] audit: type=1400 audit(1771880920.532:230714): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 307.913138][ T3039] audit: backlog limit exceeded [ 307.923445][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 307.935422][ T28] audit: type=1400 audit(1771880920.532:230715): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 307.937599][ T3039] audit: audit_lost=7365 audit_rate_limit=0 audit_backlog_limit=64 [ 307.979729][ T28] audit: type=1400 audit(1771880920.532:230716): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 308.281535][T21475] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.7152'. [ 308.603968][T21493] bridge_slave_1: left allmulticast mode [ 308.615243][T21493] bridge_slave_1: left promiscuous mode [ 308.652995][T21493] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.669647][T21493] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 309.003465][T21528] netlink: 'syz.8.7181': attribute type 10 has an invalid length. [ 309.047692][T21528] team0: Port device dummy0 added [ 309.257029][T21563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7197'. [ 309.327270][T21570] netlink: 'syz.4.7200': attribute type 1 has an invalid length. [ 309.375743][T21570] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.428020][T21574] bond5: (slave veth3): Enslaving as an active interface with a down link [ 309.454249][T21570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.472127][T21570] bond5: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 310.068641][T21603] netlink: 'syz.6.7214': attribute type 4 has an invalid length. [ 310.085102][T21603] netlink: 'syz.6.7214': attribute type 4 has an invalid length. [ 310.635776][T21634] netlink: 1323 bytes leftover after parsing attributes in process `syz.0.7226'. [ 311.181092][T21682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7249'. [ 311.206762][ T5895] Bluetooth: hci0: Frame reassembly failed (-84) [ 311.509590][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7258'. [ 311.534363][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7258'. [ 311.986972][T21716] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.683725][T21734] netlink: 'syz.0.7269': attribute type 4 has an invalid length. [ 312.736837][T21735] netlink: 'syz.0.7269': attribute type 4 has an invalid length. [ 312.799939][ T28] kauditd_printk_skb: 28924 callbacks suppressed [ 312.799962][ T28] audit: type=1400 audit(1771880925.532:257933): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 312.835550][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.837608][ T28] audit: type=1400 audit(1771880925.572:257934): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 312.842395][ T3039] audit: audit_lost=7935 audit_rate_limit=0 audit_backlog_limit=64 [ 312.871977][ T3039] audit: backlog limit exceeded [ 312.877148][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 312.883908][ T3039] audit: audit_lost=7936 audit_rate_limit=0 audit_backlog_limit=64 [ 312.892196][ T3039] audit: backlog limit exceeded [ 312.893943][ T28] audit: type=1400 audit(1771880925.572:257935): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 312.897388][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.103805][ T5895] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.121944][ T5895] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.134582][ T5895] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.156732][ T5895] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.187015][ T5895] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.189317][T21740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7271'. [ 313.197037][ T5895] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.214900][ T5895] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.236231][ T5895] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.250277][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 313.552664][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7283'. [ 313.601416][T21775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7283'. [ 313.652684][T21768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7283'. [ 313.812462][T21787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7290'. [ 314.754766][T21842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=21842 comm=syz.8.7316 [ 315.659998][T13621] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.710319][T21888] team0: Port device syz_tun removed [ 315.719987][T13619] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.839958][T13619] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.885337][T21898] netlink: 1347 bytes leftover after parsing attributes in process `syz.8.7340'. [ 316.132497][T21906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.405351][T21937] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7358'. [ 316.612737][T21961] bridge0: entered promiscuous mode [ 316.618788][T21961] bridge0: port 3(macsec1) entered blocking state [ 316.637883][T21961] bridge0: port 3(macsec1) entered disabled state [ 316.656609][T21961] macsec1: entered allmulticast mode [ 316.664855][T21961] bridge0: entered allmulticast mode [ 316.673014][T21961] macsec1: left allmulticast mode [ 316.678457][T21961] bridge0: left allmulticast mode [ 316.720079][T21961] bridge0: left promiscuous mode [ 316.832422][T21972] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7375'. [ 317.810910][ T28] kauditd_printk_skb: 19161 callbacks suppressed [ 317.810924][ T28] audit: type=1400 audit(1771880930.552:275352): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 317.824375][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.849111][ T28] audit: type=1400 audit(1771880930.552:275353): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 317.869390][ T3039] audit: audit_lost=8519 audit_rate_limit=0 audit_backlog_limit=64 [ 317.882311][ T28] audit: type=1400 audit(1771880930.552:275354): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 317.907002][ T3039] audit: backlog limit exceeded [ 317.923941][T22034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.928206][ T5201] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.940116][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.947499][ T9680] audit: audit_backlog=65 > audit_backlog_limit=64 [ 318.212214][T22069] ================================================================== [ 318.220314][T22069] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 318.227265][T22069] [ 318.229590][T22069] read-write to 0xffff8881050944ec of 4 bytes by task 22063 on cpu 1: [ 318.237755][T22069] fifo_open+0x59f/0x5d0 [ 318.242030][T22069] do_dentry_open+0x4ca/0xa90 [ 318.246717][T22069] vfs_open+0x37/0x1e0 [ 318.250788][T22069] path_openat+0x1b70/0x2050 [ 318.255395][T22069] do_file_open+0x16c/0x290 [ 318.259920][T22069] do_sys_openat2+0x94/0x130 [ 318.264528][T22069] __x64_sys_open+0xe6/0x110 [ 318.269147][T22069] x64_sys_call+0x14b9/0x3020 [ 318.273844][T22069] do_syscall_64+0x12c/0x370 [ 318.278447][T22069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.284429][T22069] [ 318.286747][T22069] read to 0xffff8881050944ec of 4 bytes by task 22069 on cpu 0: [ 318.294365][T22069] wait_for_partner+0xd5/0x1e0 [ 318.299125][T22069] fifo_open+0x462/0x5d0 [ 318.303352][T22069] do_dentry_open+0x4ca/0xa90 [ 318.308382][T22069] vfs_open+0x37/0x1e0 [ 318.312455][T22069] path_openat+0x1b70/0x2050 [ 318.317040][T22069] do_file_open+0x16c/0x290 [ 318.321542][T22069] do_sys_openat2+0x94/0x130 [ 318.326130][T22069] __x64_sys_openat+0xf2/0x120 [ 318.330886][T22069] x64_sys_call+0x1e39/0x3020 [ 318.335564][T22069] do_syscall_64+0x12c/0x370 [ 318.340152][T22069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.346035][T22069] [ 318.348343][T22069] value changed: 0x00000001 -> 0x00000002 [ 318.354045][T22069] [ 318.356370][T22069] Reported by Kernel Concurrency Sanitizer on: [ 318.362506][T22069] CPU: 0 UID: 0 PID: 22069 Comm: syz.6.7410 Tainted: G W syzkaller #0 PREEMPT(full) [ 318.373440][T22069] Tainted: [W]=WARN [ 318.377228][T22069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.387274][T22069] ================================================================== [ 322.819986][ T28] kauditd_printk_skb: 48818 callbacks suppressed [ 322.820002][ T28] audit: type=1400 audit(1771880935.552:321597): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 322.827178][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.848531][ T28] audit: type=1400 audit(1771880935.562:321598): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 322.854519][ T3039] audit: audit_lost=9380 audit_rate_limit=0 audit_backlog_limit=64 [ 322.883608][ T3039] audit: backlog limit exceeded [ 322.887618][ T28] audit: type=1400 audit(1771880935.562:321599): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 322.888791][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.910707][ T28] audit: type=1400 audit(1771880935.562:321600): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 322.916374][ T3039] audit: audit_lost=9381 audit_rate_limit=0 audit_backlog_limit=64 [ 322.937711][ T28] audit: type=1400 audit(1771880935.562:321601): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.829906][ T28] kauditd_printk_skb: 54038 callbacks suppressed [ 327.829921][ T28] audit: type=1400 audit(1771880940.562:372846): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.837018][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 327.857865][ T28] audit: type=1400 audit(1771880940.572:372847): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.863997][ T3039] audit: audit_lost=10313 audit_rate_limit=0 audit_backlog_limit=64 [ 327.888196][ T28] audit: type=1400 audit(1771880940.572:372848): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.893377][ T3039] audit: backlog limit exceeded [ 327.914902][ T28] audit: type=1400 audit(1771880940.572:372849): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.919783][ T3039] audit: audit_backlog=65 > audit_backlog_limit=64 [ 327.940713][ T28] audit: type=1400 audit(1771880940.572:372850): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.959434][ T3039] audit: audit_lost=10314 audit_rate_limit=0 audit_backlog_limit=64