last executing test programs: 38.548902303s ago: executing program 1 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$unix(r1, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e00)="f6debb016479bbdfe28ae6b90bf3259a1d51dd8ad823fd0ccdf24c5797d8d245422324ce052a9fc2a6ad1b627b86486f134c06fbe2bb525de3f57362ff335ee7163a4f532fdae30bcacf3657474467a49c3530dbdc6a02105000b9a0adbddc1d97bc88ba619b2fcf5666c29354bd452fdf3b17502cba980410889b48e6c29da4fc330792086c4ce0857bb303e68aeca8c50f7024a86a2ada3d1ac268efcd305f2b01da5e9cb6d12d76f406f5a0f6ba00aa071f6394fe7ebac06e282b12916597a5d44015e6c6b4183989d085a8f0f4aaed0bb8bc30235b1ab87d3b9511a46d04f1c191b4e068d8799b6c6aeb72bc6cf568b66e6a1f45d26fd548f098ac43fe232903b277ebf82b7ed57dc200af6b20ced93886c2b8e027894a123a8737b0a6553b890bbbdc0e1e1853adda2eb2de137c80308d44d2f04c9772c0316689f9524b645296e3f675080a707d067ce35030a4419e1434527dda4910ca88f3f112dcf025c94ded3b4b3dcb35a020fefba1cf75cbc14fbbd876c30bacd7e290b1d025c1ba56c5cf637e3a02f35e77e4c32edd8362487211257f2a2af803746cfc4baba95b666ee1810f614686a46844e127046c8ee162a2f9205b3b0987f8aef17fc7ff50b4b6fc2fbfbc8000e0e3569718bac09afb166d1bfa3abf104b35aa8aaba0a7b065aa8a1d70afd07d4c41c22a9015c7e4e06c5fe2264526c47c19ab74b52ca94d43c315fb7b959c5d3f81a80f1a0d9933903e5b1ad449ff351d0426db0876082c148a3f4352f6692973ff3c87edf4a4b1597b8502933e05d03603bf8f438aa2c6cb27b07c363cc0777be366ae5e9d433ad8742ee8326bfd22152f52ae4f882783fca079ae0d5cbcd3f78494e716acfa420354261138570bbe82f8b8d6cde71199ef8f55e6783869b9c7395e16fa3f390dc152a78ab6db1ef767c076172216f4bdb29ca1ec098af5f92e5abcb163ef48de8b414a4c841fb24640451602bd459c29169bc33d28efb2a2cb1b4c6c37afa73a6805e3b6c7c3cc099b29ca1834bcb7f3a18e1ed968dabf3ac34e1b34765465b7208a52f4484aeceb40b5308f5bf040c9be3f0816b453bc1bca72baa12fb6d7b16da757147a36550a856a943a74b2b36e73a62421cfec838905a2ad17cfb36314e5d0bb629e6daee690c7d163a62ad0c7430d5beddb0cda713b21767cfc38f359343546f54fa61208681490a9ac82c746ec50602713b0417ae515debece1d625f09bf595ad596a7cf0e7ebb448d6ce7834ebe31352f51abb998b0aa96ea4a6842263461453310ab29ea2ec2576845958ba4a5491d93c14c9cfee4a4c748c65792d1e6ee1fc6529bbf82224bce8d5415112c797d958a4f5553673e40b7d133105d79d2743900349c89855ccc1d92f96afdff376961f1c9b72b8080edf8f6b71fff66b3b49e0492d3c3af304a66e01fafcb26020b62568ed1915385965894c77f212b61392872ef5d441379643a692e068b6869d616d0fa3636eedb01acf5344daf84e0c11f5c8ffdcebeb02c58b77764c8bf6fee2b116eeafb2752f262786e0fb134a3f0823301d0578ae6952ba9a585371c4a31c28beb03518a1123abb745b55885486a347013e65e7e0bf0e734d74976ea4902ab513fecd98fccb8e023941e40fed3c1c4733422e2bc5840ed218d113369d6b09882f387260d50dc21f5ac807b00d28d7b8891e461cb5092f34f704954334b94fc7b832692431609627a88961866538ab6ed950ed74b1f150e9fe3cc00edceb9ec7269ed64c2e372c65ccb062b50a7c21f3d10c11eebf7980f0fea74d19b089fbe29f98b021d6be1ae5628fe3a0d704e908209d511d66987549e30f196bdee9f62182492285f60e59ce910686f914b1f9eda9d04d25fb8f43669ac28ef3da3b929fa1cc9c11dd9e5a3ac1d2f855312643676fe592bb058e14d52b937cef03dbaa4d6ef1c9bca4587c5e28057f2de745fabf8e0f688bc1e4c975d6bb429feaa6a", 0x584}], 0x1, 0x0, 0x0, 0x811}}], 0x1, 0x4880) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0x82b, 0x4) 38.534378024s ago: executing program 1 (id=101): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x5fc168c9d6b4368d}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) 38.386830677s ago: executing program 1 (id=103): r0 = socket$caif_stream(0x25, 0x1, 0x80005) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x2140, 0x0) bind$packet(r1, 0x0, 0x0) 38.35065823s ago: executing program 1 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x81801) 38.327446423s ago: executing program 1 (id=105): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 38.270641907s ago: executing program 1 (id=106): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 38.270504507s ago: executing program 32 (id=106): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 6.442653872s ago: executing program 0 (id=677): socket$netlink(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) close(0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x0, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) 6.421438354s ago: executing program 0 (id=671): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x4}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 5.547086341s ago: executing program 0 (id=679): r0 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x104, 0x10800, 0x12345}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.813781716s ago: executing program 0 (id=701): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x7, 0x4, 0x7) r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 4.590768726s ago: executing program 0 (id=696): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001"], 0x20}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) 4.374414304s ago: executing program 0 (id=707): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000b00)=""/233, 0xe9, 0x10140, 0x0, 0x0) 4.293684672s ago: executing program 33 (id=707): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000b00)=""/233, 0xe9, 0x10140, 0x0, 0x0) 2.303125277s ago: executing program 2 (id=741): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 2.245569812s ago: executing program 2 (id=744): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000002440)=""/148, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.942820669s ago: executing program 2 (id=756): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e64, @local}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 1.707190439s ago: executing program 3 (id=763): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) 1.13402296s ago: executing program 6 (id=769): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0x7, 0x4) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xb, 0x29, 0x2, {0x2}}, 0xb) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendto$inet(r2, &(0x7f0000000380)="bbb7a278", 0x4, 0x24000804, 0x0, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2) 1.084844695s ago: executing program 6 (id=770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x4, @val=@iter={0x0}}, 0x20) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="aa46235f7ca97c39d114d160df5742", 0xf}, {&(0x7f0000000340)='\tm0|', 0x4}], 0x2) 1.071798396s ago: executing program 2 (id=771): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.02549243s ago: executing program 2 (id=772): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) open$dir(0x0, 0x80, 0xa) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 997.615162ms ago: executing program 6 (id=773): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 967.281794ms ago: executing program 2 (id=774): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 960.151285ms ago: executing program 5 (id=775): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 945.796027ms ago: executing program 6 (id=776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffffc000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe14, 0x0, 0x0}, &(0x7f0000000000)=0x40) 906.27096ms ago: executing program 6 (id=778): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f00000035c0)=[{0x0, 0x35}, {&(0x7f0000001140)=""/53, 0x35}], 0x2}, 0x3}], 0x1, 0x2, 0x0) 899.100581ms ago: executing program 5 (id=779): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) 853.994695ms ago: executing program 4 (id=780): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 812.278728ms ago: executing program 4 (id=781): sendmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x4000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 770.817772ms ago: executing program 4 (id=782): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x7, 0x401}]}}}}}}}, 0x0) 723.531966ms ago: executing program 4 (id=783): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) capset(0x0, &(0x7f0000000000)={0x1000, 0x10ffff, 0x1, 0x0, 0x0, 0x9}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 665.627261ms ago: executing program 5 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x29, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0xffff}}}, 0x24}}, 0x0) 656.200252ms ago: executing program 3 (id=785): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 589.259208ms ago: executing program 3 (id=786): socket$igmp(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0x7ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 556.610161ms ago: executing program 3 (id=787): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x1}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 465.298899ms ago: executing program 5 (id=788): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000000c0)=""/31, 0x1f) getdents(r2, 0x0, 0x58) 465.101649ms ago: executing program 4 (id=789): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) 461.264199ms ago: executing program 3 (id=798): r0 = epoll_create1(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) 432.092742ms ago: executing program 6 (id=790): syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 427.521312ms ago: executing program 3 (id=791): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x80b, 0xed) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0xffff834b, 0x4) 388.457115ms ago: executing program 4 (id=792): syz_read_part_table(0x405a, &(0x7f0000000000)="$eJzszjFKA0EYBeC30SSjBkSwE4KLYCnaiNXeYi+QA1hZW7h4BQ8g2CxewWt4HUVERCJuEQsl31f9M/8b5oU/4nkosLv1MT2MksXjXpLDOt00SUmy+c2b07OMt0uVWZKr5XXbr94bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4f6oft+XrcXGQ7rrJxSyZTJPcbGTczKvsJ/XJ8F9tv2JZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDdne8MJe6P0jXzKiWpj9+vbp+SlzfL6dHnOEku79L2v9oXAHhlBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMSAAAAAEH/X7cjUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhgoAAP//AdIUYA==") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0x11, "0000000000000002"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 377.315377ms ago: executing program 5 (id=793): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 0s ago: executing program 5 (id=794): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 25.258022][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 25.258037][ T28] audit: type=1400 audit(1771614169.018:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.286950][ T28] audit: type=1400 audit(1771614169.048:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.287703][ T3298] cgroup: Unknown subsys name 'net' [ 25.314573][ T28] audit: type=1400 audit(1771614169.078:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.450699][ T3298] cgroup: Unknown subsys name 'cpuset' [ 25.456832][ T3298] cgroup: Unknown subsys name 'rlimit' [ 25.585827][ T28] audit: type=1400 audit(1771614169.348:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.617579][ T28] audit: type=1400 audit(1771614169.348:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.625419][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.638235][ T28] audit: type=1400 audit(1771614169.348:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.666965][ T28] audit: type=1400 audit(1771614169.348:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.687407][ T28] audit: type=1400 audit(1771614169.358:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.712319][ T28] audit: type=1400 audit(1771614169.358:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.735511][ T28] audit: type=1400 audit(1771614169.378:79): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.738026][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.836278][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.847484][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.930827][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.955396][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.966886][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.974031][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.981258][ T3310] bridge_slave_0: entered allmulticast mode [ 26.987640][ T3310] bridge_slave_0: entered promiscuous mode [ 26.998922][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.006085][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.013442][ T3310] bridge_slave_1: entered allmulticast mode [ 27.019825][ T3310] bridge_slave_1: entered promiscuous mode [ 27.035776][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.056192][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.063278][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.070367][ T3313] bridge_slave_0: entered allmulticast mode [ 27.076732][ T3313] bridge_slave_0: entered promiscuous mode [ 27.087110][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.094221][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.101439][ T3313] bridge_slave_1: entered allmulticast mode [ 27.108027][ T3313] bridge_slave_1: entered promiscuous mode [ 27.143675][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.153697][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.169852][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.183395][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.208195][ T3313] team0: Port device team_slave_0 added [ 27.224065][ T3313] team0: Port device team_slave_1 added [ 27.238465][ T3310] team0: Port device team_slave_0 added [ 27.248910][ T3310] team0: Port device team_slave_1 added [ 27.266754][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.273864][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.280998][ T3314] bridge_slave_0: entered allmulticast mode [ 27.287383][ T3314] bridge_slave_0: entered promiscuous mode [ 27.298251][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.305372][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.312474][ T3314] bridge_slave_1: entered allmulticast mode [ 27.319043][ T3314] bridge_slave_1: entered promiscuous mode [ 27.325354][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.332512][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.339656][ T3311] bridge_slave_0: entered allmulticast mode [ 27.346067][ T3311] bridge_slave_0: entered promiscuous mode [ 27.357099][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.364194][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.371390][ T3311] bridge_slave_1: entered allmulticast mode [ 27.377703][ T3311] bridge_slave_1: entered promiscuous mode [ 27.392586][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.399661][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.406771][ T3309] bridge_slave_0: entered allmulticast mode [ 27.413107][ T3309] bridge_slave_0: entered promiscuous mode [ 27.424056][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.431125][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.457079][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.472484][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.479426][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.505396][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.516128][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.523214][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.530340][ T3309] bridge_slave_1: entered allmulticast mode [ 27.536563][ T3309] bridge_slave_1: entered promiscuous mode [ 27.547263][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.554239][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.580188][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.592013][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.601393][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.608324][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.634266][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.652729][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.662882][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.679958][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.706366][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.718726][ T3311] team0: Port device team_slave_0 added [ 27.725408][ T3311] team0: Port device team_slave_1 added [ 27.732027][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.741674][ T3314] team0: Port device team_slave_0 added [ 27.768275][ T3314] team0: Port device team_slave_1 added [ 27.786603][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.793579][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.819559][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.836860][ T3310] hsr_slave_0: entered promiscuous mode [ 27.842898][ T3310] hsr_slave_1: entered promiscuous mode [ 27.850935][ T3313] hsr_slave_0: entered promiscuous mode [ 27.856786][ T3313] hsr_slave_1: entered promiscuous mode [ 27.862798][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.868575][ T3313] Cannot create hsr debugfs directory [ 27.874971][ T3309] team0: Port device team_slave_0 added [ 27.886311][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.893356][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.919263][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.942226][ T3309] team0: Port device team_slave_1 added [ 27.949153][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.956467][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.982414][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.995275][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.002271][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.028178][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.062623][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.069644][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.095564][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.131443][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.138378][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.164791][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.184786][ T3311] hsr_slave_0: entered promiscuous mode [ 28.190774][ T3311] hsr_slave_1: entered promiscuous mode [ 28.196624][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.202376][ T3311] Cannot create hsr debugfs directory [ 28.227061][ T3314] hsr_slave_0: entered promiscuous mode [ 28.233208][ T3314] hsr_slave_1: entered promiscuous mode [ 28.238957][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 28.244742][ T3314] Cannot create hsr debugfs directory [ 28.279884][ T3309] hsr_slave_0: entered promiscuous mode [ 28.293283][ T3309] hsr_slave_1: entered promiscuous mode [ 28.299241][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 28.304973][ T3309] Cannot create hsr debugfs directory [ 28.370225][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.383894][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.394855][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.417877][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.488674][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.497873][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.506757][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.516572][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.542296][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.554054][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.570666][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.582445][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.609357][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.618404][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.627008][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.635384][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.682599][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.696947][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.704145][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.713103][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.721862][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.747021][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.756184][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.769088][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.783996][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.791032][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.799397][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.806445][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.817463][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.830343][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.838991][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.846036][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.859730][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.875410][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.882626][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.891536][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.898567][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.907435][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.914541][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.943577][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.965499][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.972597][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.992837][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.999955][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.021915][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.055248][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.074514][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.081693][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.100317][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.107749][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.134787][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.147234][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.158157][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.180082][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.204518][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.255500][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.297791][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.353600][ T3311] veth0_vlan: entered promiscuous mode [ 29.376529][ T3310] veth0_vlan: entered promiscuous mode [ 29.389287][ T3311] veth1_vlan: entered promiscuous mode [ 29.402767][ T3310] veth1_vlan: entered promiscuous mode [ 29.444105][ T3311] veth0_macvtap: entered promiscuous mode [ 29.457071][ T3310] veth0_macvtap: entered promiscuous mode [ 29.466375][ T3311] veth1_macvtap: entered promiscuous mode [ 29.478341][ T3310] veth1_macvtap: entered promiscuous mode [ 29.498289][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.509905][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.519647][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.532887][ T3313] veth0_vlan: entered promiscuous mode [ 29.542553][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.550945][ T3309] veth0_vlan: entered promiscuous mode [ 29.556984][ T3314] veth0_vlan: entered promiscuous mode [ 29.563421][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.572409][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.591009][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.605026][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.613823][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.623341][ T3313] veth1_vlan: entered promiscuous mode [ 29.632347][ T3309] veth1_vlan: entered promiscuous mode [ 29.641598][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.651531][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.660839][ T3314] veth1_vlan: entered promiscuous mode [ 29.675085][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.692714][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.697813][ T3314] veth0_macvtap: entered promiscuous mode [ 29.720827][ T3314] veth1_macvtap: entered promiscuous mode [ 29.734354][ T3309] veth0_macvtap: entered promiscuous mode [ 29.747250][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.758660][ T3313] veth0_macvtap: entered promiscuous mode [ 29.766245][ T3313] veth1_macvtap: entered promiscuous mode [ 29.788180][ T3309] veth1_macvtap: entered promiscuous mode [ 29.812872][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.824588][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.834972][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.852211][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.885233][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.898063][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.933430][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.941430][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.978960][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.989424][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.005618][ T3488] -1: renamed from syzkaller0 [ 30.037218][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.053475][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.092307][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.116645][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.143799][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.167242][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.182245][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.272312][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 30.272325][ T28] audit: type=1400 audit(1771614174.038:172): avc: denied { create } for pid=3501 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.410219][ T28] audit: type=1400 audit(1771614174.038:173): avc: denied { write } for pid=3501 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.546026][ T3517] netlink: 'syz.2.14': attribute type 4 has an invalid length. [ 30.563083][ T3517] netlink: 'syz.2.14': attribute type 4 has an invalid length. [ 30.672721][ T28] audit: type=1400 audit(1771614174.438:174): avc: denied { create } for pid=3523 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.696906][ T3524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 30.700339][ T28] audit: type=1400 audit(1771614174.458:175): avc: denied { write } for pid=3523 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.725890][ T28] audit: type=1400 audit(1771614174.458:176): avc: denied { nlmsg_write } for pid=3523 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.747621][ T3524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 30.779025][ T28] audit: type=1400 audit(1771614174.538:177): avc: denied { create } for pid=3525 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.798408][ T28] audit: type=1400 audit(1771614174.538:178): avc: denied { getopt } for pid=3525 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.869219][ T3531] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 30.887249][ T28] audit: type=1400 audit(1771614174.648:179): avc: denied { bind } for pid=3530 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.961875][ T28] audit: type=1400 audit(1771614174.718:180): avc: denied { create } for pid=3534 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.013714][ T3535] loop0: detected capacity change from 0 to 512 [ 31.039030][ T3535] ext4: Unknown parameter 'dont_appraise' [ 31.069082][ T28] audit: type=1400 audit(1771614174.728:181): avc: denied { write } for pid=3534 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.094778][ T3535] Set syz1 is full, maxelem 2 reached [ 31.141775][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.154833][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.187724][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.197408][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.322133][ T3558] loop4: detected capacity change from 0 to 256 [ 31.335756][ T3558] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 31.357869][ T3558] FAT-fs (loop4): Filesystem has been set read-only [ 31.369936][ T3558] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 31.379068][ T3558] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 31.407408][ T3558] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 31.447981][ T3558] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 31.452735][ T3566] hub 3-0:1.0: USB hub found [ 31.457549][ T3558] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 31.470821][ T3558] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 31.474587][ T3566] hub 3-0:1.0: 8 ports detected [ 31.480998][ T3558] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 31.494011][ T3558] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 31.516722][ T3558] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 31.675169][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 31.848944][ T3585] netlink: 'syz.3.43': attribute type 3 has an invalid length. [ 31.856760][ T3585] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 31.877399][ T3585] netlink: 198116 bytes leftover after parsing attributes in process `syz.3.43'. [ 31.920792][ T3587] netlink: 'syz.3.44': attribute type 29 has an invalid length. [ 31.929619][ T3587] netlink: 'syz.3.44': attribute type 29 has an invalid length. [ 31.944694][ T3587] netlink: 'syz.3.44': attribute type 29 has an invalid length. [ 31.994277][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 32.060983][ T3591] loop3: detected capacity change from 0 to 4096 [ 32.079268][ T3591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.125790][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.151352][ T3419] IPVS: starting estimator thread 0... [ 32.162974][ T3595] IPVS: fo: FWM 3 0x00000003 - no destination available [ 32.180385][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 32.250234][ T3596] IPVS: using max 2688 ests per chain, 134400 per kthread [ 32.371257][ T3605] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.471065][ T3607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.503599][ T3609] loop4: detected capacity change from 0 to 4096 [ 32.519317][ T3609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.569230][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.106887][ T3633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 33.115885][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 33.126780][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 33.325694][ T3668] loop0: detected capacity change from 0 to 8192 [ 33.444568][ T3683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 33.478669][ T3668] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 33.486449][ T3668] FAT-fs (loop0): Filesystem has been set read-only [ 33.495685][ T3684] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 33.891815][ T3714] batadv_slave_1: entered promiscuous mode [ 33.898247][ T3714] batadv_slave_0: entered promiscuous mode [ 33.905046][ T3713] batadv_slave_0: left promiscuous mode [ 33.910992][ T3713] batadv_slave_1: left promiscuous mode [ 33.963275][ T3721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.94'. [ 34.021836][ T3728] syzkaller0: entered allmulticast mode [ 34.027963][ T3728] syzkaller0: entered promiscuous mode [ 34.040094][ T3728] syzkaller0 (unregistering): left promiscuous mode [ 34.052337][ T3728] syzkaller0 (unregistering): left allmulticast mode [ 34.247525][ T3743] batadv_slave_1: entered promiscuous mode [ 34.253995][ T3742] batadv_slave_1: left promiscuous mode [ 34.493832][ T3747] chnl_net:caif_netlink_parms(): no params data found [ 34.527366][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.534972][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.542324][ T3747] bridge_slave_0: entered allmulticast mode [ 34.548769][ T3747] bridge_slave_0: entered promiscuous mode [ 34.555528][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.562778][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.569949][ T3747] bridge_slave_1: entered allmulticast mode [ 34.576604][ T3747] bridge_slave_1: entered promiscuous mode [ 34.592904][ T3747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.602905][ T3747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.626344][ T3747] team0: Port device team_slave_0 added [ 34.636889][ T3747] team0: Port device team_slave_1 added [ 34.641949][ T3762] loop3: detected capacity change from 0 to 512 [ 34.649698][ T3762] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.657701][ T3747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.664996][ T3762] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.679738][ T3747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.681670][ T3762] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.108: bg 0: block 4: invalid block bitmap [ 34.717038][ T3747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.718363][ T3762] loop3: lost filesystem error report for type 5 error -117 [ 34.729027][ T3762] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.729518][ T3747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.740129][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 34.749860][ T3747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.756368][ C0] EXT4-fs (loop3): initial error at time 1771614178: ext4_validate_block_bitmap:432 [ 34.762979][ T3747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.788653][ C0] [ 34.788672][ C0] EXT4-fs (loop3): last error at time 1771614178: ext4_validate_block_bitmap:432 [ 34.789357][ T3762] EXT4-fs (loop3): 1 truncate cleaned up [ 34.826646][ T3762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.857722][ T3765] tipc: Started in network mode [ 34.862833][ T3765] tipc: Node identity d6d709c258e4, cluster identity 4711 [ 34.870054][ T3765] tipc: Enabled bearer , priority 0 [ 34.878196][ T3765] syzkaller0: MTU too low for tipc bearer [ 34.884042][ T3765] tipc: Disabling bearer [ 34.892666][ T3747] hsr_slave_0: entered promiscuous mode [ 34.899393][ T3747] hsr_slave_1: entered promiscuous mode [ 34.906798][ T3747] debugfs: 'hsr0' already exists in 'hsr' [ 34.929013][ T3747] Cannot create hsr debugfs directory [ 34.931334][ T3769] loop4: detected capacity change from 0 to 128 [ 34.946048][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.955981][ T3769] syz.4.111: attempt to access beyond end of device [ 34.955981][ T3769] loop4: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 34.971161][ T3769] syz.4.111: attempt to access beyond end of device [ 34.971161][ T3769] loop4: rw=2049, sector=186, nr_sectors = 16 limit=128 [ 34.984786][ T3769] syz.4.111: attempt to access beyond end of device [ 34.984786][ T3769] loop4: rw=2049, sector=218, nr_sectors = 16 limit=128 [ 35.012312][ T3772] macvtap1: entered promiscuous mode [ 35.012329][ T3772] macvtap1: entered allmulticast mode [ 35.012513][ T3772] syz_tun: entered promiscuous mode [ 35.012527][ T3772] syz_tun: entered allmulticast mode [ 35.013571][ T3772] team0: Device macvtap1 failed to register rx_handler [ 35.013919][ T3769] syz.4.111: attempt to access beyond end of device [ 35.013919][ T3769] loop4: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 35.014016][ T3769] syz.4.111: attempt to access beyond end of device [ 35.014016][ T3769] loop4: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 35.014054][ T3769] syz.4.111: attempt to access beyond end of device [ 35.014054][ T3769] loop4: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 35.014105][ T3769] syz.4.111: attempt to access beyond end of device [ 35.014105][ T3769] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 35.022967][ T3772] syz_tun: left allmulticast mode [ 35.023159][ T3772] syz_tun: left promiscuous mode [ 35.154573][ T3773] syz.4.111: attempt to access beyond end of device [ 35.154573][ T3773] loop4: rw=524288, sector=154, nr_sectors = 16 limit=128 [ 35.168449][ T3773] syz.4.111: attempt to access beyond end of device [ 35.168449][ T3773] loop4: rw=524288, sector=186, nr_sectors = 16 limit=128 [ 35.204246][ T3773] syz.4.111: attempt to access beyond end of device [ 35.204246][ T3773] loop4: rw=524288, sector=218, nr_sectors = 16 limit=128 [ 35.209924][ T3747] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.226608][ T3777] ref_ctr increment failed for inode: 0x93 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104e4d100 [ 35.230915][ T3747] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.249595][ T3747] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.262086][ T3747] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.320468][ T3776] uprobe: syz.0.114:3776 failed to unregister, leaking uprobe [ 35.399354][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 35.399367][ T28] audit: type=1400 audit(1771614179.158:249): avc: denied { cmd } for pid=3798 comm="syz.4.120" path="socket:[6219]" dev="sockfs" ino=6219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.405963][ T3747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.462257][ T3804] loop4: detected capacity change from 0 to 128 [ 35.463370][ T3747] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.486217][ T28] audit: type=1400 audit(1771614179.218:250): avc: denied { append } for pid=3800 comm="syz.3.122" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.514698][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.521782][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.542769][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.549929][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.565458][ T3804] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.573803][ T3747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.588231][ T3747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.590818][ T3809] loop3: detected capacity change from 0 to 512 [ 35.609058][ T3804] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.677320][ T28] audit: type=1400 audit(1771614179.438:251): avc: denied { create } for pid=3803 comm="syz.4.123" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.719506][ T3809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.734460][ T28] audit: type=1400 audit(1771614179.438:252): avc: denied { add_name } for pid=3803 comm="syz.4.123" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.740267][ T3809] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.754974][ T28] audit: type=1400 audit(1771614179.438:253): avc: denied { read write open } for pid=3803 comm="syz.4.123" path="/21/mnt/encrypted_dir/file" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.778392][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.794408][ T3747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.836448][ T28] audit: type=1400 audit(1771614179.598:254): avc: denied { watch watch_reads } for pid=3808 comm="syz.3.124" path="/40/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.951920][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.012846][ T3747] veth0_vlan: entered promiscuous mode [ 36.031076][ T3747] veth1_vlan: entered promiscuous mode [ 36.061052][ T3747] veth0_macvtap: entered promiscuous mode [ 36.074672][ T3747] veth1_macvtap: entered promiscuous mode [ 36.094102][ T3747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.112815][ T3747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.137588][ C1] hrtimer: interrupt took 48573 ns [ 36.145722][ T124] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.160866][ T124] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.187128][ T124] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.199289][ T124] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.233159][ T28] audit: type=1400 audit(1771614179.988:255): avc: denied { create } for pid=3852 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.301993][ T28] audit: type=1400 audit(1771614180.038:256): avc: denied { bind } for pid=3852 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.357299][ T28] audit: type=1400 audit(1771614180.048:257): avc: denied { mounton } for pid=3747 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.426004][ T28] audit: type=1400 audit(1771614180.098:258): avc: denied { read } for pid=3858 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.609549][ T3879] Illegal XDP return value 4294967294 on prog (id 27) dev N/A, expect packet loss! [ 36.825951][ T3887] loop5: detected capacity change from 0 to 1024 [ 36.845719][ T3887] ======================================================= [ 36.845719][ T3887] WARNING: The mand mount option has been deprecated and [ 36.845719][ T3887] and is ignored by this kernel. Remove the mand [ 36.845719][ T3887] option from the mount to silence this warning. [ 36.845719][ T3887] ======================================================= [ 36.882109][ T3890] usb usb8: usbfs: process 3890 (syz.4.150) did not claim interface 0 before use [ 36.966339][ T3897] __nla_validate_parse: 1 callbacks suppressed [ 36.966363][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 37.002721][ T3887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.058484][ T3887] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.108745][ T3887] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.148: lblock 3 mapped to illegal pblock 3 (length 3) [ 37.123429][ T3909] netlink: 'syz.3.157': attribute type 30 has an invalid length. [ 37.139473][ T3887] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 37.173418][ T3887] EXT4-fs (loop5): This should not happen!! Data will be lost [ 37.173418][ T3887] [ 37.292222][ T3920] capability: warning: `syz.4.162' uses deprecated v2 capabilities in a way that may be insecure [ 37.327622][ T3923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 37.514133][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 37.523958][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 37.541141][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 37.598198][ T30] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 3) [ 37.618259][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 37.634250][ T30] EXT4-fs (loop5): This should not happen!! Data will be lost [ 37.634250][ T30] [ 37.644303][ T30] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 37.658961][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 37.679872][ T30] EXT4-fs (loop5): This should not happen!! Data will be lost [ 37.679872][ T30] [ 37.690594][ T3747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.867374][ T3973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 38.067644][ T3990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.191'. [ 38.139269][ T3996] loop0: detected capacity change from 0 to 512 [ 38.148190][ T3994] loop3: detected capacity change from 0 to 2048 [ 38.149052][ T3996] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.171944][ T3996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.211410][ T3302] Alternate GPT is invalid, using primary GPT. [ 38.218036][ T3302] loop3: p1 p2 p3 [ 38.224512][ T3302] loop3: partition table partially beyond EOD, truncated [ 38.247386][ T3994] Alternate GPT is invalid, using primary GPT. [ 38.254726][ T3994] loop3: p1 p2 p3 [ 38.258817][ T3994] loop3: partition table partially beyond EOD, truncated [ 38.266887][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.326533][ T4003] loop2: detected capacity change from 0 to 128 [ 38.349220][ T4003] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.450066][ T4003] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.496982][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.821477][ T4032] loop5: detected capacity change from 0 to 128 [ 38.917770][ T4041] hugetlbfs: syz.4.213 (4041): Using mlock ulimits for SHM_HUGETLB is obsolete [ 39.106078][ T4054] loop2: detected capacity change from 0 to 512 [ 39.201292][ T4054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.240610][ T4054] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.291776][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.304143][ T4061] loop4: detected capacity change from 0 to 512 [ 39.349592][ T4061] EXT4-fs (loop4): 1 truncate cleaned up [ 39.365224][ T4066] xt_limit: Overflow, try lower: 65536/2147483648 [ 39.382743][ T4061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.533569][ T4074] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.221: bg 0: block 465: padding at end of block bitmap is not set [ 39.911020][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.953762][ T4082] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 39.995346][ T4082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.038436][ T4087] loop4: detected capacity change from 0 to 512 [ 40.058143][ T4082] bond1: (slave veth3): Enslaving as an active interface with a down link [ 40.068692][ T4087] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 40.111640][ T4082] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 40.121162][ T4082] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 40.133527][ T4087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 40.170300][ T4087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.230'. [ 40.477920][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 40.477975][ T28] audit: type=1400 audit(1771614184.238:292): avc: denied { create } for pid=4106 comm="syz.5.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.548124][ T28] audit: type=1400 audit(1771614184.248:293): avc: denied { write } for pid=4106 comm="syz.5.238" path="socket:[7523]" dev="sockfs" ino=7523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.620191][ T28] audit: type=1400 audit(1771614184.298:294): avc: denied { setopt } for pid=4106 comm="syz.5.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.888776][ T4113] loop3: detected capacity change from 0 to 32768 [ 40.960555][ T3303] loop3: p1 p3 < p5 p6 > [ 40.964921][ T3303] loop3: partition table partially beyond EOD, truncated [ 40.982311][ T4113] loop3: p1 p3 < p5 p6 > [ 40.986728][ T4113] loop3: partition table partially beyond EOD, truncated [ 41.268587][ T28] audit: type=1400 audit(1771614185.028:295): avc: denied { ioctl } for pid=4130 comm="syz.3.247" path="socket:[6792]" dev="sockfs" ino=6792 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.362543][ T4138] netlink: 'syz.4.249': attribute type 2 has an invalid length. [ 41.397452][ T4138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.249'. [ 41.482672][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 41.494053][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 41.505522][ T4127] udevd[4127]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 41.516791][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.548590][ T4127] udevd[4127]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 41.569743][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 41.588142][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 41.608578][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 42.120344][ T28] audit: type=1326 audit(1771614185.878:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.5.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ee3ac629 code=0x7fc00000 [ 42.181182][ T28] audit: type=1326 audit(1771614185.878:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.5.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6ee3ac629 code=0x7fc00000 [ 42.244632][ T28] audit: type=1326 audit(1771614185.878:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.5.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ee3ac629 code=0x7fc00000 [ 42.302758][ T28] audit: type=1326 audit(1771614185.878:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.5.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ee3ac629 code=0x7fc00000 [ 42.359961][ T28] audit: type=1326 audit(1771614185.878:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.5.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ee3ac629 code=0x7fc00000 [ 42.394608][ T28] audit: type=1326 audit(1771614185.878:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.5.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ee3ac629 code=0x7fc00000 [ 42.476635][ T4172] loop3: detected capacity change from 0 to 512 [ 42.514061][ T4172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.619536][ T4172] EXT4-fs (loop3): shut down requested (1) [ 42.656202][ T4184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 42.680578][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.689455][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.708059][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 42.748465][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.772518][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.784710][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 42.829673][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.929151][ T4196] bridge_slave_0: left allmulticast mode [ 42.935237][ T4196] bridge_slave_0: left promiscuous mode [ 42.941507][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.956470][ T4196] bridge_slave_1: left allmulticast mode [ 42.965152][ T4202] loop0: detected capacity change from 0 to 512 [ 42.965766][ T4196] bridge_slave_1: left promiscuous mode [ 42.978727][ T4202] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.980960][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.996860][ T4202] EXT4-fs (loop0): 1 truncate cleaned up [ 43.003216][ T4196] bond0: (slave bond_slave_0): Releasing backup interface [ 43.003264][ T4202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.029139][ T4196] bond0: (slave bond_slave_1): Releasing backup interface [ 43.044595][ T4196] team0: Port device team_slave_0 removed [ 43.053695][ T4196] team0: Port device team_slave_1 removed [ 43.061056][ T4196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.068839][ T4196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.080100][ T4196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.087715][ T4196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.097981][ T4196] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 43.206103][ T4217] netlink: 'syz.4.279': attribute type 13 has an invalid length. [ 43.222295][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.306915][ T4219] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 43.318270][ T4219] syzkaller0: entered promiscuous mode [ 43.326037][ T4219] syzkaller0: entered allmulticast mode [ 43.717165][ T4242] loop4: detected capacity change from 0 to 128 [ 43.753645][ T4242] bio_check_eod: 6 callbacks suppressed [ 43.753661][ T4242] syz.4.289: attempt to access beyond end of device [ 43.753661][ T4242] loop4: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 43.807874][ T4242] syz.4.289: attempt to access beyond end of device [ 43.807874][ T4242] loop4: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 43.846907][ T4229] loop3: detected capacity change from 0 to 32768 [ 43.869777][ T57] kworker/u8:4: attempt to access beyond end of device [ 43.869777][ T57] loop4: rw=1, sector=154, nr_sectors = 2 limit=128 [ 44.036302][ T4264] loop3: detected capacity change from 0 to 1024 [ 44.047122][ T30] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x20 [ 44.088361][ T4264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.185178][ T4264] EXT4-fs error (device loop3): ext4_check_all_de:660: inode #12: block 7: comm syz.3.297: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=108 fake=0 [ 44.226256][ T4264] EXT4-fs error (device loop3): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.3.297: path /71/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=132 fake=0 [ 44.276016][ T4281] netlink: 'syz.2.302': attribute type 5 has an invalid length. [ 44.281464][ T4251] syz.0.292 (4251) used greatest stack depth: 10424 bytes left [ 44.335153][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.515187][ T4308] syz.3.308 (4308) used greatest stack depth: 10376 bytes left [ 44.688831][ T4351] loop2: detected capacity change from 0 to 128 [ 44.916177][ T4353] mmap: syz.3.315 (4353) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.175746][ T4449] loop2: detected capacity change from 0 to 7 [ 45.418374][ T4437] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.438615][ T4437] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.468680][ T4437] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.489611][ T4437] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.510426][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 45.510437][ T28] audit: type=1400 audit(1771614189.278:332): avc: denied { connect } for pid=4478 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.913395][ T4496] loop0: detected capacity change from 0 to 512 [ 45.965638][ T4496] tipc: New replicast peer: 255.255.255.255 [ 45.992549][ T4496] tipc: Enabled bearer , priority 10 [ 46.051255][ T4500] loop0: detected capacity change from 0 to 1024 [ 46.060857][ T4500] EXT4-fs: Ignoring removed oldalloc option [ 46.066784][ T4500] EXT4-fs: Ignoring removed bh option [ 46.102486][ T4500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.145636][ T28] audit: type=1400 audit(1771614189.898:333): avc: denied { add_name } for pid=4499 comm="syz.0.346" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.171380][ T28] audit: type=1326 audit(1771614189.938:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.3.342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f91bbc629 code=0x0 [ 46.444561][ T4508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 46.483454][ T4508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 46.597907][ T28] audit: type=1400 audit(1771614190.358:335): avc: denied { setopt } for pid=4513 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 46.606019][ T4514] xt_hashlimit: size too large, truncated to 1048576 [ 46.770800][ T4520] loop3: detected capacity change from 0 to 512 [ 46.820581][ T4520] EXT4-fs: Ignoring removed bh option [ 46.829593][ T4520] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 46.835131][ T4503] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4224: comm syz.0.346: Allocating blocks 1-17 which overlap fs metadata [ 46.857415][ T4500] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4224: comm syz.0.346: Allocating blocks 1-17 which overlap fs metadata [ 46.862871][ T4520] EXT4-fs (loop3): 1 truncate cleaned up [ 46.888928][ T4520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.947053][ T4500] syz.0.346 (4500) used greatest stack depth: 9848 bytes left [ 46.973300][ T28] audit: type=1400 audit(1771614190.738:336): avc: denied { remove_name } for pid=4519 comm="syz.3.353" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.005142][ T28] audit: type=1400 audit(1771614190.758:337): avc: denied { rename } for pid=4519 comm="syz.3.353" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.110830][ T3386] tipc: Node number set to 2385709506 [ 47.142319][ T4531] lo: Caught tx_queue_len zero misconfig [ 47.154157][ T28] audit: type=1400 audit(1771614190.758:338): avc: denied { reparent } for pid=4519 comm="syz.3.353" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.176540][ T28] audit: type=1326 audit(1771614190.888:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.5.355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6ee3ac629 code=0x0 [ 47.201615][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.211440][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.300371][ T28] audit: type=1400 audit(1771614191.038:340): avc: denied { name_bind } for pid=4537 comm="syz.4.361" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.341223][ T28] audit: type=1400 audit(1771614191.038:341): avc: denied { name_bind } for pid=4539 comm="syz.0.357" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 47.370102][ T4547] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.383429][ T4547] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.423584][ T4547] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4224: comm syz.4.364: Allocating blocks 41-42 which overlap fs metadata [ 47.437260][ T4547] loop4: lost filesystem error report for type 5 error -117 [ 47.438170][ T4547] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.364: Failed to acquire dquot type 0 [ 47.445491][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 47.445510][ C0] EXT4-fs (loop4): initial error at time 1771614191: ext4_mb_mark_diskspace_used:4224 [ 47.445536][ C0] EXT4-fs (loop4): last error at time 1771614191: ext4_mb_mark_diskspace_used:4224 [ 47.481937][ T4547] loop4: lost filesystem error report for type 5 error -117 [ 47.491219][ T4547] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 47.512956][ T4547] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #12: comm syz.4.364: corrupted inode contents [ 47.524775][ T4547] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 47.527865][ T4547] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #12: comm syz.4.364: mark_inode_dirty error [ 47.548217][ T4547] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 47.548947][ T4547] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #12: comm syz.4.364: corrupted inode contents [ 47.569891][ T4547] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 47.570346][ T4547] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.364: mark_inode_dirty error [ 47.590581][ T4547] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 47.590763][ T4547] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #12: comm syz.4.364: corrupted inode contents [ 47.611645][ T4547] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 47.612972][ T4547] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 47.630710][ T4547] loop4: lost filesystem error report for type 5 error -117 [ 47.630846][ T4547] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #12: comm syz.4.364: corrupted inode contents [ 47.649960][ T4547] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 47.650333][ T4547] EXT4-fs error (device loop4): ext4_truncate:4587: inode #12: comm syz.4.364: mark_inode_dirty error [ 47.670421][ T4547] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 47.670540][ T4547] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 47.688528][ T4547] loop4: lost filesystem error report for type 5 error -117 [ 47.688743][ T4547] EXT4-fs (loop4): 1 truncate cleaned up [ 47.701782][ T4547] EXT4-fs (loop4): pa ffff8881081d4460: logic 1, phys. 41, len 23 [ 47.709583][ T4547] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5467: group 0, free 22, pa_free 23 [ 47.720031][ T4547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.756720][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.815271][ T4559] netlink: 36 bytes leftover after parsing attributes in process `syz.4.367'. [ 48.006998][ T4579] capability: warning: `syz.2.376' uses 32-bit capabilities (legacy support in use) [ 48.079240][ T4586] netlink: 'syz.3.380': attribute type 1 has an invalid length. [ 48.096017][ T4588] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 48.102132][ T4588] syzkaller0: linktype set to 23 [ 48.113200][ T4586] bond2: entered promiscuous mode [ 48.118282][ T4586] bond2: entered allmulticast mode [ 48.140268][ T4586] bond2: (slave ip6gretap1): making interface the new active one [ 48.148323][ T4586] ip6gretap1: entered promiscuous mode [ 48.153938][ T4586] ip6gretap1: entered allmulticast mode [ 48.160089][ T4586] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 48.322193][ T4609] set_capacity_and_notify: 1 callbacks suppressed [ 48.322209][ T4609] loop2: detected capacity change from 0 to 512 [ 48.338668][ T4609] EXT4-fs: Ignoring removed i_version option [ 48.353777][ T4609] EXT4-fs: Ignoring removed bh option [ 48.393544][ T4609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.406321][ T4609] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.439157][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.473634][ T4625] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 48.506569][ T4628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 48.521888][ T4631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.396'. [ 48.525514][ T4628] netlink: 92 bytes leftover after parsing attributes in process `syz.2.394'. [ 48.779932][ T4654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 48.806906][ T4657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.408'. [ 49.270448][ T4687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 49.774892][ T4702] netlink: 'syz.0.428': attribute type 27 has an invalid length. [ 50.340306][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.340937][ T4711] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.347466][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.403712][ T4712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 50.532307][ T4703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.540859][ T4703] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.571312][ T4703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.642949][ T1693] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.654440][ T1693] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.698216][ T4733] loop4: detected capacity change from 0 to 2048 [ 50.699382][ T1693] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.732345][ T4733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.744505][ T4733] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.767834][ T1693] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.891229][ T4741] loop0: detected capacity change from 0 to 128 [ 50.944008][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 50.944021][ T28] audit: type=1326 audit(1771614194.708:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd314c629 code=0x7fc00000 [ 50.949406][ T4744] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.435: bg 0: block 345: padding at end of block bitmap is not set [ 51.008921][ T4744] EXT4-fs (loop4): Remounting filesystem read-only [ 51.033474][ T4422] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 51.338347][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.378861][ T4753] loop0: detected capacity change from 0 to 512 [ 51.379035][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 51.411566][ T4753] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.441: couldn't read orphan inode 26 (err -116) [ 51.415389][ T4754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 51.450351][ T4753] loop0: lost filesystem error report for type 5 error -116 [ 51.450977][ T4753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.500323][ T4753] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.564737][ T4753] EXT4-fs (loop0): shut down requested (0) [ 51.574264][ T28] audit: type=1400 audit(1771614195.338:383): avc: denied { connect } for pid=4759 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.614257][ T28] audit: type=1400 audit(1771614195.338:384): avc: denied { read } for pid=4759 comm="syz.4.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.646523][ T28] audit: type=1326 audit(1771614195.378:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cd3146417 code=0x7fc00000 [ 51.671772][ T28] audit: type=1400 audit(1771614195.408:386): avc: denied { write } for pid=4759 comm="syz.4.443" path="socket:[9493]" dev="sockfs" ino=9493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.695371][ T28] audit: type=1400 audit(1771614195.438:387): avc: denied { write } for pid=4750 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.900891][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.942281][ T4777] loop0: detected capacity change from 0 to 512 [ 51.950723][ T4777] EXT4-fs: test_dummy_encryption option not supported [ 52.015218][ T4786] process 'syz.3.453' launched './file1' with NULL argv: empty string added [ 52.025563][ T28] audit: type=1400 audit(1771614195.788:388): avc: denied { execute_no_trans } for pid=4784 comm="syz.3.453" path="/97/file1" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.054337][ T4782] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.061518][ T4782] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.095147][ T4782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.104643][ T4782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.168027][ T4789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.176826][ T4789] bond1: (slave bond2): Enslaving as an active interface with an up link [ 52.194966][ T4791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.203702][ T1693] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.216818][ T1693] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.234777][ T1693] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.257761][ T28] audit: type=1400 audit(1771614196.008:389): avc: denied { read write } for pid=4800 comm="syz.2.456" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 52.264117][ T4803] Zero length message leads to an empty skb [ 52.284231][ T28] audit: type=1400 audit(1771614196.008:390): avc: denied { open } for pid=4800 comm="syz.2.456" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 52.328391][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.450728][ T28] audit: type=1326 audit(1771614196.218:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.2.462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cd314c629 code=0x0 [ 53.157397][ T4850] -: renamed from syzkaller0 [ 53.702875][ T4877] syz_tun: entered allmulticast mode [ 53.722939][ T4876] syz_tun: left allmulticast mode [ 53.786276][ T4881] loop3: detected capacity change from 0 to 1024 [ 53.812976][ T4881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.825307][ T4881] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.907819][ T4891] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 53.916015][ T4889] loop2: detected capacity change from 0 to 1764 [ 53.916274][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.931877][ T4891] netlink: 'syz.0.490': attribute type 4 has an invalid length. [ 53.939646][ T4891] __nla_validate_parse: 3 callbacks suppressed [ 53.939722][ T4891] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.490'. [ 54.134895][ T4905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 54.203589][ T4889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.220633][ T4889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.457921][ T4941] loop3: detected capacity change from 0 to 2048 [ 54.542851][ T4941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.623280][ T4941] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.514: bg 0: block 234: padding at end of block bitmap is not set [ 54.647982][ T4941] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 622 with error 117 [ 54.660661][ T4941] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.660661][ T4941] [ 54.680253][ T4952] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 54.686786][ T4952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.697578][ T4957] syzkaller0: entered promiscuous mode [ 54.703769][ T4957] syzkaller0: entered allmulticast mode [ 54.715525][ T4952] vhci_hcd vhci_hcd.0: Device attached [ 54.716686][ T4960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.726484][ T4959] netlink: 'syz.4.520': attribute type 4 has an invalid length. [ 54.783601][ T4960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.791445][ T4959] netlink: 'syz.4.520': attribute type 4 has an invalid length. [ 54.798698][ T4953] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 54.809815][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.821080][ T4437] vhci_hcd vhci_hcd.0: stop threads [ 54.831481][ T4437] vhci_hcd vhci_hcd.0: release socket [ 54.842291][ T4437] vhci_hcd vhci_hcd.0: disconnect device [ 54.873373][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.880615][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.900164][ T3551] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 54.994210][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.018857][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.202753][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.230196][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.248028][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.280310][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.304597][ T4985] loop3: detected capacity change from 0 to 256 [ 55.878912][ T5013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'. [ 55.896082][ T5013] netlink: 92 bytes leftover after parsing attributes in process `syz.4.538'. [ 56.333699][ T5047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.551'. [ 56.351035][ T5047] netlink: 92 bytes leftover after parsing attributes in process `syz.5.551'. [ 57.570977][ T5086] netlink: 'syz.4.571': attribute type 27 has an invalid length. [ 57.618932][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.627192][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.636804][ T5086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.387449][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 59.330230][ T5118] loop0: detected capacity change from 0 to 2048 [ 59.350591][ T5118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.362699][ T5118] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.525098][ T5130] loop2: detected capacity change from 0 to 128 [ 59.570285][ T5131] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.581: bg 0: block 345: padding at end of block bitmap is not set [ 59.620994][ T5131] EXT4-fs (loop0): Remounting filesystem read-only [ 59.660464][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 59.660478][ T28] audit: type=1400 audit(1771614203.428:400): avc: denied { node_bind } for pid=5132 comm="syz.5.598" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 59.692497][ T4437] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 59.716482][ T28] audit: type=1400 audit(1771614203.458:401): avc: denied { setopt } for pid=5132 comm="syz.5.598" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.762221][ T28] audit: type=1400 audit(1771614203.458:402): avc: denied { write } for pid=5132 comm="syz.5.598" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.801445][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.587'. [ 59.821866][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.587'. [ 59.839395][ T5139] loop2: detected capacity change from 0 to 512 [ 59.851568][ T5143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.589'. [ 59.894054][ T28] audit: type=1400 audit(1771614203.658:403): avc: denied { allowed } for pid=5146 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.916454][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.953041][ T5139] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.588: couldn't read orphan inode 26 (err -116) [ 59.964850][ T5139] loop2: lost filesystem error report for type 5 error -116 [ 59.970168][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 59.983910][ C0] EXT4-fs (loop2): initial error at time 1771614203: ext4_orphan_get:1396 [ 59.992462][ C0] EXT4-fs (loop2): last error at time 1771614203: ext4_orphan_get:1396 [ 59.992930][ T5139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.015896][ T5139] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.054246][ T5139] EXT4-fs (loop2): shut down requested (0) [ 60.320408][ T28] audit: type=1400 audit(1771614204.088:404): avc: denied { create } for pid=5164 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.429141][ T28] audit: type=1326 audit(1771614204.188:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91bbc629 code=0x7ffc0000 [ 60.455450][ T28] audit: type=1326 audit(1771614204.188:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91bbc629 code=0x7ffc0000 [ 60.479357][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.488643][ T28] audit: type=1326 audit(1771614204.188:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91bbc629 code=0x7ffc0000 [ 60.520295][ T28] audit: type=1326 audit(1771614204.188:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f91bbc629 code=0x7ffc0000 [ 60.544079][ T28] audit: type=1326 audit(1771614204.188:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f91bbc629 code=0x7ffc0000 [ 60.588275][ T5169] -1: renamed from syzkaller0 [ 60.711021][ T5173] loop3: detected capacity change from 0 to 128 [ 60.904512][ T5179] loop3: detected capacity change from 0 to 2048 [ 60.920704][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 60.940619][ T5179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.952908][ T5179] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.070457][ T5192] netlink: 'syz.0.610': attribute type 4 has an invalid length. [ 61.090676][ T5191] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.606: bg 0: block 345: padding at end of block bitmap is not set [ 61.111895][ T5192] netlink: 'syz.0.610': attribute type 4 has an invalid length. [ 61.132348][ T5191] EXT4-fs (loop3): Remounting filesystem read-only [ 61.142268][ T4422] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 61.302482][ T5199] loop5: detected capacity change from 0 to 512 [ 61.324230][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.342245][ T5199] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.612: couldn't read orphan inode 26 (err -116) [ 61.364253][ T5199] loop5: lost filesystem error report for type 5 error -116 [ 61.364777][ T5199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.401584][ T5199] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.435735][ T5199] EXT4-fs (loop5): shut down requested (0) [ 61.443965][ T5210] loop4: detected capacity change from 0 to 512 [ 61.452496][ T5213] netlink: 'syz.3.614': attribute type 27 has an invalid length. [ 61.460736][ T5210] EXT4-fs: test_dummy_encryption option not supported [ 61.495134][ T5213] bond2: left promiscuous mode [ 61.500412][ T3747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.506740][ T5213] ip6gretap1: left promiscuous mode [ 61.515835][ T5213] bond2: left allmulticast mode [ 61.523930][ T5213] ip6gretap1: left allmulticast mode [ 61.562568][ T5203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.571183][ T5203] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.580843][ T5203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.755953][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.763227][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.829428][ T5227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.839132][ T5227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.897215][ T4414] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.916095][ T4414] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.933492][ T4414] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.952784][ T4414] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.991499][ T5246] loop5: detected capacity change from 0 to 2048 [ 62.002833][ T5246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.015112][ T5246] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.021834][ T5247] hub 3-0:1.0: USB hub found [ 62.030622][ T5247] hub 3-0:1.0: 8 ports detected [ 62.118934][ T5250] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.628: bg 0: block 345: padding at end of block bitmap is not set [ 62.137965][ T5250] EXT4-fs (loop5): Remounting filesystem read-only [ 62.145751][ T40] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5039: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 62.262716][ T3747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.423263][ T5262] netlink: 'syz.5.634': attribute type 27 has an invalid length. [ 62.460481][ T5262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.468622][ T5262] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.491460][ T5262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.588366][ T5269] netlink: 'syz.5.636': attribute type 29 has an invalid length. [ 62.679327][ T5271] netlink: 'syz.5.636': attribute type 29 has an invalid length. [ 62.695032][ T5269] netlink: 'syz.5.636': attribute type 29 has an invalid length. [ 62.731366][ T5273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 62.742841][ T5275] netlink: 'syz.5.637': attribute type 3 has an invalid length. [ 62.750679][ T5275] netlink: 'syz.5.637': attribute type 1 has an invalid length. [ 62.758389][ T5275] netlink: 198116 bytes leftover after parsing attributes in process `syz.5.637'. [ 62.833573][ T5277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.638'. [ 63.270852][ T5276] 8021q: adding VLAN 0 to HW filter on device bond4 [ 63.282116][ T5276] bond3: (slave bond4): Enslaving as an active interface with an up link [ 63.305601][ T5284] loop0: detected capacity change from 0 to 256 [ 63.307788][ T5277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.337202][ T5284] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 63.400196][ T5284] FAT-fs (loop0): Filesystem has been set read-only [ 63.415540][ T5284] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 63.424655][ T5284] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 63.435096][ T5284] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 63.445879][ T5284] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 63.462103][ T5284] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 63.476537][ T5284] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 63.486713][ T5284] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 63.500912][ T5284] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 63.515561][ T5303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.515688][ T5284] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 63.532020][ T5303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.582752][ T5305] loop3: detected capacity change from 0 to 4096 [ 63.602023][ T5305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.659251][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.633849][ T5317] loop4: detected capacity change from 0 to 8192 [ 64.812789][ T5317] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 64.820434][ T5317] FAT-fs (loop4): Filesystem has been set read-only [ 64.829210][ T5320] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 66.187253][ T5353] netlink: 'syz.2.667': attribute type 27 has an invalid length. [ 66.224310][ T5353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.232197][ T5353] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.242974][ T5353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.266749][ T5358] syzkaller0: entered allmulticast mode [ 66.278661][ T5358] syzkaller0: entered promiscuous mode [ 66.285731][ T5358] syzkaller0 (unregistering): left promiscuous mode [ 66.293317][ T5358] syzkaller0 (unregistering): left allmulticast mode [ 66.311182][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 66.333598][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 66.333611][ T28] audit: type=1400 audit(1771614210.098:445): avc: denied { sqpoll } for pid=5365 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.336033][ T5363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.366776][ T5363] bond1: (slave bond2): Enslaving as an active interface with an up link [ 66.388861][ T5363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'. [ 66.406120][ T5363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.117443][ T5385] loop4: detected capacity change from 0 to 256 [ 67.230878][ T28] audit: type=1400 audit(1771614210.998:446): avc: denied { execute } for pid=5390 comm="syz.3.683" path="/151/blkio.bfq.io_wait_time_recursive" dev="tmpfs" ino=810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.519539][ T5401] loop4: detected capacity change from 0 to 512 [ 67.560035][ T5401] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.619895][ T5401] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.685: bg 0: block 4: invalid block bitmap [ 67.634446][ T5401] loop4: lost filesystem error report for type 5 error -117 [ 67.640133][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 67.653877][ C1] EXT4-fs (loop4): initial error at time 1771614211: ext4_validate_block_bitmap:432 [ 67.663277][ C1] EXT4-fs (loop4): last error at time 1771614211: ext4_validate_block_bitmap:432 [ 67.675009][ T5401] EXT4-fs (loop4): 1 truncate cleaned up [ 67.687777][ T28] audit: type=1400 audit(1771614211.448:447): avc: denied { connect } for pid=5406 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.698017][ T5401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.767656][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.877004][ T5414] loop0: detected capacity change from 0 to 512 [ 67.903372][ T5414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.919590][ T5414] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.938815][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.694'. [ 67.948826][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz.5.694'. [ 67.975549][ T5428] netlink: 3 bytes leftover after parsing attributes in process `syz.5.694'. [ 67.986133][ T28] audit: type=1400 audit(1771614211.748:448): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.992191][ T3311] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 68.022802][ T3311] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 68.126825][ T3997] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.184352][ T5450] netlink: 'syz.5.706': attribute type 4 has an invalid length. [ 68.201359][ T5450] netlink: 'syz.5.706': attribute type 4 has an invalid length. [ 68.246690][ T5453] loop3: detected capacity change from 0 to 256 [ 68.394479][ T5469] netlink: 277 bytes leftover after parsing attributes in process `syz.3.712'. [ 68.476908][ T5475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.493355][ T5475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.503701][ T28] audit: type=1400 audit(1771614212.268:449): avc: denied { read } for pid=3037 comm="dhcpcd" name="n25" dev="tmpfs" ino=4218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.534954][ T4437] bridge_slave_1: left allmulticast mode [ 68.542566][ T4437] bridge_slave_1: left promiscuous mode [ 68.548310][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.555877][ T28] audit: type=1400 audit(1771614212.288:450): avc: denied { open } for pid=3037 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=4218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.579205][ T28] audit: type=1400 audit(1771614212.288:451): avc: denied { getattr } for pid=3037 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=4218 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.603331][ T4437] bridge_slave_0: left allmulticast mode [ 68.609086][ T4437] bridge_slave_0: left promiscuous mode [ 68.615150][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.674848][ T28] audit: type=1400 audit(1771614212.438:452): avc: denied { create } for pid=5479 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.709851][ T28] audit: type=1400 audit(1771614212.438:453): avc: denied { write } for pid=5479 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=4222 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.751620][ T28] audit: type=1400 audit(1771614212.438:454): avc: denied { append } for pid=5479 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=4222 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.892592][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.902925][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.912107][ T4437] bond0 (unregistering): Released all slaves [ 68.962895][ T4437] tipc: Disabling bearer [ 68.973678][ T4437] tipc: Left network mode [ 68.987259][ T5461] chnl_net:caif_netlink_parms(): no params data found [ 69.035219][ T4437] hsr_slave_0: left promiscuous mode [ 69.069862][ T4437] hsr_slave_1: left promiscuous mode [ 69.254183][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.728'. [ 69.270086][ T4437] team0 (unregistering): Port device team_slave_1 removed [ 69.289797][ T4437] team0 (unregistering): Port device team_slave_0 removed [ 69.452687][ T5461] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.473445][ T5461] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.492558][ T5461] bridge_slave_0: entered allmulticast mode [ 69.510025][ T5461] bridge_slave_0: entered promiscuous mode [ 69.560591][ T5461] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.577081][ T5461] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.584424][ T5461] bridge_slave_1: entered allmulticast mode [ 69.591086][ T5461] bridge_slave_1: entered promiscuous mode [ 69.619186][ T5461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.642207][ T5461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.663041][ T5575] netlink: 'syz.2.733': attribute type 30 has an invalid length. [ 69.702821][ T5461] team0: Port device team_slave_0 added [ 69.716087][ T5461] team0: Port device team_slave_1 added [ 69.739454][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.750644][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.955277][ T5461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.980704][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.001301][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.027435][ T5461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.057349][ T5461] hsr_slave_0: entered promiscuous mode [ 70.063581][ T5461] hsr_slave_1: entered promiscuous mode [ 70.102908][ T5461] debugfs: 'hsr0' already exists in 'hsr' [ 70.111630][ T5461] Cannot create hsr debugfs directory [ 70.222470][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 70.301735][ T5461] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.315933][ T5461] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.331456][ T5461] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.359873][ T5461] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 70.498212][ T5461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.531280][ T5461] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.557125][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.564226][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.594315][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.601450][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.622591][ T5650] loop3: detected capacity change from 0 to 512 [ 70.648704][ T5650] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.699136][ T5650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.716123][ T5461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.750673][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.866922][ T5461] veth0_vlan: entered promiscuous mode [ 70.874504][ T5461] veth1_vlan: entered promiscuous mode [ 70.889292][ T5461] veth0_macvtap: entered promiscuous mode [ 70.897428][ T5461] veth1_macvtap: entered promiscuous mode [ 70.909123][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.925776][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.936996][ T4437] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.946992][ T4437] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.956123][ T4437] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.967019][ T4437] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.026808][ T5691] loop6: detected capacity change from 0 to 128 [ 71.041722][ T5691] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.054213][ T5691] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.102427][ T5461] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.143067][ T5696] loop6: detected capacity change from 0 to 2048 [ 71.181502][ T3303] Alternate GPT is invalid, using primary GPT. [ 71.187959][ T3303] loop6: p1 p2 p3 [ 71.191810][ T3303] loop6: partition table partially beyond EOD, truncated [ 71.207237][ T5696] Alternate GPT is invalid, using primary GPT. [ 71.213934][ T5696] loop6: p1 p2 p3 [ 71.217972][ T5696] loop6: partition table partially beyond EOD, truncated [ 71.957948][ T5742] netlink: 24 bytes leftover after parsing attributes in process `syz.5.784'. [ 72.215713][ T5762] loop6: detected capacity change from 0 to 512 [ 72.249466][ T5762] EXT4-fs (loop6): 1 truncate cleaned up [ 72.256583][ T5767] netlink: 'syz.5.793': attribute type 1 has an invalid length. [ 72.265224][ T5762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.283487][ T5762] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.790: bg 0: block 465: padding at end of block bitmap is not set [ 72.318730][ T5767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 72.330423][ T5762] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 72.341543][ T5762] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.790: invalid indirect mapped block 234881024 (level 0) [ 72.368999][ T5770] bond3: (slave veth5): Enslaving as an active interface with a down link [ 72.442918][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.460907][ T5767] bond3: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 72.488128][ T5764] loop4: detected capacity change from 0 to 32768 [ 72.538915][ T5764] loop4: p1 p3 < p5 p6 > [ 72.552053][ T5764] loop4: partition table partially beyond EOD, truncated [ 72.664506][ T3294] ================================================================== [ 72.672613][ T3294] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 72.679563][ T3294] [ 72.681869][ T3294] write to 0xffff888103a626bc of 4 bytes by task 3303 on cpu 1: [ 72.689480][ T3294] shmem_mknod+0x143/0x170 [ 72.693895][ T3294] shmem_create+0x34/0x50 [ 72.698214][ T3294] path_openat+0xd75/0x2050 [ 72.702713][ T3294] do_file_open+0x16c/0x290 [ 72.707226][ T3294] do_sys_openat2+0x94/0x130 [ 72.711804][ T3294] __x64_sys_openat+0xf2/0x120 [ 72.716558][ T3294] x64_sys_call+0x1e39/0x3020 [ 72.721239][ T3294] do_syscall_64+0x12c/0x370 [ 72.725830][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.731707][ T3294] [ 72.734016][ T3294] read to 0xffff888103a626bc of 4 bytes by task 3294 on cpu 0: [ 72.741543][ T3294] fill_mg_cmtime+0x5b/0x270 [ 72.746146][ T3294] generic_fillattr+0x24a/0x340 [ 72.750986][ T3294] shmem_getattr+0x181/0x200 [ 72.755579][ T3294] vfs_getattr_nosec+0x146/0x1e0 [ 72.760588][ T3294] vfs_getattr+0x48/0x60 [ 72.764819][ T3294] vfs_statx_path+0x28/0x140 [ 72.769401][ T3294] vfs_statx+0xc4/0x170 [ 72.773632][ T3294] vfs_fstatat+0x118/0x170 [ 72.778054][ T3294] __se_sys_newfstatat+0x55/0x3e0 [ 72.783065][ T3294] __x64_sys_newfstatat+0x55/0x70 [ 72.788074][ T3294] x64_sys_call+0x2c64/0x3020 [ 72.792741][ T3294] do_syscall_64+0x12c/0x370 [ 72.797319][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.803199][ T3294] [ 72.805506][ T3294] value changed: 0x1a329d97 -> 0x1a37db82 [ 72.811227][ T3294] [ 72.813532][ T3294] Reported by Kernel Concurrency Sanitizer on: [ 72.819678][ T3294] CPU: 0 UID: 0 PID: 3294 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 72.828518][ T3294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.838558][ T3294] ================================================================== [ 72.959690][ T5461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.