last executing test programs: 5.821616347s ago: executing program 0 (id=2802): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x40480d4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 5.310033513s ago: executing program 0 (id=2813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) 5.267115577s ago: executing program 4 (id=2815): r0 = gettid() signalfd(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) tkill(r0, 0x4) 4.826041715s ago: executing program 3 (id=2822): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340), 0x0, 0x20000001) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1}, 0x8}], 0x1, 0x100, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d1", 0x1}], 0x1}}], 0x1, 0x4c000) 4.43679388s ago: executing program 0 (id=2825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r7, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}], r9}, 0x18, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4.151599794s ago: executing program 0 (id=2828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x201}, 0x14}}, 0x0) 4.108431528s ago: executing program 0 (id=2830): r0 = gettid() signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x4) 3.926941665s ago: executing program 3 (id=2831): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1, 0x31c}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff}) io_uring_enter(r0, 0x7a91, 0x0, 0x0, 0x0, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x44040001, 0x1}) 3.63615469s ago: executing program 2 (id=2832): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0xfffffffb}, 0x38) 3.429784768s ago: executing program 3 (id=2833): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x2d, 0x20040040) io_setup(0x403, &(0x7f0000000500)=0x0) io_submit(r1, 0x0, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xcf0c, 0xc000, 0xc, 0xa0002f5}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 3.309005409s ago: executing program 1 (id=2835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) setgroups(0x0, 0x0) shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) 3.308490389s ago: executing program 3 (id=2836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) getgroups(0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100)) setgroups(0x0, 0x0) shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_io_uring_submit(0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) 2.476786662s ago: executing program 1 (id=2837): getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) socket$nl_netfilter(0x10, 0x3, 0xc) 2.215127955s ago: executing program 4 (id=2838): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x48010) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 2.16046004s ago: executing program 3 (id=2839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r7, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}], r9}, 0x18, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) r10 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.716589509s ago: executing program 2 (id=2840): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) pipe(&(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.615427618s ago: executing program 4 (id=2841): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.580288251s ago: executing program 1 (id=2842): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000003090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.520181496s ago: executing program 1 (id=2843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r6, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}]}, 0x18, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.508730448s ago: executing program 4 (id=2844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 1.264423139s ago: executing program 2 (id=2845): socketpair(0x10, 0x1, 0x6, &(0x7f0000001840)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80000e4) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000001) 1.263724089s ago: executing program 3 (id=2846): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x686, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e1d932, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x80, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf3019, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) timer_create(0xfffffffc, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 1.14028267s ago: executing program 1 (id=2847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000004) socket$rds(0x15, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r4, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) sendmmsg$inet(r7, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x70, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xc3, [@dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @dev={0xac, 0x14, 0x14, 0x17}]}, @lsrr={0x83, 0xb, 0x7b, [@rand_addr=0x64010100, @local]}, @timestamp_addr={0x44, 0x34, 0x5f, 0x1, 0x0, [{@multicast2, 0x7fffffff}, {@multicast2, 0x8}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0xd}, {@multicast2, 0x7ff}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x170, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0x7, [{@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x5}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0xfff}]}, @cipso={0x86, 0x48, 0x1, [{0x6, 0x6, "81dcc939"}, {0x6, 0x7, "e155ce4130"}, {0x2, 0xa, "fb6b9135c2e3b04a"}, {0x0, 0x11, "228cdd478e14416b4e3e804bae49d8"}, {0x2, 0x6, "728c0717"}, {0x0, 0x5, "7ce36e"}, {0xd, 0xf, "64d77b8fdf86de38e83be91830"}]}, @cipso={0x86, 0x30, 0x2, [{0x5, 0xe, "1614379be2e05055f18647aa"}, {0x0, 0x3, '\f'}, {0x2, 0x8, "e9ba5e7f27a1"}, {0x0, 0x11, "4bad43a8f622d932cc8113cc77e5fb"}]}, @timestamp_prespec={0x44, 0x1c, 0xa5, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x8}, {@multicast1, 0x1}, {@private=0xa010102, 0xd6b}]}, @rr={0x7, 0xf, 0xff, [@multicast1, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0x44, 0x5b, 0x3, 0xe, [{@broadcast, 0x6a89}, {@loopback, 0xfffffffb}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xdf02}, {@private=0xa010102, 0x2}, {@private=0xa010101, 0xb5}, {@rand_addr=0x64010101, 0x2}, {@rand_addr=0x64010100, 0x1}]}, @cipso={0x86, 0x49, 0x3, [{0x2, 0xa, "18c0600092aa130e"}, {0x5, 0x4, "7de4"}, {0x6, 0xc, "0a905932407461b31308"}, {0x0, 0xa, "3aafa85e02ea1ac9"}, {0x7, 0x5, "9fba0b"}, {0x2, 0xb, "608a170f733d02ac8e"}, {0x7, 0xf, "5b22404c91963c84636c83d865"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x68}}], 0x290}}], 0x1, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000000, 0x34}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x884) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420880}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x400c0c4) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r11, &(0x7f0000000340)={0x2, 0x8, @rand_addr=0x64010102}, 0x10) sendmsg$inet(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r11, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r12, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000940)={0x18, r13, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 987.145184ms ago: executing program 0 (id=2848): r0 = gettid() signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) tkill(r0, 0x4) 608.982737ms ago: executing program 4 (id=2849): socketpair(0x10, 0x1, 0x6, &(0x7f0000001840)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80000e4) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000001) 608.213427ms ago: executing program 2 (id=2859): socketpair(0x10, 0x1, 0x6, &(0x7f0000001840)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80000e4) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000001) 479.580488ms ago: executing program 4 (id=2850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) getgroups(0x0, 0x0) setgroups(0x0, 0x0) shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) syz_io_uring_setup(0x83a, &(0x7f00000000c0)={0x0, 0x3d06, 0x400, 0x2, 0x154}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x5, 0x10, 0x0, 0x1, [@generic="8b"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) 378.439337ms ago: executing program 1 (id=2851): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 372.400628ms ago: executing program 2 (id=2852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd23, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x30, 0x2c, 0xd23, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r9, {0xf2ff, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 0s ago: executing program 2 (id=2853): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1, 0x31c}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x7a91, 0x0, 0x0, 0x0, 0x18) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000580)={&(0x7f0000002000)={[{0x0}, {0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0x8}, {0x0}, {0x0}, {0x0}, {0x0, 0x0, 0x1}]}, 0x8}, 0x1) kernel console output (not intermixed with test programs): [ 32.283536][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.301913][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.313868][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.323278][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.325017][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.330722][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.353541][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.367182][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.409391][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.435925][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.459214][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.475697][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.524070][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.541796][ T3494] SELinux: policydb string SE Lin does not match my string SE Linux [ 32.568756][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.577650][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.587485][ T3494] SELinux: failed to load policy [ 32.608853][ T3487] syzkaller0: entered promiscuous mode [ 32.614561][ T3487] syzkaller0: entered allmulticast mode [ 32.676546][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.705401][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.741084][ T3506] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 32.867257][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.886533][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.918924][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.929725][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.959408][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.992042][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.020151][ T3521] loop1: detected capacity change from 0 to 128 [ 33.154163][ T3526] netlink: 176 bytes leftover after parsing attributes in process `syz.2.18'. [ 33.536877][ T3553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 33.537618][ T3554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 33.679110][ T3562] netlink: 164 bytes leftover after parsing attributes in process `syz.2.33'. [ 33.822695][ C0] hrtimer: interrupt took 24531 ns [ 33.855974][ T3567] netlink: 15 bytes leftover after parsing attributes in process `syz.2.36'. [ 33.947437][ T3579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.005619][ T3580] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 34.053846][ T3587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.098898][ T3591] netlink: 164 bytes leftover after parsing attributes in process `syz.1.46'. [ 34.112641][ T3593] SELinux: policydb string SE Linu does not match my string SE Linux [ 34.121404][ T3593] SELinux: failed to load policy [ 34.239465][ T3607] loop4: detected capacity change from 0 to 128 [ 34.270800][ T3607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.271453][ T3609] tipc: Started in network mode [ 34.288809][ T3609] tipc: Node identity 2e3ca2d0e1fc, cluster identity 4711 [ 34.296160][ T3607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.296960][ T3609] tipc: Enabled bearer , priority 0 [ 34.329063][ T3609] syzkaller0: entered promiscuous mode [ 34.334774][ T3609] syzkaller0: entered allmulticast mode [ 34.347799][ T3609] tipc: Resetting bearer [ 34.355604][ T3608] tipc: Resetting bearer [ 34.363513][ T3608] tipc: Disabling bearer [ 34.534640][ T3614] syzkaller0: entered promiscuous mode [ 34.540276][ T3614] syzkaller0: entered allmulticast mode [ 34.686373][ T3623] netlink: 164 bytes leftover after parsing attributes in process `syz.2.60'. [ 34.705215][ T3620] netlink: 15 bytes leftover after parsing attributes in process `syz.0.59'. [ 34.712890][ T3625] SELinux: policydb string SE Linu does not match my string SE Linux [ 34.712948][ T3625] SELinux: failed to load policy [ 34.986747][ T3642] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 35.005396][ T3650] netlink: 164 bytes leftover after parsing attributes in process `syz.3.71'. [ 35.070113][ T3652] netlink: 15 bytes leftover after parsing attributes in process `syz.3.72'. [ 35.137921][ T3661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.187828][ T3665] loop0: detected capacity change from 0 to 128 [ 35.228388][ T3665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.260484][ T3665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.267668][ T3670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.302531][ T3674] netlink: 164 bytes leftover after parsing attributes in process `syz.2.82'. [ 35.457649][ T3687] loop3: detected capacity change from 0 to 512 [ 35.475044][ T3687] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.530382][ T3687] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.564742][ T3687] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.87: invalid indirect mapped block 4294967295 (level 0) [ 35.604390][ T3687] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 35.604591][ T3687] EXT4-fs (loop3): Remounting filesystem read-only [ 35.614364][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 35.614398][ C0] EXT4-fs (loop3): initial error at time 1771938156: ext4_free_branches:1023: inode 16 [ 35.614443][ C0] EXT4-fs (loop3): last error at time 1771938156: ext4_free_branches:1023: inode 16 [ 35.687704][ T3687] EXT4-fs (loop3): 1 orphan inode deleted [ 35.716697][ T3687] EXT4-fs (loop3): 1 truncate cleaned up [ 35.737628][ T3687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.770188][ T3696] netlink: 15 bytes leftover after parsing attributes in process `syz.4.90'. [ 35.790803][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.843590][ T3702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.053655][ T3727] loop2: detected capacity change from 0 to 512 [ 36.062670][ T3727] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.081050][ T3727] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.104: invalid indirect mapped block 4294967295 (level 0) [ 36.097668][ T3727] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 36.097813][ T3727] EXT4-fs (loop2): Remounting filesystem read-only [ 36.107336][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 36.107356][ C0] EXT4-fs (loop2): initial error at time 1771938157: ext4_free_branches:1023: inode 16 [ 36.107384][ C0] EXT4-fs (loop2): last error at time 1771938157: ext4_free_branches:1023: inode 16 [ 36.141402][ T3727] EXT4-fs (loop2): 1 orphan inode deleted [ 36.148167][ T3727] EXT4-fs (loop2): 1 truncate cleaned up [ 36.154899][ T3727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.171032][ T3731] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 36.331801][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.346114][ T3737] tipc: Started in network mode [ 36.357182][ T3737] tipc: Node identity b22fa22bdccc, cluster identity 4711 [ 36.379924][ T3737] tipc: Enabled bearer , priority 0 [ 36.401341][ T3737] syzkaller0: entered promiscuous mode [ 36.420325][ T3737] syzkaller0: entered allmulticast mode [ 36.432759][ T3737] tipc: Resetting bearer [ 36.451207][ T3746] loop0: detected capacity change from 0 to 128 [ 36.454759][ T3735] tipc: Resetting bearer [ 36.470810][ T3748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.482839][ T3746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.495417][ T3746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.497882][ T3749] syz.2.108 uses obsolete (PF_INET,SOCK_PACKET) [ 36.511487][ T3735] tipc: Disabling bearer [ 37.138586][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 37.138602][ T28] audit: type=1400 audit(1771938158.175:172): avc: denied { create } for pid=3795 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 37.208674][ T28] audit: type=1400 audit(1771938158.185:173): avc: denied { sys_admin } for pid=3795 comm="syz.4.134" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 37.239036][ T28] audit: type=1400 audit(1771938158.225:174): avc: denied { mount } for pid=3795 comm="syz.4.134" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 37.261833][ T28] audit: type=1400 audit(1771938158.245:175): avc: denied { write } for pid=3802 comm="syz.0.137" name="vlan0" dev="proc" ino=4026533325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.288623][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.534047][ T3819] loop3: detected capacity change from 0 to 512 [ 37.541545][ T3819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.815259][ T3819] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.140: invalid indirect mapped block 4294967295 (level 0) [ 37.838567][ T3819] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 37.843594][ T3819] EXT4-fs (loop3): Remounting filesystem read-only [ 37.853026][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 37.853046][ C1] EXT4-fs (loop3): initial error at time 1771938158: ext4_free_branches:1023: inode 16 [ 37.853071][ C1] EXT4-fs (loop3): last error at time 1771938158: ext4_free_branches:1023: inode 16 [ 37.938824][ T3819] EXT4-fs (loop3): 1 orphan inode deleted [ 37.965519][ T3819] EXT4-fs (loop3): 1 truncate cleaned up [ 37.978142][ T3808] loop0: detected capacity change from 0 to 32768 [ 37.987877][ T3819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.086041][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.151654][ T28] audit: type=1400 audit(1771938159.195:176): avc: denied { connect } for pid=3848 comm="syz.2.155" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.306732][ T28] audit: type=1400 audit(1771938159.195:177): avc: denied { write } for pid=3848 comm="syz.2.155" path="socket:[5622]" dev="sockfs" ino=5622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.413345][ T3859] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 38.429712][ T28] audit: type=1400 audit(1771938159.435:178): avc: denied { setopt } for pid=3858 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.482416][ T28] audit: type=1400 audit(1771938159.445:179): avc: denied { bind } for pid=3858 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.538627][ T28] audit: type=1400 audit(1771938159.445:180): avc: denied { read } for pid=3858 comm="syz.2.158" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.588589][ T28] audit: type=1400 audit(1771938159.445:181): avc: denied { open } for pid=3858 comm="syz.2.158" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.940591][ T3810] Bluetooth: hci0: command 0x1003 tx timeout [ 39.946919][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.503136][ T3886] loop1: detected capacity change from 0 to 128 [ 40.519316][ T3886] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.867848][ T3886] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.946600][ T3882] __nla_validate_parse: 4 callbacks suppressed [ 40.946616][ T3882] netlink: 15 bytes leftover after parsing attributes in process `syz.3.169'. [ 40.989188][ T3893] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 41.107878][ T3903] loop0: detected capacity change from 0 to 512 [ 41.126212][ T3908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.129887][ T3903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.146469][ T3903] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.173: invalid indirect mapped block 4294967295 (level 0) [ 41.161669][ T3903] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.161830][ T3903] EXT4-fs (loop0): Remounting filesystem read-only [ 41.169737][ T3915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.171090][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 41.192524][ C0] EXT4-fs (loop0): initial error at time 1771938162: ext4_free_branches:1023: inode 16 [ 41.202375][ C0] EXT4-fs (loop0): last error at time 1771938162: ext4_free_branches:1023: inode 16 [ 41.212181][ T3903] EXT4-fs (loop0): 1 orphan inode deleted [ 41.218633][ T3903] EXT4-fs (loop0): 1 truncate cleaned up [ 41.225113][ T3903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.280384][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.359814][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.563689][ T3942] tipc: Started in network mode [ 41.568885][ T3942] tipc: Node identity de8e35035ab8, cluster identity 4711 [ 41.584189][ T3942] tipc: Enabled bearer , priority 0 [ 41.600911][ T3942] syzkaller0: entered promiscuous mode [ 41.616721][ T3942] syzkaller0: entered allmulticast mode [ 41.629093][ T3945] loop4: detected capacity change from 0 to 512 [ 41.639357][ T3941] tipc: Resetting bearer [ 41.648122][ T3941] tipc: Disabling bearer [ 41.676571][ T3945] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.709821][ T3945] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.191: invalid indirect mapped block 4294967295 (level 0) [ 41.735666][ T3945] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.738519][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 41.747915][ T3928] loop0: detected capacity change from 0 to 32768 [ 41.754334][ C0] EXT4-fs (loop4): initial error at time 1771938162: ext4_free_branches:1023: inode 16 [ 41.771133][ C0] EXT4-fs (loop4): last error at time 1771938162: ext4_free_branches:1023: inode 16 [ 41.782240][ T3945] EXT4-fs (loop4): Remounting filesystem read-only [ 41.795543][ T3945] EXT4-fs (loop4): 1 orphan inode deleted [ 41.807347][ T3945] EXT4-fs (loop4): 1 truncate cleaned up [ 41.817791][ T3953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.827627][ T3945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.849211][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.973064][ T3972] loop4: detected capacity change from 0 to 128 [ 41.994235][ T3972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.004899][ T3972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.011860][ T3973] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 42.078799][ T3969] netlink: 15 bytes leftover after parsing attributes in process `syz.3.202'. [ 42.172592][ T3979] loop2: detected capacity change from 0 to 512 [ 42.179647][ T3979] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.191320][ T3979] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.205: invalid indirect mapped block 4294967295 (level 0) [ 42.205993][ T3979] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 42.206241][ T3979] EXT4-fs (loop2): Remounting filesystem read-only [ 42.215622][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 42.215639][ C0] EXT4-fs (loop2): initial error at time 1771938163: ext4_free_branches:1023: inode 16 [ 42.215671][ C0] EXT4-fs (loop2): last error at time 1771938163: ext4_free_branches:1023: inode 16 [ 42.248996][ T3979] EXT4-fs (loop2): 1 orphan inode deleted [ 42.255002][ T3979] EXT4-fs (loop2): 1 truncate cleaned up [ 42.261105][ T3979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.287355][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.337350][ T3984] tipc: Enabled bearer , priority 0 [ 42.346156][ T3984] syzkaller0: entered promiscuous mode [ 42.352036][ T3984] syzkaller0: entered allmulticast mode [ 42.363042][ T3983] tipc: Resetting bearer [ 42.374692][ T3983] tipc: Disabling bearer [ 42.469759][ T3989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 42.640774][ T4006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 42.830786][ T4009] Zero length message leads to an empty skb [ 42.865537][ T4008] netlink: 15 bytes leftover after parsing attributes in process `syz.2.217'. [ 43.031052][ T4021] loop1: detected capacity change from 0 to 128 [ 43.051663][ T4021] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.133222][ T4021] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.202932][ T4023] loop3: detected capacity change from 0 to 128 [ 43.304915][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.345865][ T4025] loop4: detected capacity change from 0 to 128 [ 43.372355][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.448593][ T3810] Bluetooth: hci0: command 0x1003 tx timeout [ 43.455011][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.548762][ T4008] syz.2.217 (4008) used greatest stack depth: 10312 bytes left [ 43.584052][ T4028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 43.638693][ T4030] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 43.699192][ T4039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.060732][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 44.060747][ T28] audit: type=1400 audit(1771938165.105:186): avc: denied { mounton } for pid=4046 comm="syz.1.231" path="/proc/97/task" dev="proc" ino=5954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 44.135089][ T28] audit: type=1400 audit(1771938165.175:187): avc: denied { firmware_load } for pid=4052 comm="syz.3.234" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 44.180566][ T4053] mmap: syz.3.234 (4053) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.181176][ T4054] netlink: 15 bytes leftover after parsing attributes in process `syz.1.233'. [ 44.210854][ T4053] syz.3.234 (4053) used greatest stack depth: 9912 bytes left [ 44.313385][ T4062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.479582][ T4069] loop0: detected capacity change from 0 to 128 [ 44.501451][ T4069] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.519698][ T4069] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.180460][ T28] audit: type=1400 audit(1771938166.215:188): avc: denied { mount } for pid=4071 comm="syz.3.242" name="/" dev="ramfs" ino=6952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 45.358733][ T4080] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 45.400381][ T4091] netlink: 15 bytes leftover after parsing attributes in process `syz.1.249'. [ 46.037769][ T4111] loop0: detected capacity change from 0 to 128 [ 46.057275][ T4111] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.101861][ T4111] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.572657][ T4123] netlink: 15 bytes leftover after parsing attributes in process `syz.3.263'. [ 46.648053][ T28] audit: type=1400 audit(1771938167.685:189): avc: denied { setopt } for pid=4134 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.672812][ T4135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.266'. [ 46.699263][ T28] audit: type=1400 audit(1771938167.725:190): avc: denied { write } for pid=4134 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.805520][ T4144] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 46.892401][ T3468] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.054570][ T28] audit: type=1400 audit(1771938168.095:191): avc: denied { create } for pid=4156 comm="syz.0.274" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 47.144276][ T4154] loop3: detected capacity change from 0 to 32768 [ 47.403585][ T4163] loop0: detected capacity change from 0 to 128 [ 47.425002][ T4163] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.442451][ T4163] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.924755][ T4181] netlink: 15 bytes leftover after parsing attributes in process `syz.4.281'. [ 48.167616][ T4196] loop1: detected capacity change from 0 to 512 [ 48.181101][ T4196] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.189484][ T4193] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 48.222849][ T4196] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.287: invalid indirect mapped block 4294967295 (level 0) [ 48.237250][ T4196] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.237502][ T4196] EXT4-fs (loop1): Remounting filesystem read-only [ 48.246816][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 48.246839][ C0] EXT4-fs (loop1): initial error at time 1771938169: ext4_free_branches:1023: inode 16 [ 48.246893][ C0] EXT4-fs (loop1): last error at time 1771938169: ext4_free_branches:1023: inode 16 [ 48.249304][ T4202] netlink: 15 bytes leftover after parsing attributes in process `syz.0.285'. [ 48.253973][ T4196] EXT4-fs (loop1): 1 orphan inode deleted [ 48.295205][ T4196] EXT4-fs (loop1): 1 truncate cleaned up [ 48.301148][ T4199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.302369][ T4196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.348866][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.826179][ T4230] loop2: detected capacity change from 0 to 128 [ 48.845475][ T4230] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.907095][ T4230] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.950675][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.957242][ T3810] Bluetooth: hci0: command 0x1003 tx timeout [ 49.606871][ T4259] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 49.773072][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.779994][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.972640][ T4275] loop3: detected capacity change from 0 to 32768 [ 50.098567][ T4292] loop0: detected capacity change from 0 to 512 [ 50.146997][ T4293] loop1: detected capacity change from 0 to 128 [ 50.167925][ T4293] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.186206][ T4292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.201049][ T4293] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.253593][ T4292] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.321: invalid indirect mapped block 4294967295 (level 0) [ 50.273838][ T4292] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 50.274196][ T4292] EXT4-fs (loop0): Remounting filesystem read-only [ 50.283605][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 50.283624][ C0] EXT4-fs (loop0): initial error at time 1771938171: ext4_free_branches:1023: inode 16 [ 50.283651][ C0] EXT4-fs (loop0): last error at time 1771938171: ext4_free_branches:1023: inode 16 [ 50.349787][ T4292] EXT4-fs (loop0): 1 orphan inode deleted [ 50.355847][ T4292] EXT4-fs (loop0): 1 truncate cleaned up [ 50.363338][ T4292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.530568][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.958029][ T4318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.084705][ T4323] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 51.307882][ T4334] bridge_slave_1: left allmulticast mode [ 51.313854][ T4334] bridge_slave_1: left promiscuous mode [ 51.320194][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.328135][ T4334] bridge_slave_0: left allmulticast mode [ 51.333982][ T4334] bridge_slave_0: left promiscuous mode [ 51.339851][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.491184][ T4337] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 51.548796][ T4342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.688740][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 51.734526][ T4349] netlink: 15 bytes leftover after parsing attributes in process `syz.4.343'. [ 51.774487][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.348'. [ 51.796534][ T4359] ip6gre1: entered promiscuous mode [ 51.808606][ T3810] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.808613][ T4359] ip6gre1: entered allmulticast mode [ 51.820619][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 51.908422][ T4367] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 52.079735][ T4375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.190372][ T4384] loop4: detected capacity change from 0 to 128 [ 52.209819][ T4384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.224645][ T4384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.319815][ T4397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 52.360365][ T4397] netlink: 15 bytes leftover after parsing attributes in process `syz.0.364'. [ 52.385392][ T4401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.521509][ T4408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'. [ 52.539477][ T4410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.572632][ T4408] ip6gre1: entered promiscuous mode [ 52.587844][ T4408] ip6gre1: entered allmulticast mode [ 52.712578][ T28] audit: type=1400 audit(1771938173.755:192): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.827328][ T4431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.885328][ T4434] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 52.899144][ T4435] netlink: 15 bytes leftover after parsing attributes in process `syz.0.378'. [ 52.949697][ T4439] netlink: 15 bytes leftover after parsing attributes in process `syz.4.382'. [ 53.149039][ T195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.166449][ T195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.188564][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.344908][ T4458] loop3: detected capacity change from 0 to 128 [ 53.395401][ T4458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.434973][ T4458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.519801][ T4468] netlink: 15 bytes leftover after parsing attributes in process `syz.4.394'. [ 53.632096][ T4476] netlink: 15 bytes leftover after parsing attributes in process `syz.2.397'. [ 53.658588][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.820906][ T3420] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 53.862405][ T4489] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 54.124683][ T4510] netlink: 'syz.4.412': attribute type 1 has an invalid length. [ 54.212400][ T4510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.227507][ T4517] bond1: (slave geneve2): making interface the new active one [ 54.237256][ T4517] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 54.748165][ T4557] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 55.339759][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.609170][ T4590] loop2: detected capacity change from 0 to 32768 [ 56.254921][ T4630] loop3: detected capacity change from 0 to 128 [ 56.274893][ T4630] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.681398][ T4630] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.315833][ T4655] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 57.328633][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 57.409608][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 57.420914][ T3810] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.562268][ T4672] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 57.666717][ T4680] syzkaller0: entered promiscuous mode [ 57.680690][ T4680] syzkaller0: entered allmulticast mode [ 57.899710][ T28] audit: type=1400 audit(1771938178.945:193): avc: denied { ioctl } for pid=4688 comm="syz.2.483" path="socket:[9245]" dev="sockfs" ino=9245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.959460][ T28] audit: type=1400 audit(1771938178.975:194): avc: denied { ioctl } for pid=4688 comm="syz.2.483" path="socket:[9244]" dev="sockfs" ino=9244 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.055671][ T4694] bond0: (slave bond_slave_0): Releasing backup interface [ 58.087576][ T4694] bond0: (slave bond_slave_1): Releasing backup interface [ 58.124455][ T4694] team0: Port device team_slave_0 removed [ 58.180172][ T4694] team0: Port device team_slave_1 removed [ 58.193318][ T4694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.219006][ T4694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.241308][ T4710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.251655][ T4694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.256065][ T4710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.286053][ T4694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.313711][ T4694] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 58.378964][ T4719] tipc: Started in network mode [ 58.384505][ T4719] tipc: Node identity b2835459691c, cluster identity 4711 [ 58.408567][ T4719] tipc: Enabled bearer , priority 0 [ 58.423362][ T4719] syzkaller0: entered promiscuous mode [ 58.442328][ T4719] syzkaller0: entered allmulticast mode [ 58.474261][ T4719] tipc: Resetting bearer [ 58.482103][ T4718] tipc: Resetting bearer [ 58.505785][ T4718] tipc: Disabling bearer [ 58.691968][ T4726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.849547][ T4738] syzkaller0: entered promiscuous mode [ 58.864159][ T4738] syzkaller0: entered allmulticast mode [ 59.227346][ T4756] __nla_validate_parse: 3 callbacks suppressed [ 59.227368][ T4756] netlink: 15 bytes leftover after parsing attributes in process `syz.0.506'. [ 60.128858][ T4795] netlink: 15 bytes leftover after parsing attributes in process `syz.2.520'. [ 60.255910][ T4807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.382609][ T4810] netlink: 15 bytes leftover after parsing attributes in process `syz.4.526'. [ 60.562707][ T4822] netlink: 68 bytes leftover after parsing attributes in process `syz.3.531'. [ 60.581315][ T4822] netlink: 'syz.3.531': attribute type 1 has an invalid length. [ 60.611492][ T4822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.824439][ T4846] netlink: 15 bytes leftover after parsing attributes in process `syz.1.540'. [ 60.934387][ T4857] tipc: Enabled bearer , priority 0 [ 60.944339][ T4857] tipc: Resetting bearer [ 60.953186][ T4856] tipc: Disabling bearer [ 61.075446][ T4864] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.164253][ T4872] loop2: detected capacity change from 0 to 7 [ 61.373596][ T4883] netlink: 15 bytes leftover after parsing attributes in process `syz.0.557'. [ 61.478088][ T4887] tipc: Started in network mode [ 61.483494][ T4887] tipc: Node identity 12a2663e9185, cluster identity 4711 [ 61.491225][ T4887] tipc: Enabled bearer , priority 0 [ 61.501439][ T4887] tipc: Resetting bearer [ 61.509883][ T4886] tipc: Disabling bearer [ 61.580432][ T4891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.634300][ T4893] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.811653][ T4909] bridge_slave_0: left allmulticast mode [ 61.830002][ T4909] bridge_slave_0: left promiscuous mode [ 61.836517][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.857143][ T4909] bridge_slave_1: left allmulticast mode [ 61.865154][ T4909] bridge_slave_1: left promiscuous mode [ 61.871566][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.887447][ T4909] bond0: (slave bond_slave_0): Releasing backup interface [ 61.898321][ T4909] bond0: (slave bond_slave_1): Releasing backup interface [ 61.912250][ T4909] team0: Port device team_slave_0 removed [ 61.924198][ T4909] team0: Port device team_slave_1 removed [ 61.935829][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.962373][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.972393][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.980780][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.004534][ T4909] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.173756][ T4921] netlink: 15 bytes leftover after parsing attributes in process `syz.1.570'. [ 62.188987][ T4923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.330179][ T4931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.591269][ T4944] tipc: Enabled bearer , priority 0 [ 62.609493][ T4944] syzkaller0: entered promiscuous mode [ 62.615183][ T4944] syzkaller0: entered allmulticast mode [ 62.644038][ T4944] tipc: Resetting bearer [ 62.667257][ T4943] tipc: Resetting bearer [ 62.686923][ T4943] tipc: Disabling bearer [ 62.741111][ T4952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.799728][ T4952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.143457][ T4960] netlink: 15 bytes leftover after parsing attributes in process `syz.3.588'. [ 63.547334][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.565404][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.681724][ T4997] netlink: 15 bytes leftover after parsing attributes in process `syz.2.605'. [ 63.722283][ T5000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.825402][ T28] audit: type=1400 audit(1771938184.865:195): avc: denied { bind } for pid=5006 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.859261][ T4984] loop3: detected capacity change from 0 to 32768 [ 64.029282][ T5009] netlink: 15 bytes leftover after parsing attributes in process `syz.2.610'. [ 64.192103][ T5017] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 64.212918][ T5021] loop2: detected capacity change from 0 to 7 [ 64.768124][ T28] audit: type=1400 audit(1771938185.805:196): avc: denied { ioctl } for pid=5050 comm="syz.1.627" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.211616][ T5065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.375424][ T28] audit: type=1400 audit(1771938186.415:197): avc: denied { bind } for pid=5071 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.408811][ T5074] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 65.488598][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 65.568565][ T3810] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.747258][ T5095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.780417][ T5100] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 65.803090][ T5100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.824525][ T5100] vlan2: entered allmulticast mode [ 65.830444][ T5100] veth0_to_bond: entered allmulticast mode [ 66.282393][ T5135] bridge_slave_0: left allmulticast mode [ 66.288088][ T5135] bridge_slave_0: left promiscuous mode [ 66.294196][ T5135] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.307217][ T5135] bridge_slave_1: left allmulticast mode [ 66.313477][ T5135] bridge_slave_1: left promiscuous mode [ 66.326955][ T5135] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.344020][ T5135] bond0: (slave bond_slave_0): Releasing backup interface [ 66.353528][ T5135] bond0: (slave bond_slave_1): Releasing backup interface [ 66.365154][ T5135] team0: Port device team_slave_0 removed [ 66.375300][ T5135] team0: Port device team_slave_1 removed [ 66.382331][ T5135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.390376][ T5135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.399916][ T5135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.407911][ T5135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.418007][ T5135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.482795][ T5142] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 66.721045][ T28] audit: type=1400 audit(1771938187.765:198): avc: denied { read } for pid=5150 comm="syz.2.665" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.745453][ T28] audit: type=1400 audit(1771938187.765:199): avc: denied { open } for pid=5150 comm="syz.2.665" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.770638][ T28] audit: type=1400 audit(1771938187.765:200): avc: denied { ioctl } for pid=5150 comm="syz.2.665" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.953727][ T5161] netlink: 15 bytes leftover after parsing attributes in process `syz.0.670'. [ 67.081521][ T5173] netlink: 15 bytes leftover after parsing attributes in process `syz.3.675'. [ 67.133643][ T5180] loop2: detected capacity change from 0 to 7 [ 67.231629][ T5192] loop2: detected capacity change from 0 to 7 [ 67.302295][ T5194] bridge_slave_0: left allmulticast mode [ 67.308236][ T5194] bridge_slave_0: left promiscuous mode [ 67.314242][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.324790][ T5194] bridge_slave_1: left allmulticast mode [ 67.332157][ T5194] bridge_slave_1: left promiscuous mode [ 67.338231][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.349212][ T5194] bond0: (slave bond_slave_0): Releasing backup interface [ 67.359595][ T5194] bond0: (slave bond_slave_1): Releasing backup interface [ 67.372045][ T5194] team0: Port device team_slave_0 removed [ 67.380948][ T5194] team0: Port device team_slave_1 removed [ 67.387988][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.396836][ T5194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.406252][ T5194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.414965][ T5194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.425331][ T5194] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.500053][ T5201] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 67.527383][ T5214] loop2: detected capacity change from 0 to 7 [ 67.589671][ T5218] netlink: 15 bytes leftover after parsing attributes in process `syz.4.691'. [ 67.742394][ T5230] syzkaller0: entered promiscuous mode [ 67.747903][ T5230] syzkaller0: entered allmulticast mode [ 67.807401][ T5224] netlink: 15 bytes leftover after parsing attributes in process `syz.3.694'. [ 67.957491][ T5242] loop2: detected capacity change from 0 to 7 [ 68.382344][ T5253] netlink: 15 bytes leftover after parsing attributes in process `syz.1.707'. [ 69.740033][ T5278] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 69.903895][ T5283] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 70.250240][ T5296] netlink: 15 bytes leftover after parsing attributes in process `syz.4.722'. [ 70.300901][ T5292] netlink: 15 bytes leftover after parsing attributes in process `syz.1.721'. [ 70.351891][ T5301] loop2: detected capacity change from 0 to 7 [ 70.969061][ T5329] netlink: 15 bytes leftover after parsing attributes in process `syz.3.733'. [ 71.593293][ T5338] loop2: detected capacity change from 0 to 7 [ 71.605076][ T5335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 71.724002][ T5342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.779113][ T5342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.254145][ T5356] syzkaller0: entered promiscuous mode [ 72.283079][ T5356] syzkaller0: entered allmulticast mode [ 72.587818][ T5364] netlink: 48 bytes leftover after parsing attributes in process `syz.2.746'. [ 72.673068][ T5370] loop2: detected capacity change from 0 to 7 [ 72.788780][ T5377] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 72.805704][ T5359] bridge_slave_1: left allmulticast mode [ 72.818321][ T5359] bridge_slave_1: left promiscuous mode [ 72.827162][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.836878][ T5359] bridge_slave_0: left allmulticast mode [ 72.843107][ T5359] bridge_slave_0: left promiscuous mode [ 72.849572][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.948246][ T5390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.971163][ T5376] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 74.081116][ T5405] netlink: 48 bytes leftover after parsing attributes in process `syz.3.760'. [ 75.668970][ T5431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.700597][ T5436] netlink: 48 bytes leftover after parsing attributes in process `syz.0.772'. [ 75.748051][ T5438] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 75.903980][ T28] audit: type=1400 audit(1771938196.935:201): avc: denied { associate } for pid=5451 comm="syz.0.778" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.992386][ T28] audit: type=1400 audit(1771938197.025:202): avc: denied { perfmon } for pid=5444 comm="syz.3.777" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.013921][ T28] audit: type=1400 audit(1771938197.025:203): avc: denied { bpf } for pid=5444 comm="syz.3.777" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.924552][ T5486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.070209][ T5490] loop2: detected capacity change from 0 to 128 [ 78.131727][ T5492] ======================================================= [ 78.131727][ T5492] WARNING: The mand mount option has been deprecated and [ 78.131727][ T5492] and is ignored by this kernel. Remove the mand [ 78.131727][ T5492] option from the mount to silence this warning. [ 78.131727][ T5492] ======================================================= [ 78.520228][ T5494] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 78.665529][ T5510] loop1: detected capacity change from 0 to 512 [ 79.216259][ T5530] syzkaller0: entered promiscuous mode [ 79.229724][ T5530] syzkaller0: entered allmulticast mode [ 79.887700][ T5537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.811'. [ 80.161034][ T5551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.304354][ T28] audit: type=1400 audit(1771938201.345:204): avc: denied { name_connect } for pid=5561 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 80.361607][ T28] audit: type=1400 audit(1771938201.405:205): avc: denied { listen } for pid=5561 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.383616][ T5567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.824'. [ 80.393740][ T5570] loop3: detected capacity change from 0 to 512 [ 80.406739][ T5559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 80.517589][ T5563] netlink: 15 bytes leftover after parsing attributes in process `syz.4.821'. [ 80.662308][ T5591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.799038][ T5596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'. [ 81.344729][ T5622] syzkaller0: entered promiscuous mode [ 81.374826][ T5622] syzkaller0: entered allmulticast mode [ 81.587369][ T5628] netlink: 15 bytes leftover after parsing attributes in process `syz.3.848'. [ 81.747798][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 82.128554][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.326737][ T5641] syzkaller0: entered promiscuous mode [ 82.338568][ T5641] syzkaller0: entered allmulticast mode [ 82.462331][ T5644] loop2: detected capacity change from 0 to 7 [ 82.604854][ T195] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.798614][ T5651] loop4: detected capacity change from 0 to 32768 [ 83.181972][ T5657] syzkaller0: entered promiscuous mode [ 83.191773][ T5657] syzkaller0: entered allmulticast mode [ 83.199725][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 83.221240][ T5661] loop0: detected capacity change from 0 to 512 [ 83.662114][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 83.692997][ T5691] loop3: detected capacity change from 0 to 512 [ 84.295651][ T5702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.618606][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.858732][ T5719] loop3: detected capacity change from 0 to 512 [ 84.887277][ T28] audit: type=1400 audit(1771938205.925:206): avc: denied { name_bind } for pid=5720 comm="syz.1.888" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.938233][ T28] audit: type=1400 audit(1771938205.955:207): avc: denied { node_bind } for pid=5720 comm="syz.1.888" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 85.116797][ T3468] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.126598][ T3468] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.138644][ T3468] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.161964][ T3468] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.414286][ T5739] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.545948][ T5749] loop4: detected capacity change from 0 to 512 [ 85.658819][ T3420] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 85.758374][ T5763] loop2: detected capacity change from 0 to 512 [ 85.809698][ T5755] netlink: 15 bytes leftover after parsing attributes in process `syz.4.904'. [ 86.148773][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 86.197599][ T5784] loop1: detected capacity change from 0 to 512 [ 86.270990][ T5790] loop2: detected capacity change from 0 to 7 [ 86.451809][ T5808] loop3: detected capacity change from 0 to 512 [ 86.747256][ T5832] loop2: detected capacity change from 0 to 7 [ 87.138814][ T5845] loop1: detected capacity change from 0 to 512 [ 87.688186][ T5880] netlink: 15 bytes leftover after parsing attributes in process `syz.1.960'. [ 87.729291][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.748647][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.761578][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.780130][ T30] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.723502][ T5920] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.945056][ T28] audit: type=1400 audit(1771938209.985:208): avc: denied { read write } for pid=5936 comm="syz.4.984" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.984978][ T28] audit: type=1400 audit(1771938209.985:209): avc: denied { open } for pid=5936 comm="syz.4.984" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 89.358642][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.372587][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.410423][ T5982] set_capacity_and_notify: 2 callbacks suppressed [ 89.410464][ T5982] loop2: detected capacity change from 0 to 7 [ 89.441307][ T406] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.458343][ T406] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.471149][ T406] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.486106][ T406] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.638512][ T5997] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1011'. [ 89.704197][ T6002] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 89.716485][ T6009] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6009 comm=syz.0.1013 [ 89.732656][ T6008] loop2: detected capacity change from 0 to 7 [ 89.956392][ T3468] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.965839][ T3468] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.975077][ T3468] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.984151][ T3468] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.432903][ T6026] loop4: detected capacity change from 0 to 164 [ 90.443908][ T28] audit: type=1400 audit(1771938211.485:210): avc: denied { mount } for pid=6025 comm="syz.4.1023" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 90.467296][ T28] audit: type=1400 audit(1771938211.495:211): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 90.525125][ T6031] syzkaller0: entered promiscuous mode [ 90.530981][ T6031] syzkaller0: entered allmulticast mode [ 90.640907][ T6037] loop2: detected capacity change from 0 to 7 [ 90.724716][ T6044] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1031'. [ 90.734649][ T6044] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1031'. [ 90.774370][ T6042] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 91.218700][ T6067] loop2: detected capacity change from 0 to 7 [ 91.277320][ T6071] loop1: detected capacity change from 0 to 512 [ 91.316310][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1043'. [ 91.329082][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1043'. [ 91.359227][ T6075] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1044'. [ 91.390431][ T6075] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1044'. [ 91.426081][ T6085] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 91.450665][ T6085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.476055][ T6092] syzkaller0: entered promiscuous mode [ 91.481822][ T6092] syzkaller0: entered allmulticast mode [ 91.506690][ T6094] loop0: detected capacity change from 0 to 512 [ 91.561495][ T406] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.605707][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1057'. [ 91.615866][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1057'. [ 91.680594][ T6107] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1059'. [ 91.711323][ T6113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1062'. [ 91.726409][ T6113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1062'. [ 91.761108][ T6115] loop2: detected capacity change from 0 to 512 [ 91.818098][ T6119] loop0: detected capacity change from 0 to 512 [ 91.829132][ T6097] loop1: detected capacity change from 0 to 32768 [ 91.870993][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 91.998956][ T6134] syzkaller0: entered promiscuous mode [ 92.004645][ T6134] syzkaller0: entered allmulticast mode [ 92.405628][ T6159] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.851490][ T6176] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6176 comm=syz.4.1090 [ 93.219967][ T6211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.237084][ T6213] netlink: 'syz.3.1109': attribute type 1 has an invalid length. [ 93.263035][ T6213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.568645][ T3810] Bluetooth: hci0: command 0x1003 tx timeout [ 93.574966][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.967081][ T406] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.031680][ T28] audit: type=1400 audit(1771938215.075:212): avc: denied { shutdown } for pid=6260 comm="syz.1.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.091620][ T28] audit: type=1400 audit(1771938215.075:213): avc: denied { getopt } for pid=6260 comm="syz.1.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.148359][ T28] audit: type=1400 audit(1771938215.095:214): avc: denied { read } for pid=6260 comm="syz.1.1132" lport=42195 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.371092][ T6287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.961572][ T6326] set_capacity_and_notify: 6 callbacks suppressed [ 94.961633][ T6326] loop2: detected capacity change from 0 to 7 [ 95.191199][ T6341] loop2: detected capacity change from 0 to 512 [ 95.336193][ T6355] loop2: detected capacity change from 0 to 7 [ 95.467023][ T6369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6369 comm=syz.2.1181 [ 95.516906][ T6371] syzkaller0: entered promiscuous mode [ 95.522641][ T6371] syzkaller0: entered allmulticast mode [ 95.640494][ T6375] tipc: Enabled bearer , priority 0 [ 95.650551][ T6375] syzkaller0: entered promiscuous mode [ 95.653506][ T28] audit: type=1400 audit(1771938216.695:215): avc: denied { create } for pid=6376 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.657730][ T6375] syzkaller0: entered allmulticast mode [ 95.724366][ T6375] tipc: Resetting bearer [ 95.732599][ T6374] tipc: Resetting bearer [ 95.740955][ T6374] tipc: Disabling bearer [ 95.955080][ T6395] syzkaller0: entered promiscuous mode [ 95.960837][ T6395] syzkaller0: entered allmulticast mode [ 95.968732][ T3810] Bluetooth: hci0: command 0x1003 tx timeout [ 95.988658][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.134384][ T28] audit: type=1400 audit(1771938217.175:216): avc: denied { module_request } for pid=6402 comm="syz.0.1197" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 96.340355][ T6417] loop0: detected capacity change from 0 to 164 [ 96.450099][ T6426] __nla_validate_parse: 39 callbacks suppressed [ 96.450119][ T6426] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1206'. [ 96.472175][ T3468] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.629626][ T6439] loop0: detected capacity change from 0 to 512 [ 96.710959][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 96.786079][ T6462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.818177][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 96.828048][ T6430] loop1: detected capacity change from 0 to 32768 [ 96.888667][ T6466] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1224'. [ 96.909727][ T6471] loop2: detected capacity change from 0 to 7 [ 97.728967][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'. [ 97.764194][ T6494] loop0: detected capacity change from 0 to 164 [ 97.793485][ T6496] loop2: detected capacity change from 0 to 7 [ 97.894600][ T6502] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1239'. [ 97.986947][ T6508] syzkaller0: entered promiscuous mode [ 97.992734][ T6508] syzkaller0: entered allmulticast mode [ 98.040008][ T6516] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1238'. [ 98.156676][ T28] audit: type=1400 audit(1771938219.195:217): avc: denied { sqpoll } for pid=6525 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.177762][ T28] audit: type=1400 audit(1771938219.195:218): avc: denied { bind } for pid=6525 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.224269][ T28] audit: type=1400 audit(1771938219.195:219): avc: denied { listen } for pid=6525 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.247097][ T28] audit: type=1400 audit(1771938219.195:220): avc: denied { connect } for pid=6525 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.268435][ T28] audit: type=1400 audit(1771938219.195:221): avc: denied { accept } for pid=6525 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.288275][ T28] audit: type=1400 audit(1771938219.195:222): avc: denied { read } for pid=6525 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.303735][ T6536] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6536 comm=syz.0.1256 [ 98.357156][ T6543] syzkaller0: entered promiscuous mode [ 98.363888][ T6543] syzkaller0: entered allmulticast mode [ 98.417500][ T28] audit: type=1400 audit(1771938219.455:223): avc: denied { mounton } for pid=6550 comm="syz.0.1263" path="/240/file0" dev="tmpfs" ino=1251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.477314][ T6553] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 98.528659][ T3810] Bluetooth: hci0: command 0x1003 tx timeout [ 98.528692][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.548771][ T6563] loop2: detected capacity change from 0 to 7 [ 98.679449][ T6576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6576 comm=syz.1.1272 [ 98.723366][ T6583] syzkaller0: entered promiscuous mode [ 98.729221][ T6583] syzkaller0: entered allmulticast mode [ 98.954702][ T28] audit: type=1400 audit(1771938219.995:224): avc: denied { read write } for pid=6597 comm="syz.1.1283" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 98.979280][ T6598] capability: warning: `syz.1.1283' uses deprecated v2 capabilities in a way that may be insecure [ 99.123197][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1291'. [ 99.230611][ T6635] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 99.429936][ T6658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.760319][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1309'. [ 99.952516][ T6685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.056223][ T6691] set_capacity_and_notify: 3 callbacks suppressed [ 100.056242][ T6691] loop2: detected capacity change from 0 to 7 [ 100.123455][ T6693] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 101.060632][ T6724] loop2: detected capacity change from 0 to 7 [ 101.183653][ T6736] syzkaller0: entered promiscuous mode [ 101.195960][ T6736] syzkaller0: entered allmulticast mode [ 101.226284][ T5687] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.234711][ T6732] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 101.340697][ T6749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.353118][ T6744] loop3: detected capacity change from 0 to 32768 [ 101.795913][ T6760] loop2: detected capacity change from 0 to 7 [ 102.717620][ T6785] loop2: detected capacity change from 0 to 7 [ 102.879012][ T6789] 9p: Bad value for 'wfdno' [ 102.915393][ T6797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.027926][ T6804] netlink: 'syz.4.1364': attribute type 1 has an invalid length. [ 103.076868][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'. [ 103.248546][ T3810] Bluetooth: hci0: command 0x1003 tx timeout [ 103.300892][ T6810] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1365'. [ 103.311053][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.732228][ T6820] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1370'. [ 103.818071][ T6830] 9p: Bad value for 'wfdno' [ 103.826446][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 103.826461][ T28] audit: type=1400 audit(1771938224.875:227): avc: denied { setopt } for pid=6831 comm="syz.0.1376" lport=44982 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 103.874845][ T6839] loop2: detected capacity change from 0 to 128 [ 103.927853][ T406] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.961021][ T6850] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 103.982631][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 104.021334][ T6852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.492127][ T6843] loop4: detected capacity change from 0 to 32768 [ 104.901132][ T30] bond0 (unregistering): Released all slaves [ 104.913769][ T30] bond1 (unregistering): Released all slaves [ 104.914419][ T6866] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1391'. [ 104.922603][ T30] bond2 (unregistering): Released all slaves [ 104.976237][ T6873] loop2: detected capacity change from 0 to 128 [ 104.984133][ T30] tipc: Left network mode [ 105.026028][ T30] hsr_slave_0: left promiscuous mode [ 105.042662][ T30] hsr_slave_1: left promiscuous mode [ 105.417043][ T6863] chnl_net:caif_netlink_parms(): no params data found [ 105.473696][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.488595][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.496773][ T6863] bridge_slave_0: entered allmulticast mode [ 105.503448][ T6863] bridge_slave_0: entered promiscuous mode [ 105.510887][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.518129][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.527147][ T6863] bridge_slave_1: entered allmulticast mode [ 105.534119][ T6863] bridge_slave_1: entered promiscuous mode [ 105.554775][ T6863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.573404][ T6863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.603084][ T28] audit: type=1400 audit(1771938226.635:228): avc: denied { read write } for pid=6934 comm="syz.2.1402" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.634162][ T28] audit: type=1400 audit(1771938226.635:229): avc: denied { open } for pid=6934 comm="syz.2.1402" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.669326][ T6863] team0: Port device team_slave_0 added [ 105.677938][ T6863] team0: Port device team_slave_1 added [ 105.720863][ T6946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.736555][ T6948] loop0: detected capacity change from 0 to 128 [ 105.744781][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.758529][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.807943][ T6863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.819617][ T6863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.827187][ T6863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.856784][ T28] audit: type=1400 audit(1771938226.895:230): avc: denied { create } for pid=6945 comm="syz.2.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.879007][ T28] audit: type=1400 audit(1771938226.895:231): avc: denied { setopt } for pid=6945 comm="syz.2.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.887575][ T6951] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1407'. [ 105.899643][ T6863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.918641][ T28] audit: type=1400 audit(1771938226.895:232): avc: denied { ioctl } for pid=6945 comm="syz.2.1405" path="socket:[17817]" dev="sockfs" ino=17817 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.974202][ T6863] hsr_slave_0: entered promiscuous mode [ 105.978563][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.981058][ T6863] hsr_slave_1: entered promiscuous mode [ 106.342706][ T7007] loop2: detected capacity change from 0 to 7 [ 106.371869][ T6863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.389895][ T6863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.402159][ T6863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.423732][ T6863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.471504][ T6863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.488240][ T6863] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.498789][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.506033][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.517506][ T5687] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.524739][ T5687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.655594][ T6863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.664304][ T7045] 9p: Bad value for 'wfdno' [ 106.780716][ T6863] veth0_vlan: entered promiscuous mode [ 106.795064][ T6863] veth1_vlan: entered promiscuous mode [ 106.813105][ T6863] veth0_macvtap: entered promiscuous mode [ 106.831978][ T6863] veth1_macvtap: entered promiscuous mode [ 106.844927][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.858810][ T6863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.864605][ T7034] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1420'. [ 106.874179][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.028805][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.076530][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.086364][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.796731][ T7110] 9p: Bad value for 'wfdno' [ 107.811132][ T7112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.825231][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1432'. [ 107.847615][ T7116] 9p: Bad value for 'wfdno' [ 108.286055][ T7144] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1444'. [ 109.069726][ T7160] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 109.127616][ T7174] loop4: detected capacity change from 0 to 128 [ 109.155652][ T7180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.405287][ T406] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.412682][ T406] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.512713][ T7197] loop4: detected capacity change from 0 to 32768 [ 109.649629][ T28] audit: type=1400 audit(1771938230.695:233): avc: denied { read } for pid=7203 comm="syz.1.1471" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.713138][ T7208] netlink: 'syz.1.1473': attribute type 4 has an invalid length. [ 109.925603][ T7222] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 110.032886][ T7228] 9p: Bad value for 'wfdno' [ 110.177264][ T7239] loop2: detected capacity change from 0 to 7 [ 111.211957][ T7284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.249999][ T7287] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 111.328004][ T7303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.388686][ T28] audit: type=1400 audit(1771938232.435:234): avc: denied { write } for pid=7302 comm="syz.3.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.408499][ T3810] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.414727][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 111.718943][ T7321] loop2: detected capacity change from 0 to 7 [ 112.020617][ T7344] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1534'. [ 112.093762][ T7352] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 112.128323][ T28] audit: type=1400 audit(1771938233.165:235): avc: denied { write } for pid=7357 comm="syz.1.1540" path="socket:[19750]" dev="sockfs" ino=19750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.330314][ T7379] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1550'. [ 112.423885][ T7385] loop2: detected capacity change from 0 to 7 [ 112.721382][ T7418] loop2: detected capacity change from 0 to 7 [ 112.747136][ T7415] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1567'. [ 112.970611][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1577'. [ 113.025140][ T28] audit: type=1400 audit(1771938234.065:236): avc: denied { mount } for pid=7442 comm="syz.2.1579" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.067294][ T7446] loop2: detected capacity change from 0 to 7 [ 113.127396][ T7439] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1577'. [ 113.377119][ T7469] loop2: detected capacity change from 0 to 7 [ 113.498541][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.750395][ T7495] loop2: detected capacity change from 0 to 7 [ 113.768975][ T7499] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1597'. [ 114.153045][ T7539] Illegal XDP return value 4294967274 on prog (id 200) dev syz_tun, expect packet loss! [ 116.293753][ T7583] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1634'. [ 116.347083][ T7584] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 116.546976][ T7595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.881124][ T7608] loop0: detected capacity change from 0 to 512 [ 116.900843][ T7608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.913771][ T7608] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.928992][ T7613] 9p: Bad value for 'wfdno' [ 116.929769][ T28] audit: type=1400 audit(1771938237.975:237): avc: denied { setattr } for pid=7607 comm="syz.0.1644" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.976613][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.057440][ T7619] loop1: detected capacity change from 0 to 512 [ 117.070403][ T7619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.111185][ T7619] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.170110][ T6863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.978956][ T28] audit: type=1400 audit(1771938238.515:238): avc: denied { checkpoint_restore } for pid=7614 comm="syz.4.1646" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.064685][ T28] audit: type=1400 audit(1771938238.995:239): avc: denied { create } for pid=7625 comm="syz.2.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.101090][ T28] audit: type=1400 audit(1771938239.005:240): avc: denied { connect } for pid=7625 comm="syz.2.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.121319][ T28] audit: type=1400 audit(1771938239.005:241): avc: denied { write } for pid=7625 comm="syz.2.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.153884][ T28] audit: type=1400 audit(1771938239.085:242): avc: denied { create } for pid=7633 comm="syz.4.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.173641][ T28] audit: type=1400 audit(1771938239.085:243): avc: denied { setopt } for pid=7633 comm="syz.4.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.981627][ T28] audit: type=1400 audit(1771938239.265:244): avc: denied { map } for pid=7633 comm="syz.4.1651" path="socket:[20844]" dev="sockfs" ino=20844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.020732][ T28] audit: type=1400 audit(1771938239.265:245): avc: denied { read accept } for pid=7633 comm="syz.4.1651" path="socket:[20844]" dev="sockfs" ino=20844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.320701][ T28] audit: type=1400 audit(1771938240.015:246): avc: denied { block_suspend } for pid=7646 comm="syz.4.1654" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.481211][ T7723] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 122.719660][ T7745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.833929][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1680'. [ 122.843687][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1680'. [ 123.067670][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 123.078646][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 123.391495][ T7794] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1711'. [ 123.594335][ T7806] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1716'. [ 123.668103][ T7808] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 124.378989][ T7830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.529894][ T7836] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1729'. [ 124.550346][ T7843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.283327][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.331073][ T7861] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 125.444531][ T7860] loop0: detected capacity change from 0 to 32768 [ 125.629727][ T7876] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1743'. [ 125.831864][ T7886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.067442][ T7895] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1753'. [ 126.193485][ T7897] 9p: Bad value for 'rfdno' [ 126.259775][ T7901] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1756'. [ 126.390764][ T7913] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 126.496541][ T7923] 9p: Bad value for 'rfdno' [ 126.869744][ T7949] wg2: entered promiscuous mode [ 126.876243][ T7949] wg2: entered allmulticast mode [ 127.328507][ T3810] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 130.736121][ T8051] 9pnet_fd: Insufficient options for proto=fd [ 131.379125][ T8087] 9pnet_fd: Insufficient options for proto=fd [ 131.842726][ T8109] 9pnet_fd: Insufficient options for proto=fd [ 132.855187][ T8144] 9pnet_fd: Insufficient options for proto=fd [ 134.121450][ T8180] 9pnet_fd: Insufficient options for proto=fd [ 134.311868][ T8191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.174257][ T8214] 9pnet_fd: Insufficient options for proto=fd [ 135.427937][ T8234] __nla_validate_parse: 1 callbacks suppressed [ 135.427958][ T8234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1893'. [ 135.468863][ T8234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1893'. [ 135.531291][ T8244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.546889][ T8246] 9p: Bad value for 'rfdno' [ 135.800144][ T8267] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 135.814905][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1907'. [ 135.912688][ T8274] 9p: Bad value for 'rfdno' [ 136.996874][ T8305] netlink: 'syz.2.1919': attribute type 1 has an invalid length. [ 137.008520][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'. [ 137.043406][ T8310] 9p: Bad value for 'rfdno' [ 137.081675][ T8315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.105904][ T8316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.412125][ T8359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.556712][ T8364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.034052][ T8413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.842892][ T8432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.149820][ T28] audit: type=1400 audit(1771938262.195:247): avc: denied { bind } for pid=8446 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.286569][ T8454] wg2: entered promiscuous mode [ 141.308588][ T8454] wg2: entered allmulticast mode [ 141.356492][ T8459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.024014][ T8474] wg2: entered promiscuous mode [ 142.039177][ T8474] wg2: entered allmulticast mode [ 142.155649][ T28] audit: type=1400 audit(1771938263.195:248): avc: denied { append } for pid=8487 comm="syz.3.1995" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 142.286109][ T8497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.896078][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.910693][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.045283][ T8533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.073698][ T8535] 9p: Could not find request transport: fd0x0000000000000003 [ 144.031497][ T8569] 9p: Bad value for 'wfdno' [ 144.229996][ T8574] loop0: detected capacity change from 0 to 764 [ 144.252875][ T8574] rock: directory entry would overflow storage [ 144.281307][ T8574] rock: sig=0x4654, size=5, remaining=4 [ 144.301989][ T28] audit: type=1400 audit(1771938265.345:249): avc: denied { read } for pid=8573 comm="syz.0.2028" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 144.431395][ T28] audit: type=1400 audit(1771938265.345:250): avc: denied { open } for pid=8573 comm="syz.0.2028" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 144.604648][ T8595] 9p: Bad value for 'wfdno' [ 144.682363][ T8600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.954382][ T8619] wg2: entered promiscuous mode [ 145.960685][ T8619] wg2: entered allmulticast mode [ 146.156585][ T8626] 9p: Bad value for 'rfdno' [ 146.302159][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 146.469690][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.510513][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.613928][ T8642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.720164][ T8648] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2060'. [ 147.035908][ T8668] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2068'. [ 147.289641][ T8681] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2073'. [ 148.960028][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.974196][ T8724] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2085'. [ 148.998696][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.038936][ T8726] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 149.121787][ T8730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.188347][ T8736] loop1: detected capacity change from 0 to 512 [ 149.200218][ T8736] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.216523][ T8736] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 149.230174][ T8736] EXT4-fs (loop1): 1 truncate cleaned up [ 149.236556][ T8736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.130425][ T28] audit: type=1400 audit(1771938271.165:251): avc: denied { setattr } for pid=8735 comm="syz.1.2095" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.391236][ T6863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.489885][ T8756] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2103'. [ 151.235338][ T8777] netlink: 'syz.3.2097': attribute type 1 has an invalid length. [ 151.243211][ T8777] netlink: 'syz.3.2097': attribute type 8 has an invalid length. [ 151.354053][ T8761] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2104'. [ 151.851135][ T8782] netlink: 'syz.1.2111': attribute type 1 has an invalid length. [ 151.859056][ T8782] netlink: 'syz.1.2111': attribute type 8 has an invalid length. [ 152.318720][ T8789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.339167][ T28] audit: type=1400 audit(1771938273.385:252): avc: denied { append } for pid=8790 comm="syz.3.2110" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 152.368009][ T28] audit: type=1400 audit(1771938273.405:253): avc: denied { write } for pid=8790 comm="syz.3.2110" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 153.215943][ T8819] loop2: detected capacity change from 0 to 512 [ 153.238710][ T8816] netlink: 'syz.0.2124': attribute type 1 has an invalid length. [ 153.246655][ T8816] netlink: 'syz.0.2124': attribute type 8 has an invalid length. [ 153.354431][ T8819] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.405036][ T8819] EXT4-fs (loop2): 1 truncate cleaned up [ 153.479467][ T8819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.533287][ T8825] wg2: left promiscuous mode [ 153.538312][ T8825] wg2: left allmulticast mode [ 153.727481][ T8825] wg2: entered promiscuous mode [ 153.739632][ T8825] wg2: entered allmulticast mode [ 154.250640][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.298240][ T8830] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2128'. [ 154.457504][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'. [ 154.508261][ T8842] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2133'. [ 154.569591][ T8859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.255110][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'. [ 155.271619][ T8881] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2149'. [ 155.305850][ T8889] wg2: left promiscuous mode [ 155.312492][ T8889] wg2: left allmulticast mode [ 155.361824][ T8898] wg2: entered promiscuous mode [ 155.366937][ T8898] wg2: entered allmulticast mode [ 156.235873][ T8938] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2162'. [ 156.517366][ T8942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.185100][ T8958] wg2: left promiscuous mode [ 157.193648][ T8958] wg2: left allmulticast mode [ 157.290230][ T8958] wg2: entered promiscuous mode [ 157.296941][ T8958] wg2: entered allmulticast mode [ 157.415268][ T8976] wg2: left promiscuous mode [ 157.417786][ T8969] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2174'. [ 157.428004][ T8976] wg2: left allmulticast mode [ 157.454552][ T8978] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2178'. [ 157.487977][ T8981] wg2: entered promiscuous mode [ 157.493005][ T8981] wg2: entered allmulticast mode [ 157.757145][ T8990] netlink: 'syz.1.2181': attribute type 1 has an invalid length. [ 157.765003][ T8990] netlink: 'syz.1.2181': attribute type 8 has an invalid length. [ 157.923615][ T8996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.753294][ T9001] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 158.761087][ T9001] netlink: 'syz.1.2186': attribute type 8 has an invalid length. [ 159.125524][ T9005] loop2: detected capacity change from 0 to 764 [ 159.153954][ T9005] rock: directory entry would overflow storage [ 159.160613][ T9005] rock: sig=0x4654, size=5, remaining=4 [ 160.259931][ T9025] wg2: left promiscuous mode [ 160.278769][ T9025] wg2: left allmulticast mode [ 160.338714][ T9025] wg2: entered promiscuous mode [ 160.344568][ T9025] wg2: entered allmulticast mode [ 160.459789][ T9041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.612349][ T9043] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 160.620346][ T9043] netlink: 'syz.2.2200': attribute type 8 has an invalid length. [ 161.147513][ T9055] wg2: entered promiscuous mode [ 161.732159][ T9055] wg2: entered allmulticast mode [ 163.155498][ T9103] loop2: detected capacity change from 0 to 512 [ 163.179323][ T9103] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 163.228820][ T9103] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2215: bg 0: block 288: padding at end of block bitmap is not set [ 163.267838][ T9103] loop2: lost filesystem error report for type 5 error -117 [ 163.268491][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 163.282358][ C0] EXT4-fs (loop2): initial error at time 1771938284: ext4_validate_block_bitmap:441 [ 163.291842][ C0] EXT4-fs (loop2): last error at time 1771938284: ext4_validate_block_bitmap:441 [ 163.441263][ T9103] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 163.453474][ T9103] loop2: lost filesystem error report for type 5 error -117 [ 163.454184][ T9103] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2215: attempt to clear invalid blocks 1024 len 1 [ 163.475120][ T9103] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 163.475436][ T9103] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2215: invalid indirect mapped block 1819239214 (level 0) [ 163.525995][ T9103] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 163.526746][ T9103] EXT4-fs (loop2): 1 truncate cleaned up [ 163.602347][ T9103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.024095][ T28] audit: type=1400 audit(1771938285.065:254): avc: denied { create } for pid=9119 comm="syz.1.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.326353][ T9129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.351679][ T9127] wg2: left promiscuous mode [ 164.364315][ T9127] wg2: left allmulticast mode [ 164.404626][ T9130] wg2: entered promiscuous mode [ 164.417614][ T9130] wg2: entered allmulticast mode [ 164.511973][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.624482][ T28] audit: type=1400 audit(1771938286.225:255): avc: denied { create } for pid=9137 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.251309][ T9120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.268529][ T9135] netlink: 'syz.2.2222': attribute type 1 has an invalid length. [ 167.276316][ T9135] netlink: 'syz.2.2222': attribute type 8 has an invalid length. [ 168.417469][ T9174] loop4: detected capacity change from 0 to 764 [ 168.530098][ T9176] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 168.537911][ T9176] netlink: 'syz.0.2234': attribute type 8 has an invalid length. [ 168.636479][ T9174] rock: directory entry would overflow storage [ 168.717223][ T9174] rock: sig=0x4654, size=5, remaining=4 [ 168.915987][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2236'. [ 171.323121][ T9213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.916152][ T9219] loop4: detected capacity change from 0 to 764 [ 171.952287][ T9219] rock: directory entry would overflow storage [ 172.126430][ T9219] rock: sig=0x4654, size=5, remaining=4 [ 172.260613][ T9226] wg2: left promiscuous mode [ 172.266959][ T9226] wg2: left allmulticast mode [ 172.305500][ T9226] wg2: entered promiscuous mode [ 172.312542][ T9226] wg2: entered allmulticast mode [ 172.764592][ T9250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=9250 comm=syz.4.2259 [ 172.934504][ T9256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.103944][ T9258] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 173.111770][ T9258] netlink: 'syz.3.2260': attribute type 8 has an invalid length. [ 174.521151][ T9280] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 174.531251][ T9280] netlink: 'syz.0.2266': attribute type 8 has an invalid length. [ 174.877018][ T9283] wg2: left promiscuous mode [ 174.910564][ T9283] wg2: left allmulticast mode [ 174.979903][ T9294] wg2: entered promiscuous mode [ 174.990186][ T9294] wg2: entered allmulticast mode [ 175.017413][ T9298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=9298 comm=syz.3.2276 [ 176.579602][ T9327] loop2: detected capacity change from 0 to 512 [ 176.645158][ T9326] 9p: Could not find request transport: fd0x0000000000000003 [ 176.664557][ T9327] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 176.716232][ T9327] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2288: bg 0: block 288: padding at end of block bitmap is not set [ 176.730791][ T9327] loop2: lost filesystem error report for type 5 error -117 [ 176.731124][ T9327] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 176.738511][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 176.738533][ C1] EXT4-fs (loop2): initial error at time 1771938297: ext4_validate_block_bitmap:441 [ 176.738560][ C1] EXT4-fs (loop2): last error at time 1771938297: ext4_validate_block_bitmap:441 [ 176.772971][ T9327] loop2: lost filesystem error report for type 5 error -117 [ 176.867426][ T9327] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2288: attempt to clear invalid blocks 1024 len 1 [ 176.908573][ T9327] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 176.928788][ T9327] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2288: invalid indirect mapped block 1819239214 (level 0) [ 177.003486][ T9327] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 177.003824][ T9327] EXT4-fs (loop2): 1 truncate cleaned up [ 177.060884][ T9327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.770542][ T9357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=9357 comm=syz.3.2297 [ 178.033330][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.128525][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.195125][ T9371] loop2: detected capacity change from 0 to 512 [ 178.211874][ T9371] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 178.229832][ T9371] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2303: bg 0: block 288: padding at end of block bitmap is not set [ 178.230636][ T9367] 9p: Could not find request transport: fd0x0000000000000003 [ 178.256861][ T9371] loop2: lost filesystem error report for type 5 error -117 [ 178.258469][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 178.272236][ C1] EXT4-fs (loop2): initial error at time 1771938299: ext4_validate_block_bitmap:441 [ 178.281844][ C1] EXT4-fs (loop2): last error at time 1771938299: ext4_validate_block_bitmap:441 [ 178.286783][ T9371] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 178.302230][ T9371] loop2: lost filesystem error report for type 5 error -117 [ 178.318635][ T9371] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2303: attempt to clear invalid blocks 1024 len 1 [ 178.345901][ T9371] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 178.346345][ T9371] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2303: invalid indirect mapped block 1819239214 (level 0) [ 178.370374][ T9371] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 178.370887][ T9371] EXT4-fs (loop2): 1 truncate cleaned up [ 178.386583][ T9371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.412217][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.491827][ T9390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=9390 comm=syz.3.2312 [ 179.852122][ T9404] 9p: Could not find request transport: fd0x0000000000000003 [ 180.022064][ T9407] wg2: left promiscuous mode [ 180.059870][ T9407] wg2: left allmulticast mode [ 180.081315][ T9408] wg2: entered promiscuous mode [ 180.086215][ T9408] wg2: entered allmulticast mode [ 180.339232][ T9419] netlink: 'syz.3.2321': attribute type 1 has an invalid length. [ 180.347155][ T9419] netlink: 'syz.3.2321': attribute type 8 has an invalid length. [ 180.842408][ T9442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=9442 comm=syz.0.2330 [ 181.463557][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2334'. [ 182.209972][ T9466] netlink: 'syz.4.2337': attribute type 1 has an invalid length. [ 182.217855][ T9466] netlink: 'syz.4.2337': attribute type 8 has an invalid length. [ 184.967029][ T9501] netlink: 'syz.1.2351': attribute type 1 has an invalid length. [ 184.974982][ T9501] netlink: 'syz.1.2351': attribute type 8 has an invalid length. [ 187.295423][ T9538] wg2: left promiscuous mode [ 187.322313][ T9538] wg2: left allmulticast mode [ 187.431103][ T9538] wg2: entered promiscuous mode [ 187.451558][ T9538] wg2: entered allmulticast mode [ 188.711476][ T9583] loop4: detected capacity change from 0 to 512 [ 188.752715][ T9583] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 188.900707][ T9583] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2371: bg 0: block 288: padding at end of block bitmap is not set [ 188.938497][ T9583] loop4: lost filesystem error report for type 5 error -117 [ 188.938740][ T9583] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 188.954834][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 188.954854][ C0] EXT4-fs (loop4): initial error at time 1771938309: ext4_validate_block_bitmap:441 [ 188.954880][ C0] EXT4-fs (loop4): last error at time 1771938309: ext4_validate_block_bitmap:441 [ 189.637639][ T9583] loop4: lost filesystem error report for type 5 error -117 [ 189.647489][ T9583] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2371: attempt to clear invalid blocks 1024 len 1 [ 189.728506][ T9598] 9pnet_fd: Insufficient options for proto=fd [ 189.756437][ T9599] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2369'. [ 189.962151][ T9583] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 189.964248][ T9583] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2371: invalid indirect mapped block 1819239214 (level 0) [ 190.188003][ T9583] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 190.240375][ T9607] netlink: 'syz.0.2374': attribute type 1 has an invalid length. [ 190.257349][ T9607] netlink: 'syz.0.2374': attribute type 8 has an invalid length. [ 190.289638][ T9608] wg2: left promiscuous mode [ 190.294654][ T9608] wg2: left allmulticast mode [ 190.305023][ T9583] EXT4-fs (loop4): 1 truncate cleaned up [ 190.343037][ T9583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.364550][ T9608] wg2: entered promiscuous mode [ 190.383698][ T9608] wg2: entered allmulticast mode [ 191.143243][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.349276][ T9618] netlink: 'syz.4.2379': attribute type 1 has an invalid length. [ 191.357082][ T9618] netlink: 'syz.4.2379': attribute type 8 has an invalid length. [ 191.782765][ T55] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.380123][ T9628] loop4: detected capacity change from 0 to 32768 [ 192.398854][ T9633] wg2: left promiscuous mode [ 192.405841][ T9633] wg2: left allmulticast mode [ 192.448541][ T9638] wg2: entered promiscuous mode [ 192.455073][ T9638] wg2: entered allmulticast mode [ 193.849218][ T9653] loop2: detected capacity change from 0 to 512 [ 193.865704][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.871870][ T3810] Bluetooth: hci0: command 0x1003 tx timeout [ 193.972610][ T9653] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.201138][ T9653] EXT4-fs (loop2): 1 truncate cleaned up [ 194.252174][ T9655] wg2: left promiscuous mode [ 194.257719][ T9655] wg2: left allmulticast mode [ 194.312831][ T9653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.414587][ T9657] wg2: entered promiscuous mode [ 194.570713][ T9657] wg2: entered allmulticast mode [ 194.732316][ T9664] netlink: 'syz.4.2391': attribute type 1 has an invalid length. [ 194.740227][ T9664] netlink: 'syz.4.2391': attribute type 8 has an invalid length. [ 195.194188][ T28] audit: type=1400 audit(1771938316.215:256): avc: denied { remove_name } for pid=9652 comm="syz.2.2389" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.218570][ T28] audit: type=1400 audit(1771938316.215:257): avc: denied { rename } for pid=9652 comm="syz.2.2389" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.289016][ T28] audit: type=1400 audit(1771938316.215:258): avc: denied { add_name } for pid=9652 comm="syz.2.2389" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.408522][ T28] audit: type=1400 audit(1771938316.215:259): avc: denied { unlink } for pid=9652 comm="syz.2.2389" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.408963][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.446996][ T28] audit: type=1400 audit(1771938316.215:260): avc: denied { rename } for pid=9652 comm="syz.2.2389" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.469806][ T28] audit: type=1400 audit(1771938316.215:261): avc: denied { rmdir } for pid=9652 comm="syz.2.2389" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.611335][ T9676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.739490][ T9672] wg2: left promiscuous mode [ 195.744612][ T9672] wg2: left allmulticast mode [ 195.783553][ T9679] wg2: entered promiscuous mode [ 195.798593][ T9679] wg2: entered allmulticast mode [ 197.667645][ T9707] wg2: left promiscuous mode [ 197.698810][ T9707] wg2: left allmulticast mode [ 197.752124][ T9717] wg2: entered promiscuous mode [ 197.793013][ T9717] wg2: entered allmulticast mode [ 197.816745][ T9716] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 198.117371][ T9738] netlink: 'syz.1.2409': attribute type 1 has an invalid length. [ 198.125198][ T9738] netlink: 'syz.1.2409': attribute type 8 has an invalid length. [ 199.054460][ T9757] loop2: detected capacity change from 0 to 512 [ 199.220134][ T9757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.231900][ T9751] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2412'. [ 199.839282][ T9757] EXT4-fs (loop2): 1 truncate cleaned up [ 199.878330][ T9757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.330139][ T9778] wg2: left promiscuous mode [ 200.340254][ T9778] wg2: left allmulticast mode [ 200.413919][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.925283][ T9783] wg2: entered promiscuous mode [ 200.970919][ T9783] wg2: entered allmulticast mode [ 201.522975][ T9823] loop4: detected capacity change from 0 to 512 [ 201.590122][ T9823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.776390][ T9823] EXT4-fs (loop4): 1 truncate cleaned up [ 201.796582][ T9823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.818670][ T9826] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2433'. [ 202.024462][ T9832] wg2: left promiscuous mode [ 202.038566][ T9832] wg2: left allmulticast mode [ 202.055726][ T9837] loop2: detected capacity change from 0 to 512 [ 202.075785][ T9837] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 202.092765][ T9837] EXT4-fs (loop2): 1 truncate cleaned up [ 202.100777][ T9837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.114275][ T9831] wg2: entered promiscuous mode [ 202.121491][ T9831] wg2: entered allmulticast mode [ 202.364209][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.525277][ T9860] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 203.421642][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.562012][ T9872] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2449'. [ 204.320773][ T9911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.968626][ T9957] wg2: left promiscuous mode [ 207.123563][ T9957] wg2: left allmulticast mode [ 207.181937][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'. [ 207.456352][ T9968] wg2: left promiscuous mode [ 207.467096][ T9968] wg2: left allmulticast mode [ 207.688312][ T9974] loop4: detected capacity change from 0 to 512 [ 207.713625][ T9972] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 207.728559][ T9974] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 207.746621][ T9971] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2472'. [ 207.760105][ T9974] EXT4-fs (loop4): 1 truncate cleaned up [ 207.767878][ T9974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.041695][ T9985] wg2: entered promiscuous mode [ 208.047392][ T9985] wg2: entered allmulticast mode [ 208.565835][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.640866][ T9999] wg2: left promiscuous mode [ 208.658071][ T9999] wg2: left allmulticast mode [ 208.704102][T10001] wg2: entered promiscuous mode [ 208.719293][T10001] wg2: entered allmulticast mode [ 208.885471][T10005] wg2: left promiscuous mode [ 208.897027][T10005] wg2: left allmulticast mode [ 208.927446][ T28] audit: type=1400 audit(1771938329.965:262): avc: denied { ioctl } for pid=10012 comm="syz.1.2488" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 209.036732][T10016] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2489'. [ 209.193360][T10024] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 210.436179][T10048] wg2: left promiscuous mode [ 210.442498][T10048] wg2: left allmulticast mode [ 210.461986][T10051] wg2: entered promiscuous mode [ 210.473871][T10051] wg2: entered allmulticast mode [ 210.921930][T10059] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2504'. [ 211.900943][T10087] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2511'. [ 211.910249][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2511'. [ 211.978244][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 212.200182][T10094] wg2: left promiscuous mode [ 212.205952][T10094] wg2: left allmulticast mode [ 212.415164][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2520'. [ 212.447243][T10110] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 212.881404][T10113] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2522'. [ 213.044207][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2527'. [ 213.797231][T10142] wg2: left promiscuous mode [ 213.815275][T10142] wg2: left allmulticast mode [ 213.999057][T10145] netlink: 'syz.3.2534': attribute type 1 has an invalid length. [ 214.006855][T10145] netlink: 'syz.3.2534': attribute type 8 has an invalid length. [ 214.050155][T10142] wg2: entered promiscuous mode [ 214.056637][T10142] wg2: entered allmulticast mode [ 216.017901][T10164] loop2: detected capacity change from 0 to 512 [ 216.025976][T10164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.270188][T10164] EXT4-fs (loop2): 1 truncate cleaned up [ 216.286025][T10170] netlink: 'syz.1.2538': attribute type 1 has an invalid length. [ 216.293887][T10170] netlink: 'syz.1.2538': attribute type 8 has an invalid length. [ 216.332577][T10164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.036233][T10174] wg2: entered promiscuous mode [ 217.059481][T10174] wg2: entered allmulticast mode [ 217.244407][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.462000][T10181] wg2: left promiscuous mode [ 217.491379][T10182] netlink: 'syz.0.2545': attribute type 1 has an invalid length. [ 217.499287][T10182] netlink: 'syz.0.2545': attribute type 8 has an invalid length. [ 217.545232][T10181] wg2: left allmulticast mode [ 217.816221][T10184] wg2: entered promiscuous mode [ 217.900576][T10184] wg2: entered allmulticast mode [ 218.700379][T10214] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2553'. [ 219.199605][ T28] audit: type=1400 audit(1771938340.215:263): avc: denied { connect } for pid=10224 comm="syz.1.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.508634][T10237] netlink: 'syz.4.2561': attribute type 1 has an invalid length. [ 219.516505][T10237] netlink: 'syz.4.2561': attribute type 8 has an invalid length. [ 220.351956][T10246] netlink: 'syz.1.2565': attribute type 1 has an invalid length. [ 220.360004][T10246] netlink: 'syz.1.2565': attribute type 8 has an invalid length. [ 220.959078][T10258] wg2: entered promiscuous mode [ 220.972881][T10258] wg2: entered allmulticast mode [ 221.488604][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 221.527990][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 221.618354][T10268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2573'. [ 221.720998][T10275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.379821][T10288] netlink: 'syz.2.2580': attribute type 1 has an invalid length. [ 222.387702][T10288] netlink: 'syz.2.2580': attribute type 8 has an invalid length. [ 222.553394][T10293] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2582'. [ 223.601600][T10301] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 223.609499][T10301] netlink: 'syz.2.2583': attribute type 8 has an invalid length. [ 223.697986][T10302] netlink: 'syz.1.2584': attribute type 1 has an invalid length. [ 223.705863][T10302] netlink: 'syz.1.2584': attribute type 8 has an invalid length. [ 224.773338][T10315] wg2: left promiscuous mode [ 224.803170][T10315] wg2: left allmulticast mode [ 224.888047][T10315] wg2: entered promiscuous mode [ 224.919269][T10315] wg2: entered allmulticast mode [ 225.010013][T10320] wg2: left promiscuous mode [ 225.015573][T10320] wg2: left allmulticast mode [ 225.077509][T10325] wg2: entered promiscuous mode [ 225.082615][T10325] wg2: entered allmulticast mode [ 225.360239][T10324] wg2: left promiscuous mode [ 225.409228][T10324] wg2: left allmulticast mode [ 225.546207][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2597'. [ 225.577993][T10329] wg2: entered promiscuous mode [ 225.617561][T10329] wg2: entered allmulticast mode [ 225.838543][T10363] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2601'. [ 225.885566][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'. [ 226.711931][T10404] netlink: 'syz.0.2623': attribute type 1 has an invalid length. [ 226.719776][T10404] netlink: 'syz.0.2623': attribute type 8 has an invalid length. [ 227.545433][T10409] wg2: entered promiscuous mode [ 227.616002][T10409] wg2: entered allmulticast mode [ 227.650085][T10411] netlink: 'syz.3.2635': attribute type 1 has an invalid length. [ 227.657940][T10411] netlink: 'syz.3.2635': attribute type 8 has an invalid length. [ 228.049588][T10418] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2629'. [ 228.781940][T10448] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 228.789856][T10448] netlink: 'syz.2.2640': attribute type 8 has an invalid length. [ 229.242883][T10457] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2643'. [ 229.815355][T10460] netlink: 'syz.0.2644': attribute type 1 has an invalid length. [ 229.823244][T10460] netlink: 'syz.0.2644': attribute type 8 has an invalid length. [ 230.541466][T10468] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 230.549323][T10468] netlink: 'syz.3.2646': attribute type 8 has an invalid length. [ 230.896465][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2649'. [ 232.125534][T10502] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2657'. [ 232.219129][T10501] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 232.404504][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2661'. [ 233.119007][T10533] validate_nla: 2 callbacks suppressed [ 233.119040][T10533] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 233.132512][T10533] netlink: 'syz.1.2668': attribute type 8 has an invalid length. [ 233.494354][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2672'. [ 234.062663][T10544] netlink: 'syz.1.2674': attribute type 1 has an invalid length. [ 234.070464][T10544] netlink: 'syz.1.2674': attribute type 8 has an invalid length. [ 234.470247][T10558] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2675'. [ 234.492322][T10562] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 235.086983][T10579] netlink: 'syz.3.2684': attribute type 1 has an invalid length. [ 235.094837][T10579] netlink: 'syz.3.2684': attribute type 8 has an invalid length. [ 235.427132][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 236.203064][T10598] netlink: 'syz.0.2691': attribute type 1 has an invalid length. [ 236.210881][T10598] netlink: 'syz.0.2691': attribute type 8 has an invalid length. [ 236.793761][T10609] netlink: 'syz.1.2694': attribute type 1 has an invalid length. [ 236.801625][T10609] netlink: 'syz.1.2694': attribute type 8 has an invalid length. [ 236.816718][T10608] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2692'. [ 237.248560][ T406] Bluetooth: hci0: Frame reassembly failed (-84) [ 238.911169][T10640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.248488][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 239.468698][T10661] validate_nla: 2 callbacks suppressed [ 239.468715][T10661] netlink: 'syz.0.2710': attribute type 1 has an invalid length. [ 239.481988][T10661] netlink: 'syz.0.2710': attribute type 8 has an invalid length. [ 240.891430][T10674] netlink: 'syz.4.2714': attribute type 1 has an invalid length. [ 240.899338][T10674] netlink: 'syz.4.2714': attribute type 8 has an invalid length. [ 241.149070][T10681] wg2: left promiscuous mode [ 241.169441][T10681] wg2: left allmulticast mode [ 241.202284][T10682] wg2: entered promiscuous mode [ 241.242015][T10682] wg2: entered allmulticast mode [ 241.665833][T10687] netlink: 'syz.2.2718': attribute type 1 has an invalid length. [ 241.673666][T10687] netlink: 'syz.2.2718': attribute type 8 has an invalid length. [ 242.997619][T10709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.942148][T10730] netlink: 'syz.3.2731': attribute type 1 has an invalid length. [ 243.950000][T10730] netlink: 'syz.3.2731': attribute type 8 has an invalid length. [ 245.508008][T10749] netlink: 'syz.3.2737': attribute type 1 has an invalid length. [ 245.515881][T10749] netlink: 'syz.3.2737': attribute type 8 has an invalid length. [ 245.925979][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'. [ 246.540617][T10761] netlink: 'syz.3.2741': attribute type 1 has an invalid length. [ 246.548499][T10761] netlink: 'syz.3.2741': attribute type 8 has an invalid length. [ 247.456661][T10772] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.479710][T10770] wg2: left promiscuous mode [ 247.485216][T10770] wg2: left allmulticast mode [ 247.536656][T10777] wg2: entered promiscuous mode [ 247.542350][T10777] wg2: entered allmulticast mode [ 249.040512][T10818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10818 comm=syz.1.2762 [ 249.548147][T10826] netlink: 'syz.4.2759': attribute type 1 has an invalid length. [ 249.556027][T10826] netlink: 'syz.4.2759': attribute type 8 has an invalid length. [ 249.799184][T10836] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 250.555411][T10856] netlink: 'syz.4.2773': attribute type 1 has an invalid length. [ 250.563210][T10856] netlink: 'syz.4.2773': attribute type 8 has an invalid length. [ 251.397182][T10864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10864 comm=syz.4.2774 [ 251.423585][T10862] wg2: left promiscuous mode [ 251.434944][T10862] wg2: left allmulticast mode [ 251.508654][T10865] wg2: entered promiscuous mode [ 251.513594][T10865] wg2: entered allmulticast mode [ 252.305809][T10893] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2782'. [ 252.329875][T10894] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 252.859772][T10899] netlink: 'syz.3.2785': attribute type 1 has an invalid length. [ 252.867543][T10899] netlink: 'syz.3.2785': attribute type 8 has an invalid length. [ 252.957145][T10908] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.031191][T10909] wg2: left promiscuous mode [ 253.733764][T10909] wg2: left allmulticast mode [ 253.778839][T10917] wg2: entered promiscuous mode [ 253.798486][T10917] wg2: entered allmulticast mode [ 254.135299][T10921] netlink: 'syz.2.2792': attribute type 1 has an invalid length. [ 254.143146][T10921] netlink: 'syz.2.2792': attribute type 8 has an invalid length. [ 255.826759][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'. [ 256.266933][T10986] wg2: left promiscuous mode [ 256.281201][T10986] wg2: left allmulticast mode [ 256.309029][T10986] wg2: entered promiscuous mode [ 256.315305][T10986] wg2: entered allmulticast mode [ 257.090595][T11009] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2825'. [ 257.392300][T11021] wg2: left promiscuous mode [ 257.415514][T11021] wg2: left allmulticast mode [ 257.497491][T11017] wg2: entered promiscuous mode [ 257.539698][T11017] wg2: entered allmulticast mode [ 258.947981][T11042] netlink: 'syz.3.2836': attribute type 1 has an invalid length. [ 258.955888][T11042] netlink: 'syz.3.2836': attribute type 8 has an invalid length. [ 260.130511][T11059] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2839'. [ 260.167633][T11060] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2843'. [ 260.230127][T11064] wg2: left promiscuous mode [ 260.287703][T11064] wg2: left allmulticast mode [ 260.301422][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 260.400225][T11066] wg2: entered promiscuous mode [ 260.435145][T11066] wg2: entered allmulticast mode [ 260.522375][T11073] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 260.880452][T11080] wg2: left promiscuous mode [ 260.886643][T11080] wg2: left allmulticast mode [ 260.905524][T11081] wg2: left promiscuous mode [ 260.913728][T11081] wg2: left allmulticast mode [ 260.932639][T11083] wg2: entered promiscuous mode [ 260.937662][T11083] wg2: entered allmulticast mode [ 260.952603][T11080] wg2: entered promiscuous mode [ 260.959139][T11080] wg2: entered allmulticast mode [ 261.208911][T11090] netlink: 'syz.4.2850': attribute type 1 has an invalid length. [ 261.216808][T11090] netlink: 'syz.4.2850': attribute type 8 has an invalid length. [ 261.574670][ T3315] ================================================================== [ 261.582806][ T3315] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 261.590477][ T3315] [ 261.592819][ T3315] read-write to 0xffff88811cb203f0 of 8 bytes by task 11091 on cpu 0: [ 261.600988][ T3315] inode_add_bytes+0x47/0xe0 [ 261.605606][ T3315] __dquot_alloc_space+0x180/0x8a0 [ 261.610855][ T3315] shmem_inode_acct_blocks+0x125/0x230 [ 261.616341][ T3315] shmem_get_folio_gfp+0x5b2/0xd60 [ 261.621478][ T3315] shmem_write_begin+0xfc/0x1f0 [ 261.626350][ T3315] generic_perform_write+0x183/0x490 [ 261.631666][ T3315] shmem_file_write_iter+0xc5/0xf0 [ 261.636815][ T3315] __kernel_write_iter+0x319/0x590 [ 261.641950][ T3315] dump_user_range+0xa7d/0xdb0 [ 261.646737][ T3315] elf_core_dump+0x21a2/0x2330 [ 261.651516][ T3315] coredump_write+0xacc/0xdd0 [ 261.656308][ T3315] vfs_coredump+0x26c7/0x3130 [ 261.661001][ T3315] get_signal+0xd80/0xf60 [ 261.665353][ T3315] arch_do_signal_or_restart+0x96/0x450 [ 261.670923][ T3315] irqentry_exit+0xf7/0x520 [ 261.675452][ T3315] asm_exc_page_fault+0x26/0x30 [ 261.680322][ T3315] [ 261.682658][ T3315] read to 0xffff88811cb203f0 of 8 bytes by task 3315 on cpu 1: [ 261.690302][ T3315] generic_fillattr+0x27d/0x340 [ 261.695258][ T3315] shmem_getattr+0x181/0x200 [ 261.699879][ T3315] vfs_getattr_nosec+0x146/0x1e0 [ 261.704844][ T3315] vfs_getattr+0x48/0x60 [ 261.709118][ T3315] vfs_statx_path+0x28/0x140 [ 261.713745][ T3315] vfs_statx+0xc4/0x170 [ 261.717909][ T3315] vfs_fstatat+0x118/0x170 [ 261.722367][ T3315] __se_sys_newfstatat+0x55/0x3e0 [ 261.727413][ T3315] __x64_sys_newfstatat+0x55/0x70 [ 261.732461][ T3315] x64_sys_call+0x2c64/0x3020 [ 261.737160][ T3315] do_syscall_64+0x12c/0x370 [ 261.741786][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.747703][ T3315] [ 261.750062][ T3315] value changed: 0x0000000000013db8 -> 0x0000000000013dc0 [ 261.757191][ T3315] [ 261.759525][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 261.765689][ T3315] CPU: 1 UID: 0 PID: 3315 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 261.775163][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.785239][ T3315] ================================================================== [ 262.368437][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110