last executing test programs: 2m7.131273649s ago: executing program 0 (id=244): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) 2m6.588084275s ago: executing program 0 (id=251): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0xef, 0x4) listen(r1, 0x100) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 2m6.560991656s ago: executing program 0 (id=252): ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x7b) connect$llc(0xffffffffffffffff, &(0x7f0000000600)={0x1a, 0x10f, 0x4, 0xf, 0x7, 0xe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x8008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001d80)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x0) 2m6.461276591s ago: executing program 0 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x224300d, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) 2m6.393759035s ago: executing program 0 (id=257): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2m5.851241942s ago: executing program 0 (id=262): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 2m5.851080412s ago: executing program 32 (id=262): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 29.043695354s ago: executing program 1 (id=1577): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4204, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x106a, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x7, 0x7ffc0001}]}) setfsuid(0xee00) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(r0, &(0x7f0000000140)=""/240, 0xf0) 28.616666035s ago: executing program 1 (id=1582): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x805, 0x10000, 0xb, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 28.572758157s ago: executing program 1 (id=1572): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) 28.481576781s ago: executing program 1 (id=1573): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000002480)={[], [{@seclabel}]}, 0x1, 0x468, &(0x7f00000024c0)="$eJzs3M9vFFUcAPDvzHYLCNgV8RegVNHY+KOlgMrBgxpNPGBiogc9NqUQZLGG1kQIQTAGT8aYeDce+Rc86cUYTyZe9W5IiOECmJismd0ZurvdXftrs9j9fJKB92be9L1v37zdN/N2G8DQGs/+SSJ2RMTvETHWyLYWGG/8d+vGhdnbNy7MJlGrvfNXUi9388aF2aJocd72PDORRqSfJ7G3Q70L586fnqlW587m+anFMx9NLZw7//ypMzMn507OfXjo6NEjh6dfevHQCxsSZ9amm3suzu975M33v37r2Jct8bfFsUHGex18qlbb4OoGa2dTOhkZYENYlVJEZN1Vro//sSjFUueNxRufNVLluDy4JgJ9UqvVatvb9316J3mpBmxiSbTmDXkYFsUbfXb/W2ztc4RX+jwHGaTrrzZugLK4b+Vb48hIpBFxLS+3s0/1j0fEe5f+/jbboj/PIQAAWvyQzX+e6zT/S+PBpnL35mtDlYi4LyJ2RcT9EbE7Ih6IqJd9KCIeXmX97Ysky+c/6bU1BbZC2fzv5Xxtq3X+lxZFKqU8t7Mefzk5cao6dzD/nUxEeUuWn+5Rx4+v//ZVt2PN879sy+ov5oJ5O66NbGk95/jM4sx6Ym52/XLEnpFO8Sd3VgKSiHWt6Jx65uq+PPnP0t6rF2NF8fewAetMte8inm70/6Voi7+Q9F6fnNoa1bmDU8VVsdwvv155u1v9K41/2/pD7Sjr/3s6Xv9Z1FuzRCVpXq9dWH0dV/74ous9zVqv/9Hk3Xp6NN/3yczi4tnpiNHkWD1fad5/aOncIl+Uz+KfONB5/O+Kpd/E3ojILuJHI+KxiNift/3xiHgiIg70iP/n1578YO3x91cW//Gu/V/X1v9LidFo39M5UTr90/ctlVaWxX+7d/8fqacm8j0ref1bSbvWdjUDAADA/08aETsiSSfvpNN0crLxefndEWl1fmHx2RPzH++PxncEKlFOiyddY03PQ6fz2/pG/nJEND5aUBw/nD83/qa0rZ6fnJ2vHh908DDktncZ/5k/S4NuHdB3vq8Fw8v4h+Fl/MPwMv5heHUY//36vClwl+n0/l/8DRAvBLC5tY1/y34wRNz/w/DqOv4381/+Aeq8/8NQWtgW//0l+Z6J4iet8fRNm4jyXdGM9SdqSaNzy3lHF/2eDrphEv1MDO41CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYCP9GwAA///wOuEj") open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000940)='./file1\x00', 0xc000, &(0x7f0000000440)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'dioread_nolock'}}, {@smackfsroot={'smackfsroot', 0x3d, '1GB.usage_in\xff\x00\x00C9\x1b\xeb\x00\x00\x00\x00\x00\x00\x00'}}]}, 0x2, 0x24d, &(0x7f0000006040)="$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") open(&(0x7f0000000240)='./bus\x00', 0xcd042, 0x0) 28.384245606s ago: executing program 1 (id=1576): r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x20004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x3, 0x1, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0xf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x80, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 27.625332663s ago: executing program 1 (id=1584): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x1c, 0x10}, 0x20) r2 = dup(0xffffffffffffffff) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 27.620281654s ago: executing program 33 (id=1584): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x1c, 0x10}, 0x20) r2 = dup(0xffffffffffffffff) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 4.028190931s ago: executing program 2 (id=1918): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0x80000d1}) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x10, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3f, &(0x7f0000000240)={0x20, 0x8}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.958781375s ago: executing program 2 (id=1921): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) getpeername(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x8, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x3ddd, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 3.815277732s ago: executing program 2 (id=1926): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044943, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000001bc0)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}]}, &(0x7f0000000480)=0x10) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000040)) 2.897811097s ago: executing program 2 (id=1939): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, 0x0, 0x0) 2.82846048s ago: executing program 2 (id=1941): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x2, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x77359400}, {r2, r3+10000000}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 2.723237046s ago: executing program 6 (id=1942): socket$kcm(0x28, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 2.723012155s ago: executing program 6 (id=1943): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close(0x3) socket$inet_icmp(0x2, 0x2, 0x1) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) connect$packet(r0, &(0x7f0000000000)={0x11, 0x1a, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) io_setup(0xa, 0x0) 2.721046706s ago: executing program 6 (id=1944): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f00000002c0)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@acl}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@noacl}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nodelalloc}, {@resgid, 0x32}]}, 0xdb, 0x4df, &(0x7f0000001700)="$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") 2.584751942s ago: executing program 6 (id=1947): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0), 0x8) 2.531007565s ago: executing program 6 (id=1949): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r3, 0x3516, 0x483, 0x0, 0x0, 0x0) 2.335340845s ago: executing program 6 (id=1953): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0xfe, 0x20, 0x2, 0x7, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 2.296133037s ago: executing program 2 (id=1954): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000013c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000001040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x90, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.276777426s ago: executing program 4 (id=1969): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r3, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r1, &(0x7f0000000580)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r3, 0x1, 0xe9, 0x6, @local}, 0x14) 1.183219461s ago: executing program 3 (id=1970): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x53b, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x4060040}, 0x20000000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x2, 0x18}, 0x3c) 1.161282072s ago: executing program 3 (id=1971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000008240)) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.088806636s ago: executing program 4 (id=1972): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=0x0000000000000003,sbsector=0x0000000000000004,map=acorn,unhide,check=strict,overriderockperm,check=strict,showassoc,check=relqxed,overriderockperm,\x00'], 0x0, 0xa60, &(0x7f0000000d80)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 1.056594147s ago: executing program 3 (id=1974): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 985.240281ms ago: executing program 3 (id=1976): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 983.198231ms ago: executing program 4 (id=1986): openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 948.611013ms ago: executing program 3 (id=1977): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 882.729436ms ago: executing program 4 (id=1978): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6", 0xda}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013", 0x3}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 774.243851ms ago: executing program 3 (id=1979): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="2503813ac8000000000004"], 0x14}}, 0x0) 411.233929ms ago: executing program 5 (id=1982): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 396.30629ms ago: executing program 5 (id=1983): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) 339.195673ms ago: executing program 5 (id=1984): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000}, 0x48) 227.194178ms ago: executing program 5 (id=1987): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 159.888872ms ago: executing program 5 (id=1988): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 79.152125ms ago: executing program 5 (id=1989): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 75.806365ms ago: executing program 4 (id=1990): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x41, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x30d080, 0x10, 0x1}, 0x0, 0x18, 0x0, 0x12345}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1e75, 0x82ffff, 0xe, 0x0, 0xe) 0s ago: executing program 4 (id=1991): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r3}) kernel console output (not intermixed with test programs): 27] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.037659][ T5653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.657'. [ 73.038851][ T28] audit: type=1326 audit(1773832901.338:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 73.038884][ T28] audit: type=1326 audit(1773832901.338:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 73.038918][ T28] audit: type=1326 audit(1773832901.338:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 73.038975][ T28] audit: type=1326 audit(1773832901.338:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 73.123415][ T5644] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.146669][ T127] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.191156][ T127] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.220449][ T4269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.520607][ T5681] netlink: 'syz.4.668': attribute type 4 has an invalid length. [ 74.114003][ T5694] loop1: detected capacity change from 0 to 256 [ 74.128510][ T5696] loop2: detected capacity change from 0 to 128 [ 74.135612][ T5694] msdos: Bad value for 'dmask' [ 74.161152][ T5696] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.177039][ T5696] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.331517][ T3663] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.312145][ T5737] loop4: detected capacity change from 0 to 2048 [ 75.344873][ T5737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.452075][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.541646][ T5755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.696'. [ 76.160081][ T5769] loop2: detected capacity change from 0 to 1024 [ 76.228448][ T5769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.247636][ T5769] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.431538][ T3663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.443662][ T5792] netlink: 'syz.4.708': attribute type 27 has an invalid length. [ 77.593655][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.640476][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.680660][ T5792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.094061][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 78.094078][ T28] audit: type=1400 audit(1773832906.618:538): avc: denied { connect } for pid=5813 comm="syz.1.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 78.122846][ T5815] loop4: detected capacity change from 0 to 1024 [ 78.193894][ T5815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.664363][ T5825] netlink: 'syz.1.718': attribute type 11 has an invalid length. [ 78.834904][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.533625][ T5851] loop4: detected capacity change from 0 to 512 [ 79.567226][ T4350] udevd[4350]: incorrect ext4 checksum on /dev/loop4 [ 79.625168][ T28] audit: type=1400 audit(1773832908.148:539): avc: denied { mounton } for pid=5857 comm="syz.4.732" path="/file0" dev="autofs" ino=27289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 79.722282][ T5867] loop2: detected capacity change from 0 to 164 [ 79.729789][ T28] audit: type=1400 audit(1773832908.248:540): avc: denied { setopt } for pid=5865 comm="syz.5.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.751428][ T5867] Unable to read rock-ridge attributes [ 79.776557][ T28] audit: type=1400 audit(1773832908.278:541): avc: denied { audit_read } for pid=5863 comm="syz.4.735" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.777599][ T5872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.737'. [ 79.846021][ T5872] netlink: 'syz.1.737': attribute type 7 has an invalid length. [ 79.854009][ T5872] netlink: 'syz.1.737': attribute type 8 has an invalid length. [ 79.861779][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 80.056623][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.747'. [ 80.070673][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.747'. [ 80.471422][ T5922] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 80.493850][ T5922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.545522][ T5922] bond2: (slave veth5): Enslaving as an active interface with a down link [ 80.605860][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 80.635092][ T5922] bond2: (slave batadv1): making interface the new active one [ 80.655199][ T5922] batadv1: entered promiscuous mode [ 80.661042][ T5922] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 80.742242][ T5932] geneve2: entered promiscuous mode [ 80.783262][ T4841] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 49986 - 0 [ 80.791839][ T4841] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 49986 - 0 [ 80.809799][ T5941] loop5: detected capacity change from 0 to 512 [ 80.817337][ T4841] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 49986 - 0 [ 80.844247][ T5941] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.855688][ T4338] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 49986 - 0 [ 80.876657][ T28] audit: type=1400 audit(1773832909.398:542): avc: denied { write } for pid=5942 comm="syz.4.766" name="rt_cache" dev="proc" ino=4026532662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.879158][ T5941] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 80.901496][ T28] audit: type=1400 audit(1773832909.428:543): avc: denied { append } for pid=5942 comm="syz.4.766" name="rt_cache" dev="proc" ino=4026532662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.942123][ T5941] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.765: bg 0: block 248: padding at end of block bitmap is not set [ 80.956608][ T5941] loop5: lost filesystem error report for type 5 error -117 [ 80.957581][ T5941] Quota error (device loop5): write_blk: dquota write failed [ 80.964967][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 80.964990][ C0] EXT4-fs (loop5): last error at time 1773832909: ext4_validate_block_bitmap:441 [ 81.033074][ T5941] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 81.049364][ T5941] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.765: Failed to acquire dquot type 1 [ 81.060837][ T5941] loop5: lost filesystem error report for type 5 error -117 [ 81.061295][ T5941] EXT4-fs (loop5): 1 truncate cleaned up [ 81.075168][ T5941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 81.135055][ T28] audit: type=1400 audit(1773832909.658:544): avc: denied { create } for pid=5959 comm="syz.4.771" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.173406][ T28] audit: type=1400 audit(1773832909.658:545): avc: denied { map } for pid=5959 comm="syz.4.771" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.294063][ T5941] syz.5.765 (5941) used greatest stack depth: 9160 bytes left [ 81.316626][ T4269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 81.697631][ T5982] netlink: 'syz.4.779': attribute type 10 has an invalid length. [ 81.713106][ T5982] netlink: 2 bytes leftover after parsing attributes in process `syz.4.779'. [ 81.725540][ T5982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.738739][ T5982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.750334][ T5982] hsr0: entered promiscuous mode [ 81.777545][ T5982] bridge0: port 3(hsr0) entered blocking state [ 81.785147][ T5982] bridge0: port 3(hsr0) entered disabled state [ 81.792843][ T5982] hsr0: entered allmulticast mode [ 81.798007][ T5982] hsr_slave_0: entered allmulticast mode [ 81.804408][ T5982] hsr_slave_1: entered allmulticast mode [ 81.868587][ T5991] netlink: 'syz.5.784': attribute type 4 has an invalid length. [ 81.881185][ T5991] netlink: 'syz.5.784': attribute type 4 has an invalid length. [ 82.021539][ T5999] uprobe: syz.5.787:5999 failed to unregister, leaking uprobe [ 82.298636][ T6008] loop3: detected capacity change from 0 to 512 [ 82.336198][ T6008] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 82.379079][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.5.793'. [ 82.395102][ T6008] EXT4-fs (loop3): 1 truncate cleaned up [ 82.407597][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.793'. [ 82.423849][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.490197][ T6020] netlink: 'syz.5.796': attribute type 13 has an invalid length. [ 82.508729][ T6020] gretap0: refused to change device tx_queue_len [ 82.521654][ T6020] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 82.538841][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.084969][ T6061] loop4: detected capacity change from 0 to 512 [ 83.092410][ T6061] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.116296][ T6061] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.184193][ T6061] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.813: bg 0: block 248: padding at end of block bitmap is not set [ 83.204670][ T6061] loop4: lost filesystem error report for type 5 error -117 [ 83.206441][ T6061] __quota_error: 10 callbacks suppressed [ 83.206458][ T6061] Quota error (device loop4): write_blk: dquota write failed [ 83.213902][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 83.213925][ C0] EXT4-fs (loop4): last error at time 1773832911: ext4_validate_block_bitmap:441 [ 83.248590][ T6061] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 83.258794][ T6061] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.813: Failed to acquire dquot type 1 [ 83.270242][ T6061] loop4: lost filesystem error report for type 5 error -117 [ 83.271052][ T6061] EXT4-fs (loop4): 1 truncate cleaned up [ 83.284867][ T6061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 83.395381][ T28] audit: type=1400 audit(1773832911.918:556): avc: denied { ioctl } for pid=6068 comm="syz.3.816" path="socket:[30196]" dev="sockfs" ino=30196 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.483541][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 83.752766][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 84.122627][ T6103] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 84.129332][ T6103] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.138742][ T6103] vhci_hcd vhci_hcd.0: Device attached [ 84.145449][ T6107] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 84.152060][ T6107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.169688][ T6107] vhci_hcd vhci_hcd.0: Device attached [ 84.192889][ T6103] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 84.199610][ T6103] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.252232][ T6103] vhci_hcd vhci_hcd.0: Device attached [ 84.263702][ T6107] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(8) [ 84.270301][ T6107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.288250][ T6107] vhci_hcd vhci_hcd.0: Device attached [ 84.334826][ T6103] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(10) [ 84.341469][ T6103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.371996][ T3567] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 84.380148][ T6107] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.389187][ T6107] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 84.469995][ T6107] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(18) [ 84.476636][ T6107] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 84.484729][ T6103] vhci_hcd vhci_hcd.0: Device attached [ 84.496728][ T6107] vhci_hcd vhci_hcd.0: Device attached [ 84.510410][ T6124] vhci_hcd: connection closed [ 84.510837][ T6117] vhci_hcd: connection closed [ 84.512349][ T4338] vhci_hcd vhci_hcd.3: stop threads [ 84.517806][ T6109] vhci_hcd: connection closed [ 84.520400][ T4338] vhci_hcd vhci_hcd.3: release socket [ 84.525733][ T6105] vhci_hcd: connection reset by peer [ 84.530356][ T6115] vhci_hcd: connection closed [ 84.536858][ T6121] vhci_hcd: connection closed [ 84.546078][ T4338] vhci_hcd vhci_hcd.3: disconnect device [ 84.562030][ T4338] vhci_hcd vhci_hcd.3: stop threads [ 84.567428][ T4338] vhci_hcd vhci_hcd.3: release socket [ 84.573270][ T4338] vhci_hcd vhci_hcd.3: disconnect device [ 84.579624][ T4338] vhci_hcd vhci_hcd.3: stop threads [ 84.585179][ T4338] vhci_hcd vhci_hcd.3: release socket [ 84.590695][ T4338] vhci_hcd vhci_hcd.3: disconnect device [ 84.596753][ T4338] vhci_hcd vhci_hcd.3: stop threads [ 84.602158][ T4338] vhci_hcd vhci_hcd.3: release socket [ 84.607605][ T4338] vhci_hcd vhci_hcd.3: disconnect device [ 84.613437][ T4338] vhci_hcd vhci_hcd.3: stop threads [ 84.618716][ T4338] vhci_hcd vhci_hcd.3: release socket [ 84.625060][ T4338] vhci_hcd vhci_hcd.3: disconnect device [ 84.630840][ T4338] vhci_hcd vhci_hcd.3: stop threads [ 84.636282][ T4338] vhci_hcd vhci_hcd.3: release socket [ 84.642100][ T4338] vhci_hcd vhci_hcd.3: disconnect device [ 84.990083][ T6142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.838'. [ 85.306308][ T6157] loop3: detected capacity change from 0 to 2048 [ 85.405180][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.440280][ T6157] ref_ctr_offset mismatch. inode: 0xf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 85.560854][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.130192][ T6172] chnl_net:caif_netlink_parms(): no params data found [ 86.197676][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.212084][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.222267][ T6172] bridge_slave_0: entered allmulticast mode [ 86.228741][ T6172] bridge_slave_0: entered promiscuous mode [ 86.253005][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.261010][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.286869][ T6172] bridge_slave_1: entered allmulticast mode [ 86.309314][ T6172] bridge_slave_1: entered promiscuous mode [ 86.319803][ T6194] loop4: detected capacity change from 0 to 1024 [ 86.339199][ T6172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.342600][ T6194] EXT4-fs: Ignoring removed orlov option [ 86.349989][ T6172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.374267][ T6172] team0: Port device team_slave_0 added [ 86.381249][ T6172] team0: Port device team_slave_1 added [ 86.390633][ T6194] EXT4-fs: Ignoring removed nobh option [ 86.404601][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.411565][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.440160][ T6172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.483077][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.490620][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.518377][ T6194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.552841][ T6172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.581118][ T6172] hsr_slave_0: entered promiscuous mode [ 86.588016][ T6172] hsr_slave_1: entered promiscuous mode [ 86.593971][ T6172] debugfs: 'hsr0' already exists in 'hsr' [ 86.599715][ T6172] Cannot create hsr debugfs directory [ 86.634463][ T28] audit: type=1400 audit(1773832915.148:557): avc: denied { read write } for pid=6187 comm="syz.4.853" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.735269][ T28] audit: type=1400 audit(1773832915.148:558): avc: denied { open } for pid=6187 comm="syz.4.853" path="/174/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.797481][ T28] audit: type=1400 audit(1773832915.228:559): avc: denied { getopt } for pid=6199 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.865520][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.962083][ T6172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.971326][ T6172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.985138][ T6172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.003602][ T6172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.038051][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.045267][ T6172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.052566][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.059661][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.162373][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.189224][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.299330][ T6172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.320013][ T6172] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.331541][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.338765][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.376291][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.383457][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.538397][ T6172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.639775][ T6230] tipc: Enabling of bearer rejected, failed to enable media [ 87.921738][ T6172] veth0_vlan: entered promiscuous mode [ 87.941513][ T6218] loop2: detected capacity change from 0 to 2048 [ 87.943481][ T6172] veth1_vlan: entered promiscuous mode [ 87.991667][ T6172] veth0_macvtap: entered promiscuous mode [ 88.009637][ T6172] veth1_macvtap: entered promiscuous mode [ 88.046432][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.069369][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.098631][ T6218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.114925][ T6218] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.117356][ T127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.150055][ T127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.192472][ T6244] netlink: 'syz.3.865': attribute type 13 has an invalid length. [ 88.533462][ T6244] gretap0: refused to change device tx_queue_len [ 88.541128][ T6244] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 88.552344][ T4338] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set [ 88.573293][ T4338] EXT4-fs (loop2): Remounting filesystem read-only [ 88.573919][ T127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.590995][ T3663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.600254][ T127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.040051][ T6257] loop3: detected capacity change from 0 to 256 [ 89.050013][ T28] audit: type=1400 audit(1773832917.568:560): avc: denied { mounton } for pid=6172 comm="syz-executor" path="/root/syzkaller.eMiuy0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 89.073310][ T6257] FAT-fs (loop3): bogus number of FAT sectors [ 89.089177][ T6257] FAT-fs (loop3): Can't find a valid FAT filesystem [ 89.137527][ T28] audit: type=1400 audit(1773832917.608:561): avc: denied { mount } for pid=6172 comm="syz-executor" name="/" dev="gadgetfs" ino=3776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 89.323390][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 89.651088][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.873'. [ 89.682107][ T3567] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 89.859282][ T28] audit: type=1326 audit(1773832918.378:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 89.888604][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 89.891031][ T28] audit: type=1326 audit(1773832918.408:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 89.921333][ T28] audit: type=1326 audit(1773832918.408:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 89.945430][ T28] audit: type=1326 audit(1773832918.408:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 89.976216][ T28] audit: type=1326 audit(1773832918.408:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 89.999888][ T28] audit: type=1326 audit(1773832918.408:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 90.064382][ T28] audit: type=1326 audit(1773832918.408:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 90.088708][ T28] audit: type=1326 audit(1773832918.408:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6272 comm="syz.3.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 90.283922][ T6291] loop4: detected capacity change from 0 to 1024 [ 90.296383][ T6291] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 90.309579][ T6291] System zones: 0-1, 3-36 [ 90.315483][ T6291] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.883: bad orphan inode 134217728 [ 90.326462][ T6291] loop4: lost filesystem error report for type 5 error -117 [ 90.327241][ T6291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.441425][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.034085][ T6315] loop4: detected capacity change from 0 to 2048 [ 91.126673][ T6315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.158308][ T6315] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.179061][ T6333] xt_hashlimit: size too large, truncated to 1048576 [ 91.479826][ T6348] loop3: detected capacity change from 0 to 4096 [ 91.522273][ T6348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.639508][ T4841] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:24: bg 0: block 345: padding at end of block bitmap is not set [ 91.669383][ T4841] EXT4-fs (loop4): Remounting filesystem read-only [ 91.693134][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.066956][ T6369] loop4: detected capacity change from 0 to 512 [ 92.082325][ T4839] batadv1: left promiscuous mode [ 92.086762][ T6369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.100699][ T6369] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.218439][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.253630][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.000458][ T6429] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 93.007042][ T6429] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 93.015693][ T6429] vhci_hcd vhci_hcd.0: Device attached [ 93.026047][ T6429] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 93.032665][ T6429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.042158][ T6429] vhci_hcd vhci_hcd.0: Device attached [ 93.052104][ T6429] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 93.058650][ T6429] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 93.077102][ T6429] vhci_hcd vhci_hcd.0: Device attached [ 93.086272][ T6429] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 93.092830][ T6429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.106511][ T6429] vhci_hcd vhci_hcd.0: Device attached [ 93.124947][ T6429] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 93.131701][ T6429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.166578][ T6429] vhci_hcd vhci_hcd.0: Device attached [ 93.302373][ T6445] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 93.333368][ T6448] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 93.364936][ T6451] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(14) [ 93.371674][ T6451] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.403289][ T6451] vhci_hcd vhci_hcd.0: Device attached [ 93.422039][ T3397] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 93.431433][ T6453] vhci_hcd: connection closed [ 93.431731][ T6432] vhci_hcd: connection closed [ 93.431834][ T6436] vhci_hcd: connection closed [ 93.440185][ T6438] vhci_hcd: connection closed [ 93.448227][ T6434] vhci_hcd: connection closed [ 93.481864][ T127] vhci_hcd vhci_hcd.4: stop threads [ 93.483490][ T6430] vhci_hcd: connection reset by peer [ 93.487397][ T127] vhci_hcd vhci_hcd.4: release socket [ 93.552827][ T127] vhci_hcd vhci_hcd.4: disconnect device [ 93.586822][ T127] vhci_hcd vhci_hcd.4: stop threads [ 93.606321][ T127] vhci_hcd vhci_hcd.4: release socket [ 93.615577][ T127] vhci_hcd vhci_hcd.4: disconnect device [ 93.622509][ T127] vhci_hcd vhci_hcd.4: stop threads [ 93.631999][ T127] vhci_hcd vhci_hcd.4: release socket [ 93.642048][ T127] vhci_hcd vhci_hcd.4: disconnect device [ 93.654284][ T127] vhci_hcd vhci_hcd.4: stop threads [ 93.669728][ T127] vhci_hcd vhci_hcd.4: release socket [ 93.675881][ T127] vhci_hcd vhci_hcd.4: disconnect device [ 93.692746][ T127] vhci_hcd vhci_hcd.4: stop threads [ 93.698432][ T127] vhci_hcd vhci_hcd.4: release socket [ 93.712179][ T127] vhci_hcd vhci_hcd.4: disconnect device [ 93.718312][ T127] vhci_hcd vhci_hcd.4: stop threads [ 93.728294][ T127] vhci_hcd vhci_hcd.4: release socket [ 93.752052][ T127] vhci_hcd vhci_hcd.4: disconnect device [ 93.834794][ T6466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.944'. [ 95.174451][ T6518] netlink: 'syz.2.964': attribute type 3 has an invalid length. [ 95.182949][ T6518] netlink: 'syz.2.964': attribute type 3 has an invalid length. [ 95.367141][ T6530] xt_hashlimit: size too large, truncated to 1048576 [ 95.399500][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 95.399518][ T28] audit: type=1400 audit(1773832923.918:582): avc: denied { execute_no_trans } for pid=6527 comm="syz.2.969" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=36903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 95.627161][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'. [ 95.665198][ T6536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.718644][ T6536] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 95.819354][ T6539] bond3 (unregistering): (slave syz_tun): Releasing backup interface [ 95.841365][ T6539] bond3 (unregistering): Released all slaves [ 96.204927][ T6558] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 96.382874][ T6558] bond1: entered promiscuous mode [ 96.396118][ T6558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.456356][ T6567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.983'. [ 96.478133][ T6565] bond1: (slave bridge3): making interface the new active one [ 96.504563][ T6565] bridge3: entered promiscuous mode [ 96.519635][ T6565] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 96.655478][ T6580] netlink: 'syz.1.986': attribute type 5 has an invalid length. [ 96.681910][ T6580] netlink: 1132 bytes leftover after parsing attributes in process `syz.1.986'. [ 96.703019][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.986'. [ 96.860640][ T6587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.206000][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 97.215347][ T6595] netlink: 'syz.3.995': attribute type 18 has an invalid length. [ 97.223413][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 97.263574][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 98.571985][ T3397] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 98.973926][ T28] audit: type=1400 audit(1773832927.498:583): avc: denied { create } for pid=6607 comm="syz.5.1009" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.056696][ T28] audit: type=1400 audit(1773832927.578:584): avc: denied { unlink } for pid=4269 comm="syz-executor" name="file0" dev="tmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.121405][ T6619] io-wq is not configured for unbound workers [ 99.124998][ T28] audit: type=1400 audit(1773832927.648:585): avc: denied { write } for pid=6616 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.165105][ T6625] netlink: 'syz.3.1004': attribute type 3 has an invalid length. [ 99.173491][ T6625] netlink: 'syz.3.1004': attribute type 3 has an invalid length. [ 99.573351][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'. [ 99.754310][ T6651] loop3: detected capacity change from 0 to 512 [ 99.766685][ T6651] EXT4-fs: Ignoring removed bh option [ 99.772683][ T6651] EXT4-fs: Ignoring removed oldalloc option [ 99.779302][ T6651] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.779775][ T6653] tipc: Failed to remove unknown binding: 66,1,1/0:3717984060/3717984062 [ 99.817176][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'. [ 99.826929][ T6651] EXT4-fs (loop3): 1 truncate cleaned up [ 99.842686][ T6651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.073621][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.320038][ T6702] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1039'. [ 100.366069][ T6705] geneve2: entered promiscuous mode [ 100.484518][ T6720] netlink: 'syz.4.1047': attribute type 10 has an invalid length. [ 100.644270][ T6728] loop2: detected capacity change from 0 to 256 [ 101.005560][ T6730] loop1: detected capacity change from 0 to 2048 [ 101.151444][ T6730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.167861][ T6730] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.254884][ T6732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.273994][ T6735] geneve2: entered promiscuous mode [ 101.342781][ T6742] tipc: Failed to remove unknown binding: 66,1,1/0:318825109/318825111 [ 101.491139][ T127] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 101.506620][ T127] EXT4-fs (loop1): Remounting filesystem read-only [ 101.516277][ T6172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.582180][ T28] audit: type=1400 audit(1773832930.098:586): avc: denied { ioctl } for pid=6750 comm="syz.5.1060" path="socket:[39049]" dev="sockfs" ino=39049 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.919268][ T6740] bridge0: port 3(hsr0) entered disabled state [ 101.926168][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.934276][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.069294][ T6740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.080139][ T6740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.143328][ T4839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.152533][ T4839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.183745][ T6757] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 102.251284][ T4839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.275092][ T4839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.299589][ T4839] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.309139][ T4839] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.324171][ T4839] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.334941][ T4839] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.360910][ T4839] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.372450][ T4839] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.396814][ T4839] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.407697][ T4839] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.417422][ T6800] ref_ctr going negative. vaddr: 0x200000000002, curr val: -7112, delta: 1 [ 102.426528][ T6800] ref_ctr increment failed for inode: 0x472 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88811c768000 [ 102.457077][ T6804] __nla_validate_parse: 1 callbacks suppressed [ 102.457093][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 102.693781][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1080'. [ 102.954172][ T6830] loop5: detected capacity change from 0 to 1024 [ 103.045415][ T6830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.115498][ T6839] loop3: detected capacity change from 0 to 2048 [ 103.124867][ T6830] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 103.195367][ T6839] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 103.243303][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 103.253324][ T6839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.262823][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 103.288385][ T28] audit: type=1400 audit(1773832931.808:587): avc: denied { map } for pid=6838 comm="syz.3.1086" path="/220/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.361413][ T28] audit: type=1400 audit(1773832931.808:588): avc: denied { execute } for pid=6838 comm="syz.3.1086" path="/220/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.390211][ T6850] loop4: detected capacity change from 0 to 512 [ 103.433536][ T6850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 103.464528][ T6850] System zones: 1-12 [ 103.472419][ T6850] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1092: corrupted in-inode xattr: e_value size too large [ 103.497619][ T4269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.511273][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.544365][ T6850] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.551966][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 103.567558][ C1] EXT4-fs (loop4): initial error at time 1773832932: ext4_iget_extra_inode:5025: inode 15 [ 103.577534][ C1] EXT4-fs (loop4): last error at time 1773832932: ext4_iget_extra_inode:5025: inode 15 [ 103.590895][ T6850] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1092: couldn't read orphan inode 15 (err -117) [ 103.603209][ T6850] loop4: lost filesystem error report for type 5 error -117 [ 103.603873][ T6850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.695319][ T28] audit: type=1400 audit(1773832932.218:589): avc: denied { create } for pid=6848 comm="syz.4.1092" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 103.698457][ T6850] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.1092: Unrecognised inode hash code 4 [ 103.795209][ T6850] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1092: Corrupt directory, running e2fsck is recommended [ 103.821919][ T6850] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.1092: Unrecognised inode hash code 4 [ 103.851976][ T6850] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1092: Corrupt directory, running e2fsck is recommended [ 103.875687][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 104.239668][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.176038][ T6888] loop5: detected capacity change from 0 to 1024 [ 105.206895][ T6888] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 105.223740][ T6888] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 105.243774][ T6888] JBD2: no valid journal superblock found [ 105.249532][ T6888] EXT4-fs (loop5): Could not load journal inode [ 105.253844][ T6886] loop1: detected capacity change from 0 to 8192 [ 105.297912][ T6886] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.352006][ T6900] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=769 sclass=netlink_xfrm_socket pid=6900 comm=syz.2.1107 [ 105.401149][ T6888] loop5: detected capacity change from 0 to 8192 [ 105.416805][ T28] audit: type=1400 audit(1773832933.938:590): avc: denied { open } for pid=6902 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.452229][ T4349] loop5: p1 p2 p3 p4[DM] [ 105.464993][ T6907] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1110'. [ 105.471571][ T4349] loop5: p1 size 835329 extends beyond EOD, truncated [ 105.489451][ T28] audit: type=1400 audit(1773832933.938:591): avc: denied { kernel } for pid=6902 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.529386][ T4349] loop5: p3 start 134217728 is beyond EOD, truncated [ 105.530374][ T28] audit: type=1400 audit(1773832933.968:592): avc: denied { write } for pid=6902 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.538036][ T4349] loop5: p4 size 262144 extends beyond EOD, truncated [ 105.592850][ T6888] loop5: p1 p2 p3 p4[DM] [ 105.597523][ T6888] loop5: p1 size 835329 extends beyond EOD, truncated [ 105.619901][ T6888] loop5: p3 start 134217728 is beyond EOD, truncated [ 105.627323][ T6888] loop5: p4 size 262144 extends beyond EOD, truncated [ 105.643058][ T28] audit: type=1400 audit(1773832934.168:593): avc: denied { read write } for pid=6885 comm="syz.5.1113" name="loop5p2" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.734901][ T28] audit: type=1400 audit(1773832934.168:594): avc: denied { open } for pid=6885 comm="syz.5.1113" path="/dev/loop5p2" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.790009][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 105.801481][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 105.812763][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 105.858401][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 105.869774][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 105.901845][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 105.919614][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1119'. [ 106.379120][ T28] audit: type=1400 audit(1773832934.898:595): avc: denied { cpu } for pid=6938 comm="syz.2.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.543476][ T6944] loop2: detected capacity change from 0 to 128 [ 106.662095][ T28] audit: type=1400 audit(1773832935.158:596): avc: denied { append } for pid=6950 comm="syz.5.1131" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 106.683285][ T6954] syz.2.1128: attempt to access beyond end of device [ 106.683285][ T6954] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 106.725952][ T6954] syz.2.1128: attempt to access beyond end of device [ 106.725952][ T6954] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 106.772242][ T6954] syz.2.1128: attempt to access beyond end of device [ 106.772242][ T6954] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 106.820776][ T6954] syz.2.1128: attempt to access beyond end of device [ 106.820776][ T6954] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 106.849573][ T6954] syz.2.1128: attempt to access beyond end of device [ 106.849573][ T6954] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 106.889859][ T6954] syz.2.1128: attempt to access beyond end of device [ 106.889859][ T6954] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 106.978510][ T6954] syz.2.1128: attempt to access beyond end of device [ 106.978510][ T6954] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 107.007873][ T6954] syz.2.1128: attempt to access beyond end of device [ 107.007873][ T6954] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 107.039977][ T6954] syz.2.1128: attempt to access beyond end of device [ 107.039977][ T6954] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 107.070198][ T6954] syz.2.1128: attempt to access beyond end of device [ 107.070198][ T6954] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 107.660198][ T6977] netlink: 'syz.2.1141': attribute type 4 has an invalid length. [ 107.683526][ T6977] netlink: 'syz.2.1141': attribute type 4 has an invalid length. [ 107.699082][ T6975] loop5: detected capacity change from 0 to 4096 [ 107.723936][ T6975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.991993][ T28] audit: type=1400 audit(1773832936.488:597): avc: denied { setattr } for pid=6974 comm="syz.5.1142" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.043869][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1145'. [ 108.068200][ T4269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.165632][ T28] audit: type=1400 audit(1773832936.678:598): avc: denied { tracepoint } for pid=6992 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.358988][ T28] audit: type=1400 audit(1773832936.878:599): avc: denied { listen } for pid=7001 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.388500][ T28] audit: type=1400 audit(1773832936.908:600): avc: denied { accept } for pid=7001 comm="syz.5.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.548720][ T7011] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 108.563040][ T7011] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.585597][ T7011] bond2: (slave veth11): Enslaving as an active interface with a down link [ 108.607685][ T7011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.618017][ T7011] bond2: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 108.885818][ T7023] netlink: 'syz.4.1157': attribute type 5 has an invalid length. [ 108.898601][ T7023] netlink: 1132 bytes leftover after parsing attributes in process `syz.4.1157'. [ 108.911052][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1157'. [ 109.119291][ T7029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1161'. [ 109.239757][ T7037] loop5: detected capacity change from 0 to 128 [ 109.579940][ T7045] loop1: detected capacity change from 0 to 256 [ 109.606116][ T7050] loop3: detected capacity change from 0 to 128 [ 109.777077][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1173'. [ 109.918456][ T28] audit: type=1326 audit(1773832938.438:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 109.967401][ T28] audit: type=1326 audit(1773832938.438:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 109.990996][ T7062] loop4: detected capacity change from 0 to 1024 [ 110.020850][ T7064] loop1: detected capacity change from 0 to 1024 [ 110.036343][ T28] audit: type=1326 audit(1773832938.438:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 110.077830][ T7064] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 110.111850][ T7064] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 110.133294][ T7064] JBD2: no valid journal superblock found [ 110.139427][ T7064] EXT4-fs (loop1): Could not load journal inode [ 110.150838][ T28] audit: type=1326 audit(1773832938.438:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 110.183760][ T7062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.217488][ T7064] set_capacity_and_notify: 1 callbacks suppressed [ 110.217507][ T7064] loop1: detected capacity change from 0 to 8192 [ 110.230786][ T28] audit: type=1326 audit(1773832938.438:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7058 comm="syz.3.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 110.312966][ T4349] loop1: p1 p2 p3 p4[DM] [ 110.318260][ T4349] loop1: p1 size 835329 extends beyond EOD, truncated [ 110.335960][ T4349] loop1: p3 start 134217728 is beyond EOD, truncated [ 110.371266][ T4349] loop1: p4 size 262144 extends beyond EOD, truncated [ 110.383562][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.392800][ T7064] loop1: p1 p2 p3 p4[DM] [ 110.397278][ T7064] loop1: p1 size 835329 extends beyond EOD, truncated [ 110.406642][ T7064] loop1: p3 start 134217728 is beyond EOD, truncated [ 110.414197][ T7064] loop1: p4 size 262144 extends beyond EOD, truncated [ 110.476185][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 110.493257][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 110.504956][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 110.527441][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 110.675321][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1185'. [ 110.811779][ T7090] loop4: detected capacity change from 0 to 256 [ 111.016528][ T7098] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 111.065071][ T7098] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 111.245459][ T4829] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 49986 - 0 [ 111.276884][ T4829] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 49986 - 0 [ 111.301997][ T4829] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 49986 - 0 [ 111.359581][ T4829] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 49986 - 0 [ 111.430904][ T7108] loop7: detected capacity change from 0 to 16384 [ 111.607421][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 111.628625][ T7113] loop4: detected capacity change from 0 to 1024 [ 111.663736][ T7113] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 111.698102][ T7113] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 111.731228][ T7113] JBD2: no valid journal superblock found [ 111.747984][ T7113] EXT4-fs (loop4): Could not load journal inode [ 111.865072][ T7113] loop4: detected capacity change from 0 to 8192 [ 111.903423][ T4349] loop4: p1 p2 p3 p4[DM] [ 111.908023][ T4349] loop4: p1 size 835329 extends beyond EOD, truncated [ 111.917164][ T4349] loop4: p3 start 134217728 is beyond EOD, truncated [ 111.940167][ T4349] loop4: p4 size 262144 extends beyond EOD, truncated [ 111.972872][ T7113] loop4: p1 p2 p3 p4[DM] [ 111.983120][ T7113] loop4: p1 size 835329 extends beyond EOD, truncated [ 112.028723][ T7113] loop4: p3 start 134217728 is beyond EOD, truncated [ 112.044907][ T7113] loop4: p4 size 262144 extends beyond EOD, truncated [ 112.065749][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 112.065769][ T28] audit: type=1400 audit(1773832940.588:653): avc: denied { map } for pid=7133 comm="syz.3.1204" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 112.097520][ T7134] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.105135][ T7134] vhci_hcd vhci_hcd.2: invalid port number 96 [ 112.132423][ T7134] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 112.207591][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 112.208372][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 112.229212][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 112.312225][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 112.313130][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 112.334727][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 112.526993][ T7155] loop1: detected capacity change from 0 to 4096 [ 112.557428][ T7155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.655126][ T28] audit: type=1400 audit(1773832941.168:654): avc: denied { setopt } for pid=7165 comm="syz.3.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.744400][ T28] audit: type=1400 audit(1773832941.168:655): avc: denied { nlmsg_read } for pid=7165 comm="syz.3.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.843714][ T28] audit: type=1400 audit(1773832941.228:656): avc: denied { write } for pid=7163 comm="syz.5.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.091437][ T7189] netlink: 'syz.3.1225': attribute type 2 has an invalid length. [ 113.229389][ T7192] netlink: 'syz.3.1227': attribute type 4 has an invalid length. [ 113.254440][ T7192] netlink: 'syz.3.1227': attribute type 4 has an invalid length. [ 113.385281][ T6172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.585323][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 113.634472][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1233'. [ 114.472717][ T7219] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 114.544329][ T7221] loop3: detected capacity change from 0 to 4096 [ 114.718723][ T7221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.781100][ T7216] macvtap1: entered promiscuous mode [ 114.787425][ T7216] team0: entered promiscuous mode [ 114.803746][ T7216] team_slave_0: entered promiscuous mode [ 114.817921][ T7216] team_slave_1: entered promiscuous mode [ 114.855078][ T7216] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 114.936961][ T7216] team0: Device macvtap1 is already an upper device of the team interface [ 114.990565][ T7216] team0: left promiscuous mode [ 115.001907][ T7216] team_slave_0: left promiscuous mode [ 115.018441][ T7216] team_slave_1: left promiscuous mode [ 115.071660][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.128057][ T7237] loop3: detected capacity change from 0 to 128 [ 115.333041][ T7237] bio_check_eod: 33 callbacks suppressed [ 115.333062][ T7237] syz.3.1241: attempt to access beyond end of device [ 115.333062][ T7237] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 115.393437][ T7237] syz.3.1241: attempt to access beyond end of device [ 115.393437][ T7237] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 115.422084][ T7237] syz.3.1241: attempt to access beyond end of device [ 115.422084][ T7237] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 115.460739][ T7237] syz.3.1241: attempt to access beyond end of device [ 115.460739][ T7237] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 115.505649][ T7237] syz.3.1241: attempt to access beyond end of device [ 115.505649][ T7237] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 115.546922][ T7237] syz.3.1241: attempt to access beyond end of device [ 115.546922][ T7237] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 115.561276][ T7247] loop4: detected capacity change from 0 to 128 [ 115.623323][ T7237] syz.3.1241: attempt to access beyond end of device [ 115.623323][ T7237] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 115.669873][ T7237] syz.3.1241: attempt to access beyond end of device [ 115.669873][ T7237] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 115.730758][ T7237] syz.3.1241: attempt to access beyond end of device [ 115.730758][ T7237] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 115.778584][ T7237] syz.3.1241: attempt to access beyond end of device [ 115.778584][ T7237] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 115.918073][ T7251] netlink: 'syz.5.1247': attribute type 4 has an invalid length. [ 115.949525][ T7251] netlink: 'syz.5.1247': attribute type 4 has an invalid length. [ 116.299727][ T28] audit: type=1400 audit(1773832944.818:657): avc: denied { shutdown } for pid=7259 comm="syz.1.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.552068][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 116.561045][ T7274] bridge_slave_1: left allmulticast mode [ 116.593297][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 116.602984][ T7274] bridge_slave_1: left promiscuous mode [ 116.608753][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.620001][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 116.676117][ T7274] bridge_slave_0: left allmulticast mode [ 116.694362][ T28] audit: type=1400 audit(1773832945.218:658): avc: denied { write } for pid=7279 comm="syz.2.1260" name="file0" dev="tmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 116.695356][ T7274] bridge_slave_0: left promiscuous mode [ 116.760134][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.781999][ T28] audit: type=1400 audit(1773832945.218:659): avc: denied { open } for pid=7279 comm="syz.2.1260" path="/218/file0" dev="tmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 116.805043][ T28] audit: type=1400 audit(1773832945.218:660): avc: denied { ioctl } for pid=7279 comm="syz.2.1260" path="/218/file0" dev="tmpfs" ino=1152 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.135306][ T7297] loop1: detected capacity change from 0 to 128 [ 117.466826][ T28] audit: type=1400 audit(1773832945.988:661): avc: denied { append } for pid=7303 comm="syz.4.1270" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 118.357455][ T7336] netlink: 'syz.3.1283': attribute type 4 has an invalid length. [ 118.384768][ T7336] netlink: 'syz.3.1283': attribute type 4 has an invalid length. [ 118.773514][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 118.807961][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 118.873564][ T7353] loop2: detected capacity change from 0 to 128 [ 120.842897][ T7378] netlink: 'syz.5.1298': attribute type 10 has an invalid length. [ 120.879870][ T7378] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1298'. [ 120.978551][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 120.999244][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 121.090595][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1304'. [ 121.352604][ T7399] macvtap1: entered promiscuous mode [ 121.359256][ T7399] team0: entered promiscuous mode [ 121.364991][ T7399] team_slave_1: entered promiscuous mode [ 121.371424][ T7399] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 121.381579][ T7399] team0: Device macvtap1 is already an upper device of the team interface [ 121.412071][ T7399] team0: left promiscuous mode [ 121.428109][ T7399] team_slave_1: left promiscuous mode [ 121.556297][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1309'. [ 121.618846][ T7410] loop1: detected capacity change from 0 to 1024 [ 121.635891][ T7410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.075290][ T6172] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.168177][ T7451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=7451 comm=syz.1.1324 [ 123.197333][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 123.218611][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'. [ 123.402043][ T28] audit: type=1400 audit(1773832951.908:662): avc: denied { bind } for pid=7460 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 124.010411][ T7482] loop3: detected capacity change from 0 to 512 [ 124.053626][ T7482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.067695][ T7482] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.454524][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.606242][ T7499] netlink: 'syz.1.1346': attribute type 1 has an invalid length. [ 124.615623][ T28] audit: type=1400 audit(1773832953.138:663): avc: denied { getopt } for pid=7498 comm="syz.1.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.737424][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 124.758264][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 126.539289][ T7540] macvtap1: entered promiscuous mode [ 126.547342][ T7540] team0: entered promiscuous mode [ 126.565213][ T7540] team_slave_0: entered promiscuous mode [ 126.581241][ T7540] team_slave_1: entered promiscuous mode [ 126.596843][ T7540] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 126.734199][ T7540] team0: Device macvtap1 is already an upper device of the team interface [ 126.792780][ T7540] team0: left promiscuous mode [ 126.804151][ T7540] team_slave_0: left promiscuous mode [ 126.820530][ T7540] team_slave_1: left promiscuous mode [ 126.979167][ T7553] bond1: entered promiscuous mode [ 127.105149][ T7556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7556 comm=syz.3.1364 [ 127.118468][ T7553] macvlan2: entered promiscuous mode [ 127.128503][ T7553] macvlan2: entered allmulticast mode [ 127.163468][ T7558] loop2: detected capacity change from 0 to 2048 [ 127.188266][ T7558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.192913][ T7553] bond1: (slave macvlan2): Opening slave failed [ 127.234240][ T3663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.300966][ T7573] netlink: 'syz.5.1371': attribute type 1 has an invalid length. [ 127.330769][ T7573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.353019][ T7573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.366893][ T7573] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 127.388231][ T7573] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 127.389122][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 127.411682][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 127.663358][ T7587] IPv6: sit2: Disabled Multicast RS [ 127.908099][ T7614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1385'. [ 127.979167][ T7613] loop1: detected capacity change from 0 to 512 [ 128.008630][ T7616] netlink: 'syz.4.1387': attribute type 1 has an invalid length. [ 128.024717][ T7616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.064191][ T7616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.071673][ T7616] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.083215][ T7616] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 128.128408][ T7613] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.173934][ T7624] loop2: detected capacity change from 0 to 512 [ 128.200260][ T7624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.273209][ T7624] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.1390: iget: bad extended attribute block 3153 [ 128.297202][ T7624] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 128.297604][ T7624] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1390: couldn't read orphan inode 11 (err -117) [ 128.306888][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 128.306910][ C0] EXT4-fs (loop2): initial error at time 1773832956: ext4_orphan_get:1391: inode 11 [ 128.306965][ C0] EXT4-fs (loop2): last error at time 1773832956: ext4_orphan_get:1391: inode 11 [ 128.345770][ T28] audit: type=1400 audit(1773832956.858:664): avc: denied { remount } for pid=7612 comm="syz.1.1386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 128.362168][ T7624] loop2: lost filesystem error report for type 5 error -117 [ 128.368700][ T7624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.399196][ T7613] EXT4-fs error (device loop1): ext4_quota_enable:7188: comm syz.1.1386: Bad quota inum: 2, type: 1 [ 128.405663][ T7631] syzkaller0: entered promiscuous mode [ 128.416484][ T7631] syzkaller0: entered allmulticast mode [ 128.437983][ T7613] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 128.532741][ T7632] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 128.562384][ T7632] EXT4-fs error (device loop1): ext4_quota_enable:7188: comm syz.1.1386: Bad quota inum: 2, type: 1 [ 128.590805][ T7632] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 128.591165][ T3663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.700408][ T6172] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 128.819264][ T7654] netlink: 'syz.4.1399': attribute type 3 has an invalid length. [ 128.848406][ T7654] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1399'. [ 129.425400][ T7668] loop3: detected capacity change from 0 to 164 [ 129.433403][ T7668] Unable to read rock-ridge attributes [ 129.482075][ T28] audit: type=1326 audit(1773832957.978:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7fc00000 [ 130.051980][ T28] audit: type=1326 audit(1773832958.568:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3313b8c799 code=0x7fc00000 [ 130.722136][ T28] audit: type=1326 audit(1773832959.238:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 130.804829][ T7682] team_slave_0: entered promiscuous mode [ 130.809424][ T28] audit: type=1326 audit(1773832959.238:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 130.810925][ T7682] team_slave_1: entered promiscuous mode [ 130.840722][ T28] audit: type=1326 audit(1773832959.238:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 130.877191][ T28] audit: type=1326 audit(1773832959.238:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 130.919937][ T7682] macvtap1: entered promiscuous mode [ 130.924998][ T28] audit: type=1326 audit(1773832959.238:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 130.929481][ T7682] team0: entered promiscuous mode [ 130.949871][ T28] audit: type=1326 audit(1773832959.238:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 130.949973][ T28] audit: type=1326 audit(1773832959.238:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 130.950011][ T28] audit: type=1326 audit(1773832959.248:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 131.075065][ T7682] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 131.098494][ T7682] team0: Device macvtap1 is already an upper device of the team interface [ 131.133028][ T7682] team0: left promiscuous mode [ 131.161776][ T7682] team_slave_0: left promiscuous mode [ 131.167751][ T7682] team_slave_1: left promiscuous mode [ 131.190032][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 131.334643][ T7702] syzkaller0: entered allmulticast mode [ 131.499969][ T7730] loop5: detected capacity change from 0 to 512 [ 131.531549][ T7730] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.555731][ T7730] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.1427: inode has both inline data and extents flags [ 131.592252][ T7730] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 131.592514][ T7730] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1427: couldn't read orphan inode 17 (err -117) [ 131.602088][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 131.602114][ C1] EXT4-fs (loop5): initial error at time 1773832960: ext4_orphan_get:1391: inode 17 [ 131.602165][ C1] EXT4-fs (loop5): last error at time 1773832960: ext4_orphan_get:1391: inode 17 [ 131.651886][ T7730] loop5: lost filesystem error report for type 5 error -117 [ 131.652637][ T7730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.744429][ T4269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.744607][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 131.766497][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 131.775895][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 131.887092][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'. [ 132.490157][ T7775] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1451'. [ 132.499916][ T7775] lo speed is unknown, defaulting to 1000 [ 132.506424][ T7775] lo speed is unknown, defaulting to 1000 [ 132.513632][ T7775] lo speed is unknown, defaulting to 1000 [ 132.520176][ T7775] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.526488][ T7776] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1443'. [ 132.528495][ T7775] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 132.536901][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1443'. [ 132.548889][ T7775] lo speed is unknown, defaulting to 1000 [ 132.654196][ T7775] lo speed is unknown, defaulting to 1000 [ 132.663097][ T7775] lo speed is unknown, defaulting to 1000 [ 132.703597][ T7775] lo speed is unknown, defaulting to 1000 [ 132.748296][ T7775] lo speed is unknown, defaulting to 1000 [ 132.834773][ T7775] lo speed is unknown, defaulting to 1000 [ 133.109312][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 133.136516][ T7784] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 133.149135][ T7784] syzkaller0: entered promiscuous mode [ 133.155775][ T7784] syzkaller0: entered allmulticast mode [ 133.393930][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'. [ 133.417575][ T7812] loop5: detected capacity change from 0 to 128 [ 133.442406][ T7812] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.455812][ T7812] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.482993][ T7808] loop2: detected capacity change from 0 to 512 [ 133.526418][ T7808] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.542899][ T4269] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.622734][ T7808] EXT4-fs error (device loop2): ext4_quota_enable:7188: comm syz.2.1456: Bad quota inum: 2, type: 1 [ 133.648303][ T7828] netlink: 'syz.5.1462': attribute type 1 has an invalid length. [ 133.667961][ T7808] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 133.707879][ T7831] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 133.722874][ T7831] EXT4-fs error (device loop2): ext4_quota_enable:7188: comm syz.2.1456: Bad quota inum: 2, type: 1 [ 133.734350][ T7831] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 133.819768][ T3663] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 134.572438][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 134.572454][ T28] audit: type=1326 audit(1773832963.098:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 134.633320][ T28] audit: type=1326 audit(1773832963.128:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 134.689742][ T28] audit: type=1326 audit(1773832963.148:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 134.713617][ T28] audit: type=1326 audit(1773832963.148:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 134.766492][ T7866] loop3: detected capacity change from 0 to 512 [ 134.819360][ T7866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.835813][ T7866] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.851307][ T28] audit: type=1326 audit(1773832963.148:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 134.875041][ T28] audit: type=1326 audit(1773832963.148:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 134.898706][ T28] audit: type=1326 audit(1773832963.148:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 134.922324][ T28] audit: type=1326 audit(1773832963.148:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 134.946864][ T28] audit: type=1326 audit(1773832963.148:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 134.970781][ T28] audit: type=1326 audit(1773832963.158:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.2.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313b8c799 code=0x7ffc0000 [ 135.000205][ T7870] syzkaller0: entered allmulticast mode [ 135.178557][ T7883] capability: warning: `syz.5.1479' uses 32-bit capabilities (legacy support in use) [ 135.216783][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.267690][ T7887] loop2: detected capacity change from 0 to 1024 [ 135.283556][ T7887] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 135.323260][ T7887] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 135.349730][ T7887] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: comm syz.2.1481: inode #4294967295: comm syz.2.1481: iget: illegal inode # [ 135.369987][ T7887] loop2: lost filesystem error report for type 5 error -117 [ 135.370096][ T7887] EXT4-fs (loop2): no journal found [ 135.372508][ T7893] siw: device registration error -23 [ 135.377522][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 135.394853][ C0] EXT4-fs (loop2): initial error at time 1773832963: ext4_get_journal_inode:5863 [ 135.404119][ C0] EXT4-fs (loop2): last error at time 1773832963: ext4_get_journal_inode:5863 [ 135.415235][ T7887] EXT4-fs (loop2): can't get journal size [ 135.427406][ T7887] EXT4-fs (loop2): failed to initialize system zone (-22) [ 135.434784][ T7887] EXT4-fs (loop2): mount failed [ 135.711389][ T7911] loop2: detected capacity change from 0 to 512 [ 135.777405][ T7911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.806631][ T7911] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.909575][ T7933] loop5: detected capacity change from 0 to 512 [ 135.959678][ T7933] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.013763][ T3663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.476408][ T7958] loop2: detected capacity change from 0 to 512 [ 136.521348][ T7958] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.544530][ T7958] EXT4-fs error (device loop2): __ext4_iget:5378: inode #11: block 2: comm syz.2.1508: invalid block [ 136.576510][ T7958] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.576776][ T7958] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1508: couldn't read orphan inode 11 (err -117) [ 136.586103][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 136.586127][ C1] EXT4-fs (loop2): initial error at time 1773832965: __ext4_iget:5378: inode 11: block 2 [ 136.586166][ C1] EXT4-fs (loop2): last error at time 1773832965: __ext4_iget:5378: inode 11: block 2 [ 136.634887][ T7958] loop2: lost filesystem error report for type 5 error -117 [ 136.635544][ T7958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.083480][ T7952] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 137.091455][ T7952] syzkaller0: entered promiscuous mode [ 137.097148][ T7952] syzkaller0: entered allmulticast mode [ 137.162851][ T3663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.567179][ T7984] lo speed is unknown, defaulting to 1000 [ 138.217422][ T8000] __nla_validate_parse: 16 callbacks suppressed [ 138.217440][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1525'. [ 138.302297][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 138.417733][ T8005] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 138.439145][ T8005] syzkaller0: entered promiscuous mode [ 138.473465][ T8005] syzkaller0: entered allmulticast mode [ 138.787068][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1536'. [ 138.813937][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 138.847489][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 139.496362][ T8052] team0: Port device syz_tun added [ 139.517447][ T8052] team0: Port device syz_tun removed [ 139.538360][ T8052] bond0: (slave team0): Releasing backup interface [ 139.558606][ T8052] bridge_slave_0: left allmulticast mode [ 139.566919][ T8052] bridge_slave_0: left promiscuous mode [ 139.623955][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.634117][ T8052] bridge_slave_1: left allmulticast mode [ 139.644825][ T8052] bridge_slave_1: left promiscuous mode [ 139.656141][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.676658][ T8052] bond0: (slave bond_slave_0): Releasing backup interface [ 139.696356][ T8052] bond0: (slave bond_slave_1): Releasing backup interface [ 139.720561][ T8052] team0: Port device team_slave_0 removed [ 139.740372][ T8052] team0: Port device team_slave_1 removed [ 139.753561][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 139.753577][ T28] audit: type=1400 audit(1773832968.278:800): avc: denied { bind } for pid=8054 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.809720][ T8052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.828802][ T8052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.876492][ T8052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.924492][ T8069] loop5: detected capacity change from 0 to 164 [ 139.945909][ T8069] Unable to read rock-ridge attributes [ 140.277559][ T8089] loop3: detected capacity change from 0 to 512 [ 140.292608][ T8089] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.516423][ T28] audit: type=1400 audit(1773832969.028:801): avc: denied { bind } for pid=8091 comm="syz.4.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 141.002749][ T8109] loop3: detected capacity change from 0 to 512 [ 141.014909][ T28] audit: type=1326 audit(1773832969.538:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b20c2c799 code=0x7ffc0000 [ 141.064054][ T28] audit: type=1326 audit(1773832969.568:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b20c2c799 code=0x7ffc0000 [ 141.068550][ T8109] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.102748][ T28] audit: type=1326 audit(1773832969.568:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b20c2c799 code=0x7ffc0000 [ 141.129758][ T28] audit: type=1326 audit(1773832969.568:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b20c2c799 code=0x7ffc0000 [ 141.153503][ T28] audit: type=1326 audit(1773832969.568:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f7b20c2c799 code=0x7ffc0000 [ 141.177137][ T28] audit: type=1326 audit(1773832969.568:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b20c2c799 code=0x7ffc0000 [ 141.200700][ T28] audit: type=1326 audit(1773832969.568:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b20c2c799 code=0x7ffc0000 [ 141.224419][ T28] audit: type=1326 audit(1773832969.568:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b20c2c799 code=0x7ffc0000 [ 141.358678][ T8109] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.1566: Bad quota inum: 2, type: 1 [ 141.375158][ T8109] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 141.425927][ T8130] loop1: detected capacity change from 0 to 512 [ 141.444015][ T8130] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.474480][ T8130] EXT4-fs (loop1): 1 truncate cleaned up [ 141.481300][ T8130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.545813][ T8128] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 141.632932][ T8128] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.1566: Bad quota inum: 2, type: 1 [ 141.645069][ T8128] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 141.721597][ T3327] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 141.866287][ T8140] loop2: detected capacity change from 0 to 512 [ 141.882785][ T8140] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.037102][ T8149] lo speed is unknown, defaulting to 1000 [ 142.103148][ T6786] IPVS: starting estimator thread 0... [ 142.202734][ T8153] IPVS: using max 2304 ests per chain, 115200 per kthread [ 142.220911][ T8135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.324503][ T4841] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.428427][ T4841] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.538770][ T4841] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.572016][ T8158] lo speed is unknown, defaulting to 1000 [ 142.612280][ T4841] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.941724][ T8158] chnl_net:caif_netlink_parms(): no params data found [ 143.039694][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.053168][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.063615][ T4841] bond0 (unregistering): Released all slaves [ 143.072016][ T4841] bond1 (unregistering): Released all slaves [ 143.141987][ T4841] hsr_slave_0: left promiscuous mode [ 143.148510][ T4841] hsr_slave_1: left promiscuous mode [ 143.154764][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.162521][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.170579][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.178304][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.190721][ T4841] veth1_macvtap: left promiscuous mode [ 143.196347][ T4841] veth0_macvtap: left promiscuous mode [ 143.201883][ T4841] veth1_vlan: left promiscuous mode [ 143.207305][ T4841] veth0_vlan: left promiscuous mode [ 143.266788][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 143.279444][ T4841] team0 (unregistering): Port device team_slave_0 removed [ 143.314394][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.321636][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.329143][ T8158] bridge_slave_0: entered allmulticast mode [ 143.336503][ T8158] bridge_slave_0: entered promiscuous mode [ 143.343490][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.350812][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.358400][ T8158] bridge_slave_1: entered allmulticast mode [ 143.365863][ T8158] bridge_slave_1: entered promiscuous mode [ 143.407491][ T8175] lo speed is unknown, defaulting to 1000 [ 143.416455][ T8158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.427915][ T8158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.488128][ T8158] team0: Port device team_slave_0 added [ 143.499192][ T8158] team0: Port device team_slave_1 added [ 143.534706][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.541692][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.568863][ T8158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.580509][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.587813][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.614705][ T8158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.647502][ T8158] hsr_slave_0: entered promiscuous mode [ 143.653701][ T8158] hsr_slave_1: entered promiscuous mode [ 143.659749][ T8158] debugfs: 'hsr0' already exists in 'hsr' [ 143.665582][ T8158] Cannot create hsr debugfs directory [ 143.746699][ T8158] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 143.760946][ T8158] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 143.770524][ T8158] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 143.798397][ T8158] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 143.840556][ T8158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.858358][ T8158] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.870451][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.877660][ T4829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.900581][ T8158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.911362][ T8158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.928658][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.935887][ T4829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.994667][ T8158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.093175][ T8158] veth0_vlan: entered promiscuous mode [ 144.101007][ T8158] veth1_vlan: entered promiscuous mode [ 144.116462][ T8158] veth0_macvtap: entered promiscuous mode [ 144.124075][ T8158] veth1_macvtap: entered promiscuous mode [ 144.136039][ T8158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.147362][ T8158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.157605][ T146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.166484][ T146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.176018][ T146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.185065][ T146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.261902][ T8272] lo speed is unknown, defaulting to 1000 [ 144.419056][ T8283] loop6: detected capacity change from 0 to 128 [ 145.123378][ T8292] loop3: detected capacity change from 0 to 512 [ 145.156368][ T8292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.203628][ T8292] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.239358][ T8306] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 145.361594][ T8317] loop6: detected capacity change from 0 to 512 [ 145.375018][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 145.375037][ T28] audit: type=1400 audit(1773832973.898:868): avc: denied { watch watch_reads } for pid=8314 comm="syz.2.1600" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 145.444031][ T8317] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1605: invalid indirect mapped block 256 (level 2) [ 145.458435][ T8317] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.458957][ T8317] EXT4-fs (loop6): 2 truncates cleaned up [ 145.468204][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 145.468222][ C0] EXT4-fs (loop6): initial error at time 1773832973: ext4_free_branches:1023: inode 11 [ 145.468272][ C0] EXT4-fs (loop6): last error at time 1773832973: ext4_free_branches:1023: inode 11 [ 145.501858][ T8317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.528263][ T8317] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1605: bg 0: block 5: invalid block bitmap [ 145.543090][ T8317] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 145.555659][ T8317] EXT4-fs (loop6): This should not happen!! Data will be lost [ 145.555659][ T8317] [ 145.566850][ T8317] EXT4-fs (loop6): Total free blocks count 0 [ 145.572930][ T8317] EXT4-fs (loop6): Free/Dirty block details [ 145.578942][ T8317] EXT4-fs (loop6): free_blocks=0 [ 145.584273][ T8317] EXT4-fs (loop6): dirty_blocks=64 [ 145.589548][ T8317] EXT4-fs (loop6): Block reservation details [ 145.596350][ T8317] EXT4-fs (loop6): i_reserved_data_blocks=64 [ 145.621618][ T8158] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.804963][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.812778][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.860169][ T8332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.871389][ T8332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.944327][ T9] IPVS: starting estimator thread 0... [ 145.964534][ T4319] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.975105][ T4319] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.984867][ T4319] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.010594][ T4319] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.024145][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.042206][ T8339] IPVS: using max 2160 ests per chain, 108000 per kthread [ 147.085359][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1630'. [ 147.229016][ T8388] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 147.249936][ T4319] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 147.253670][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 147.258684][ T4319] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 147.300888][ T8388] bond4 (unregistering): (slave geneve3): Releasing backup interface [ 147.321469][ T8388] bond4 (unregistering): Released all slaves [ 147.333876][ T4319] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 147.353302][ T4319] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 147.464330][ T8413] macsec2: entered promiscuous mode [ 147.479620][ T8413] syz_tun: entered promiscuous mode [ 147.670885][ T8424] loop5: detected capacity change from 0 to 128 [ 147.773009][ T28] audit: type=1326 audit(1773832976.288:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 147.819585][ T28] audit: type=1326 audit(1773832976.288:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 147.870296][ T28] audit: type=1326 audit(1773832976.288:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 147.937122][ T8430] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 147.942109][ T28] audit: type=1326 audit(1773832976.288:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 147.987205][ T28] audit: type=1326 audit(1773832976.288:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 148.019865][ T8433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=8433 comm=syz.3.1644 [ 148.135866][ T28] audit: type=1326 audit(1773832976.328:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 148.162579][ T28] audit: type=1326 audit(1773832976.338:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 148.188448][ T28] audit: type=1326 audit(1773832976.338:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 148.213212][ T28] audit: type=1326 audit(1773832976.338:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 148.605720][ T8461] loop2: detected capacity change from 0 to 164 [ 148.630771][ T8461] Unable to read rock-ridge attributes [ 148.913190][ T8476] lo: Caught tx_queue_len zero misconfig [ 149.200952][ T8483] loop6: detected capacity change from 0 to 2048 [ 149.245851][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 149.316297][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1668'. [ 149.336659][ T8487] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 149.347767][ T4319] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 149.357626][ T4319] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 149.373435][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 149.392313][ T4319] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 149.402002][ T8489] team_slave_0: entered promiscuous mode [ 149.418534][ T8485] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 149.478043][ T8485] bond3 (unregistering): Released all slaves [ 149.494810][ T4319] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.525932][ T4319] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.542856][ T8491] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1669'. [ 149.652785][ T4319] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.766763][ T8506] veth1_to_bond: entered allmulticast mode [ 149.773496][ T8507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1684'. [ 149.774577][ T8508] loop6: detected capacity change from 0 to 164 [ 149.823171][ T8505] veth1_to_bond: left allmulticast mode [ 149.843881][ T8508] Unable to read rock-ridge attributes [ 150.120101][ T8531] xt_hashlimit: size too large, truncated to 1048576 [ 150.256698][ T8542] macsec1: entered promiscuous mode [ 150.269754][ T8542] syz_tun: entered promiscuous mode [ 150.291478][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 150.394596][ T8554] all: renamed from bridge_slave_1 [ 150.398255][ T8555] loop5: detected capacity change from 0 to 1024 [ 150.431375][ T8555] EXT4-fs: inline encryption not supported [ 150.492531][ T8555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.530818][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 150.530840][ T28] audit: type=1400 audit(1773832979.038:906): avc: denied { unmount } for pid=3663 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 150.568005][ T4269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.599787][ T8571] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 151.084763][ T28] audit: type=1326 audit(1773832979.598:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 151.135521][ T28] audit: type=1326 audit(1773832979.598:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 151.136135][ T8595] netlink: 'syz.4.1704': attribute type 4 has an invalid length. [ 151.182905][ T8595] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1704'. [ 151.202166][ T28] audit: type=1326 audit(1773832979.608:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 151.262004][ T28] audit: type=1326 audit(1773832979.608:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 151.343917][ T28] audit: type=1326 audit(1773832979.608:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 151.383285][ T28] audit: type=1326 audit(1773832979.608:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 151.476326][ T8600] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.483070][ T28] audit: type=1326 audit(1773832979.608:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 151.515754][ T8600] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 151.536167][ T8595] .`: renamed from bond0 [ 151.797655][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1717'. [ 152.084484][ T8627] loop6: detected capacity change from 0 to 512 [ 152.099755][ T8627] EXT4-fs: Ignoring removed oldalloc option [ 152.144529][ T8627] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1718: invalid block [ 152.166121][ T8627] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.166301][ T8627] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1718: invalid indirect mapped block 4294967295 (level 1) [ 152.175588][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 152.175623][ C0] EXT4-fs (loop6): initial error at time 1773832980: ext4_get_branch:178: inode 11: block 4294967295 [ 152.175662][ C0] EXT4-fs (loop6): last error at time 1773832980: ext4_get_branch:178: inode 11: block 4294967295 [ 152.222251][ T8627] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.222483][ T8627] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1718: invalid indirect mapped block 4294967295 (level 1) [ 152.355114][ T8627] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.355518][ T8627] EXT4-fs (loop6): 2 truncates cleaned up [ 152.422783][ T8627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.432961][ T8648] __nla_validate_parse: 3 callbacks suppressed [ 152.432979][ T8648] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1723'. [ 152.595146][ T8655] batadv_slave_1: entered promiscuous mode [ 152.616126][ T8655] batadv_slave_1: left promiscuous mode [ 152.847386][ T8158] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.062563][ T8683] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1739'. [ 153.302391][ T8709] netlink: 'syz.3.1750': attribute type 12 has an invalid length. [ 153.777075][ T8728] lo speed is unknown, defaulting to 1000 [ 154.018426][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.030817][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.901179][ T8781] lo speed is unknown, defaulting to 1000 [ 154.996175][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1777'. [ 155.082926][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1777'. [ 155.157292][ T8796] ref_ctr_offset mismatch. inode: 0x5e7 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 155.276621][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1781'. [ 155.495927][ T8803] macsec1: entered promiscuous mode [ 155.521992][ T8803] syz_tun: entered promiscuous mode [ 155.556013][ T8809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.594566][ T8814] macsec3: entered promiscuous mode [ 155.612662][ T8814] bond3: entered promiscuous mode [ 156.457910][ T8814] bond3: left promiscuous mode [ 157.006080][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 157.017200][ T8843] lo speed is unknown, defaulting to 1000 [ 157.022684][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 157.614328][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 157.614345][ T28] audit: type=1326 audit(1773832986.138:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 157.665411][ T28] audit: type=1326 audit(1773832986.138:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 157.742120][ T28] audit: type=1326 audit(1773832986.168:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 157.796286][ T28] audit: type=1326 audit(1773832986.168:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 157.865255][ T28] audit: type=1326 audit(1773832986.178:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 157.940078][ T28] audit: type=1326 audit(1773832986.178:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 157.992430][ T28] audit: type=1326 audit(1773832986.178:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 158.086698][ T28] audit: type=1326 audit(1773832986.178:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 158.177536][ T28] audit: type=1326 audit(1773832986.178:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 158.251969][ T28] audit: type=1326 audit(1773832986.178:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 158.339380][ T8910] lo speed is unknown, defaulting to 1000 [ 158.380389][ T8911] loop5: detected capacity change from 0 to 128 [ 158.545112][ T8916] lo speed is unknown, defaulting to 1000 [ 158.987654][ T8933] netlink: 'syz.3.1815': attribute type 2 has an invalid length. [ 158.993334][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'. [ 159.062800][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1816'. [ 159.129786][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'. [ 159.237838][ T8932] vlan2: entered allmulticast mode [ 159.246845][ T8932] bridge_slave_0: entered allmulticast mode [ 161.817054][ T9049] lo speed is unknown, defaulting to 1000 [ 161.980818][ T9057] lo speed is unknown, defaulting to 1000 [ 162.013386][ T9058] lo speed is unknown, defaulting to 1000 [ 162.442337][ T9068] lo speed is unknown, defaulting to 1000 [ 162.804643][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1872'. [ 162.817557][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1872'. [ 162.854645][ T9077] loop2: detected capacity change from 0 to 512 [ 162.861310][ T9075] loop5: detected capacity change from 0 to 512 [ 162.869297][ T9075] ext4: Unknown parameter 'noacl' [ 162.892878][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1876'. [ 162.907597][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1876'. [ 162.917729][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1876'. [ 162.931734][ T9077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.948893][ T9077] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.973615][ T3663] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.073483][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 163.073498][ T28] audit: type=1400 audit(1773832991.598:1084): avc: denied { getopt } for pid=9095 comm="syz.6.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.124656][ T28] audit: type=1400 audit(1773832991.648:1085): avc: denied { bind } for pid=9098 comm="syz.5.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 163.161752][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1884'. [ 163.843346][ T9123] bond1: entered promiscuous mode [ 163.988954][ T9128] loop2: detected capacity change from 0 to 1024 [ 164.007977][ T9128] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 164.310561][ T9138] lo speed is unknown, defaulting to 1000 [ 164.382696][ T9141] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.1897'. [ 165.002364][ T28] audit: type=1326 audit(1773832993.528:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 165.059418][ T28] audit: type=1326 audit(1773832993.528:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 165.164683][ T28] audit: type=1326 audit(1773832993.528:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 165.228805][ T28] audit: type=1326 audit(1773832993.528:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 165.295314][ T28] audit: type=1326 audit(1773832993.528:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 165.339613][ T28] audit: type=1326 audit(1773832993.528:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 165.409808][ T28] audit: type=1326 audit(1773832993.528:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 165.476239][ T28] audit: type=1326 audit(1773832993.528:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facba13c799 code=0x7ffc0000 [ 165.708151][ T9183] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1915'. [ 165.986838][ T9196] lo speed is unknown, defaulting to 1000 [ 166.071141][ T9203] lo speed is unknown, defaulting to 1000 [ 166.112320][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1928'. [ 166.131480][ T9208] lo speed is unknown, defaulting to 1000 [ 166.138451][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1928'. [ 166.459079][ T9236] lo speed is unknown, defaulting to 1000 [ 167.094978][ T9255] loop2: detected capacity change from 0 to 128 [ 167.194719][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1944'. [ 167.223261][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1944'. [ 167.242551][ T9261] loop6: detected capacity change from 0 to 512 [ 167.260150][ T9261] ext4: Unknown parameter 'noacl' [ 167.467085][ T9274] loop5: detected capacity change from 0 to 256 [ 167.474850][ T9274] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.487387][ T9274] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.784869][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 167.857964][ T9289] vlan0: entered allmulticast mode [ 168.045002][ T9293] lo speed is unknown, defaulting to 1000 [ 168.154134][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 168.154208][ T28] audit: type=1400 audit(1773832996.678:1167): avc: denied { accept } for pid=9303 comm="syz.4.1961" path="socket:[48889]" dev="sockfs" ino=48889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.241524][ T9311] lo speed is unknown, defaulting to 1000 [ 168.307898][ T28] audit: type=1326 audit(1773832996.828:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 168.360356][ T28] audit: type=1326 audit(1773832996.828:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 168.393107][ T9321] lo speed is unknown, defaulting to 1000 [ 168.407642][ T28] audit: type=1326 audit(1773832996.828:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 168.467729][ T28] audit: type=1326 audit(1773832996.828:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 168.495835][ T28] audit: type=1326 audit(1773832996.858:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 168.537393][ T9322] lo speed is unknown, defaulting to 1000 [ 168.571848][ T28] audit: type=1326 audit(1773832996.858:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 168.598708][ T28] audit: type=1326 audit(1773832996.858:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 168.604334][ T9331] ip6gre1: entered promiscuous mode [ 168.623354][ T28] audit: type=1326 audit(1773832996.858:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 168.639687][ T9331] ip6gre1: entered allmulticast mode [ 168.664074][ T28] audit: type=1326 audit(1773832996.858:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.3.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63746c799 code=0x7ffc0000 [ 168.682211][ T9321] lo speed is unknown, defaulting to 1000 [ 168.944668][ T9353] loop5: detected capacity change from 0 to 256 [ 168.990175][ T9353] FAT-fs (loop5): Directory bread(block 64) failed [ 169.002862][ T9353] FAT-fs (loop5): Directory bread(block 65) failed [ 169.009569][ T9353] FAT-fs (loop5): Directory bread(block 66) failed [ 169.017925][ T9353] FAT-fs (loop5): Directory bread(block 67) failed [ 169.025382][ T9353] FAT-fs (loop5): Directory bread(block 68) failed [ 169.032702][ T9353] FAT-fs (loop5): Directory bread(block 69) failed [ 169.039332][ T9353] FAT-fs (loop5): Directory bread(block 70) failed [ 169.046958][ T9353] FAT-fs (loop5): Directory bread(block 71) failed [ 169.053842][ T9353] FAT-fs (loop5): Directory bread(block 72) failed [ 169.060461][ T9353] FAT-fs (loop5): Directory bread(block 73) failed [ 169.161164][ T146] bio_check_eod: 66 callbacks suppressed [ 169.161178][ T146] kworker/u8:7: attempt to access beyond end of device [ 169.161178][ T146] loop5: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 169.181687][ T146] kworker/u8:7: attempt to access beyond end of device [ 169.181687][ T146] loop5: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 169.195964][ T146] kworker/u8:7: attempt to access beyond end of device [ 169.195964][ T146] loop5: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 169.210084][ T146] kworker/u8:7: attempt to access beyond end of device [ 169.210084][ T146] loop5: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 169.223722][ T146] kworker/u8:7: attempt to access beyond end of device [ 169.223722][ T146] loop5: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 169.237655][ T146] kworker/u8:7: attempt to access beyond end of device [ 169.237655][ T146] loop5: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 169.251366][ T146] kworker/u8:7: attempt to access beyond end of device [ 169.251366][ T146] loop5: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 169.265559][ T146] kworker/u8:7: attempt to access beyond end of device [ 169.265559][ T146] loop5: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 169.279168][ T146] kworker/u8:7: attempt to access beyond end of device [ 169.279168][ T146] loop5: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 169.293268][ T146] kworker/u8:7: attempt to access beyond end of device [ 169.293268][ T146] loop5: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 169.845893][ T9380] loop5: detected capacity change from 0 to 1024 [ 169.869187][ T9380] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 169.879458][ T9380] System zones: 0-1, 3-36 [ 169.887815][ T9380] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1989: bad orphan inode 134217728 [ 169.899335][ T9380] loop5: lost filesystem error report for type 5 error -117 [ 169.907907][ T9380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.024429][ T9387] ================================================================== [ 170.032561][ T9387] BUG: KCSAN: data-race in filemap_read / filemap_read [ 170.039524][ T9387] [ 170.041860][ T9387] read to 0xffff88811e304ee8 of 8 bytes by task 9380 on cpu 0: [ 170.049407][ T9387] filemap_read+0x6f/0xa10 [ 170.053943][ T9387] generic_file_read_iter+0x79/0x330 [ 170.059261][ T9387] ext4_file_read_iter+0x1cc/0x290 [ 170.064406][ T9387] copy_splice_read+0x471/0x6c0 [ 170.069329][ T9387] splice_direct_to_actor+0x28f/0x670 [ 170.074734][ T9387] do_splice_direct+0x119/0x1a0 [ 170.079611][ T9387] do_sendfile+0x382/0x650 [ 170.084055][ T9387] __x64_sys_sendfile64+0x105/0x150 [ 170.089296][ T9387] x64_sys_call+0x2dc4/0x3020 [ 170.094134][ T9387] do_syscall_64+0x12c/0x370 [ 170.098753][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.104753][ T9387] [ 170.107149][ T9387] write to 0xffff88811e304ee8 of 8 bytes by task 9387 on cpu 1: [ 170.114888][ T9387] filemap_read+0x98d/0xa10 [ 170.119417][ T9387] generic_file_read_iter+0x79/0x330 [ 170.124834][ T9387] ext4_file_read_iter+0x1cc/0x290 [ 170.130233][ T9387] copy_splice_read+0x471/0x6c0 [ 170.135132][ T9387] splice_direct_to_actor+0x28f/0x670 [ 170.140543][ T9387] do_splice_direct+0x119/0x1a0 [ 170.145513][ T9387] do_sendfile+0x382/0x650 [ 170.149974][ T9387] __x64_sys_sendfile64+0x105/0x150 [ 170.155205][ T9387] x64_sys_call+0x2dc4/0x3020 [ 170.159920][ T9387] do_syscall_64+0x12c/0x370 [ 170.164882][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.170800][ T9387] [ 170.173126][ T9387] value changed: 0x0000000000000070 -> 0x0000000000000071 [ 170.180247][ T9387] [ 170.182574][ T9387] Reported by Kernel Concurrency Sanitizer on: [ 170.188807][ T9387] CPU: 1 UID: 0 PID: 9387 Comm: syz.5.1989 Not tainted syzkaller #0 PREEMPT(full) [ 170.198721][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.208896][ T9387] ================================================================== [ 170.501995][ T4269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.572058][ T9279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512