last executing test programs: 2m9.087790769s ago: executing program 1 (id=57): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={&(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x8}, 0x18) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000100)) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10020) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x6b, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x3f, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2000000}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) 2m8.822745008s ago: executing program 1 (id=58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x5, 0x0, 0x100, 0x4, 0x540200, r1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x3, 0x17, "a9b39ba517c50901"}) write(r3, &(0x7f0000000180)="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", 0x304) r4 = msgget$private(0x0, 0x193) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r4, &(0x7f0000000d80)=ANY=[@ANYBLOB="0200000000000000"], 0x3f9, 0x0) msgsnd(r4, &(0x7f0000000240)=ANY=[], 0x3f9, 0x0) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgrcv(r4, &(0x7f0000000140)={0x0, ""/197}, 0xcd, 0x0, 0x1800) 2m7.588039517s ago: executing program 1 (id=63): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m7.21230733s ago: executing program 1 (id=67): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0xf6, 0xa1d, &(0x7f0000000d00)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$peeksig(0x4209, r0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @private=0xa010102}}}}, 0x0) syz_clone(0x200000, &(0x7f0000000140)="7f1067d4a62738d09b83161a90294583a4211ce975fac7a6506a88a24919aaa31afb669069cade13ea000a173a3bef805288ec48293ca0cb766480261b577028fa5a3feecd8b578a7faf6c0a36c27441d2eae1aaf08d1ff0757b4207ce5b47dae50a9896302f45f9f603b906ecbbeede6617fac29128378e85530569eef3e76264b27a2c4391bbd8f7efa1ddd9570d20902430b98955f7e14ccb3a08120aff275c8c19568d8f", 0xa6, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="3634d6eee70f3a425c042ac8d497a7ea659097df01ca332480100d0ded0de5709eaf9f76cc9096e1b022f89d3c5b63eab32cdb52b23eb46d3022e4310bf79e1d07ce8afeb4e25a4af3e6a376faee15867d5c551502e8fa7f1495513846c773b99bbd04e0a06b3876b447ddc8566e3993e363e07782f914e2e33f28cd5e0b472ef7e56847d16447208b5b21b8d4edbe1c3bdff34caa12112540d24ca93d65b4") syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 2m7.012292786s ago: executing program 1 (id=69): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0), 0x1, 0x437, &(0x7f0000000400)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x2, 0x0) unshare(0x22020600) fcntl$setpipe(r2, 0x408, 0x7) 2m6.837817451s ago: executing program 1 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000010280)={{0x12, 0x1, 0x110, 0xb3, 0x55, 0x61, 0x8, 0x403, 0xc1e0, 0xfd91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x5, 0x40, 0xee, "", [{{0x9, 0x4, 0x3, 0x4, 0x0, 0x5, 0xc7, 0x73, 0x0, [@hid_hid={0x9, 0x21, 0x900, 0x8, 0x1, {0x22, 0xbf2}}]}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 2m6.818781372s ago: executing program 32 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000010280)={{0x12, 0x1, 0x110, 0xb3, 0x55, 0x61, 0x8, 0x403, 0xc1e0, 0xfd91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x5, 0x40, 0xee, "", [{{0x9, 0x4, 0x3, 0x4, 0x0, 0x5, 0xc7, 0x73, 0x0, [@hid_hid={0x9, 0x21, 0x900, 0x8, 0x1, {0x22, 0xbf2}}]}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 3.427889251s ago: executing program 3 (id=924): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) creat(0x0, 0x26) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x408a, &(0x7f0000004200)="$eJzszzFKw3AUBvAvjW2jBIqgkyB2cpO4OXXyCt2lZ3ByUDE3cRLxAN7DOzjqAVyklNgWXQtFfr/hz3vfRwgvbJGny1/RZzdUP1GR5HX2sp/kZJy2aRblTtfvLr9uztPfq3qpk1wvonKwrKfPm7gCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYWsOVubfW3CVp325Ou72aP4P5MztKezvJRZ1Uh6PkoUx/clzkIBmf/fGPMnlPUiT5SDIdbe4cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/uVrbhsnj12pQd8P9N7tzbAMgEMMA0AghsQd7sAUTsQklS4aG7lN9fdclkmWP0efIfW7J+t9V1VYszW9PrnduMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CgAAP//1bsXWQ==") mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0x1}, {0x0, 0xffff}}}, 0x24}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010042, 0x0) 3.422835791s ago: executing program 5 (id=935): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000"], 0x50) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000040)={0x4c, 0x9, 0x7, 0x9, 0x87}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.257525396s ago: executing program 4 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) listen(r2, 0x6f6) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x854}, 0x880) 3.241931417s ago: executing program 5 (id=927): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = getpgid(0xffffffffffffffff) sched_setaffinity(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xf}, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3.167439469s ago: executing program 4 (id=928): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) request_key(0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 3.001629334s ago: executing program 5 (id=930): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@user_xattr}, {@delalloc}, {@nojournal_checksum}, {@nobh}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x3, 0x58d, &(0x7f0000000dc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0x8) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 2.960131176s ago: executing program 0 (id=931): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2}) sendto$packet(r0, &(0x7f0000000240)="09000000e7001400000000803500df8000000088a8000800274e88a800000000", 0x70, 0x4044800, &(0x7f00000000c0)={0x11, 0x88a8, r2, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) 2.661107025s ago: executing program 3 (id=932): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup/pids.max\x00', 0x2, 0x15) write$cgroup_subtree(r4, &(0x7f00000002c0)={[{0x2d, 'blkio'}]}, 0x7) sendmsg$nl_generic(r4, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc8, 0x15, 0x20, 0x70bd2a, 0x25dfdbfe, {0x8}, [@generic="7c8b67bcd699a5030bf6d4c166a67ef0274b4d73ae3b51a5840008583ec9cbd772c2dae36ee4f4bac90df6d938558ef8b50105e5afb80d9136c912aeaa8e7e5f129700317a32030439fb985ac21af7970b3e7051c04c48b2c3011582c4a9cb729e5227f210644679fc8e35467450ff795b22777ec79bb19d375115827ceeca01a6545b3a352eaf0bf1d733b5a0c9ff5b0088bc3e69ee7c6e76bf91ed3590ee48e8c77156e768f16cbc0257aa5f80828768"]}, 0xc8}, 0x1, 0x0, 0x0, 0x40881}, 0x40010) 2.247412138s ago: executing program 0 (id=934): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) stat(&(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000040)=@rnullb, r4, &(0x7f0000000200)={0x0, 0x2, 0x1, 0x0, 0x100000000, 0x1400000000000, 0xbf, 0xd6a9210, 0x5}) write$cgroup_type(r3, 0x0, 0x0) ptrace(0x10, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) ptrace$pokeuser(0x6, r1, 0x358, 0x4) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffc) 2.247239618s ago: executing program 2 (id=936): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[]) r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x0, 0x2000000, 0x0, &(0x7f00000014c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) sync() ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000040)={0xa7a8, 0x10, [{0x1}, {0x7}, {0x9}, {0x2, 0x1}, {0x9}, {0xe, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x9, 0x1}, {0x7, 0x1}, {0xd, 0x1}, {0xd, 0x1}, {0x4, 0x1}, {0xa}]}) bind$inet(0xffffffffffffffff, 0x0, 0x0) 2.19751993s ago: executing program 3 (id=937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4008080) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0) 2.055131885s ago: executing program 0 (id=938): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 2.019541196s ago: executing program 5 (id=939): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(0x0, 0x8480, 0x31) openat2(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000d1000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 2.019369716s ago: executing program 4 (id=940): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000"], 0x50) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000040)={0x4c, 0x9, 0x7, 0x9, 0x87}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.005687036s ago: executing program 2 (id=941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) listen(r2, 0x6f6) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x854}, 0x880) 1.938673158s ago: executing program 2 (id=942): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0xd4}, 0xfffffe07) mq_timedsend(r1, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f0000000200)=""/58) mq_timedreceive(r1, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r2, 0x5602, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000050) socket$nl_netfilter(0x10, 0x3, 0xc) 1.813033062s ago: executing program 3 (id=943): openat$rtc(0xffffffffffffff9c, 0x0, 0x40140, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0xfccc, 0xfe, 0x0, 0x2, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) unshare(0x26020480) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4$unix(r1, &(0x7f0000000080)=@abs, 0x0, 0x80000) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) sendmmsg$inet(r0, &(0x7f0000002f40), 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20008811) 1.715850165s ago: executing program 0 (id=944): openat$sysfs(0xffffffffffffff9c, 0x0, 0x82002, 0x105) io_setup(0x20, &(0x7f0000001140)) io_setup(0x8, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100acef000108000200ac1e00010c000280050001000000000008000740ffff"], 0x64}}, 0x0) 1.715527185s ago: executing program 4 (id=945): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x2000, 0x0, @private1, 0x9}], 0x1c) listen(r1, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x401) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.514226682s ago: executing program 3 (id=946): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x2, 0x1d, 0x21, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.129137004s ago: executing program 2 (id=947): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2}) sendto$packet(r0, &(0x7f0000000240)="09000000e7001400000000803500df8000000088a8000800274e88a800000000", 0x70, 0x4044800, &(0x7f00000000c0)={0x11, 0x88a8, r2, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbf8}, 0x14}, 0x1, 0x2b1e}, 0x2004c000) 944.27459ms ago: executing program 5 (id=948): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$FIONCLEX(r1, 0x5450) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000080), 0x8) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 284.534802ms ago: executing program 2 (id=962): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 115.463097ms ago: executing program 0 (id=952): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[]) r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x0, 0x2000000, 0x0, &(0x7f00000014c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) sync() ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000040)={0xa7a8, 0x10, [{0x1}, {0x7}, {0x9}, {0x2, 0x1}, {0x9}, {0xe, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x9, 0x1}, {0x7, 0x1}, {0xd, 0x1}, {0xd, 0x1}, {0x4, 0x1}, {0xa}]}) bind$inet(0xffffffffffffffff, 0x0, 0x0) 100.940128ms ago: executing program 4 (id=953): unshare(0x2a020480) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = epoll_create(0x6) mlock(&(0x7f00000c8000/0x11000)=nil, 0x11000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x9}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x5c, 0x4, 0x7, 0x7fffffff}, {0x6, 0x6, 0x3, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x80) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000400)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94\xf6w\xb8\xe0\x8d\vA\x15\x81&\xbc\x9b\x86K\xda\x89A\x80\xd4\xf4\xc3\x81$\x97Yx\x83\xaf8\xb3~\xba', 0x3a, '^', 0x3a, './file0', 0x3a, [0x50, 0x4f]}, 0x55) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 4 (id=954): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x7, 0x3}, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x36}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_uring_enter(0xffffffffffffffff, 0x564f, 0x374e, 0x30, &(0x7f0000000180)={[0x1]}, 0x8) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) kernel console output (not intermixed with test programs): 302 comm="syz-executor" name="file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.233417][ T4263] syzkaller0: entered promiscuous mode [ 58.251082][ T4263] syzkaller0: entered allmulticast mode [ 58.371918][ T4275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 58.536570][ T4290] loop4: detected capacity change from 0 to 164 [ 58.560136][ T4290] ISOFS: unable to read i-node block [ 58.582863][ T4290] isofs_fill_super: get root inode failed [ 58.627641][ T4290] ipip0: entered promiscuous mode [ 58.846336][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 58.950081][ T4315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4315 comm=syz.0.208 [ 58.969394][ T4311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.670404][ T4324] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.877154][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 60.025492][ T4349] loop2: detected capacity change from 0 to 1024 [ 60.044449][ T4349] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.088729][ T4349] EXT4-fs error (device loop2): ext4_quota_enable:7225: comm syz.2.219: inode #131072: comm syz.2.219: iget: illegal inode # [ 60.124203][ T4345] loop5: detected capacity change from 0 to 8192 [ 60.167945][ T4324] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.180054][ T4349] loop2: lost filesystem error report for type 5 error -117 [ 60.248845][ T4349] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.219: Bad quota inode: 131072, type: 2 [ 60.267624][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 60.267650][ C1] EXT4-fs (loop2): initial error at time 2000000022: ext4_quota_enable:7225 [ 60.267672][ C1] EXT4-fs (loop2): last error at time 2000000022: ext4_quota_enable:7225 [ 60.320873][ T4349] loop2: lost filesystem error report for type 5 error -117 [ 60.320993][ T4349] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=131072). Please run e2fsck to fix. [ 60.356294][ T4349] EXT4-fs (loop2): mount failed [ 60.427426][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.434695][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.646419][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.700454][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.936132][ T4324] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.980518][ T314] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.012453][ T314] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.039525][ T314] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.062076][ T314] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.148753][ T4373] syzkaller0: entered promiscuous mode [ 61.174509][ T4373] syzkaller0: entered allmulticast mode [ 61.215916][ T4324] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.302641][ T4378] Illegal XDP return value 448305185 on prog (id 55) dev N/A, expect packet loss! [ 61.339239][ T76] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.371349][ T76] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.387591][ T76] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.425762][ T76] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.777605][ T4391] loop3: detected capacity change from 0 to 512 [ 61.798344][ T4391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.827081][ T4391] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.847664][ T4375] loop5: detected capacity change from 0 to 2048 [ 61.887259][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 61.887326][ T28] audit: type=1400 audit(2000000024.210:540): avc: denied { getopt } for pid=4390 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.941044][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.999810][ T28] audit: type=1326 audit(2000000024.330:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 62.002518][ T4375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.081185][ T28] audit: type=1326 audit(2000000024.360:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 62.134025][ T4375] SELinux: Context is not valid (left unmapped). [ 62.179640][ T28] audit: type=1326 audit(2000000024.360:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 62.244450][ T28] audit: type=1326 audit(2000000024.360:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 62.265482][ T4400] netlink: 220 bytes leftover after parsing attributes in process `syz.2.233'. [ 62.310929][ T4400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'. [ 62.321245][ T28] audit: type=1326 audit(2000000024.360:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 62.338101][ T4400] tipc: Started in network mode [ 62.357209][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.377794][ T4400] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 62.401329][ T28] audit: type=1326 audit(2000000024.360:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 62.409758][ T4400] tipc: Enabling of bearer rejected, failed to enable media [ 62.485409][ T28] audit: type=1326 audit(2000000024.360:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 62.564452][ T28] audit: type=1326 audit(2000000024.360:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 62.635487][ T28] audit: type=1326 audit(2000000024.360:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4395 comm="syz.3.231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 62.675404][ T4402] loop0: detected capacity change from 0 to 512 [ 62.729969][ T4402] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 62.742932][ T4410] loop2: detected capacity change from 0 to 128 [ 63.011096][ T4418] netlink: 48 bytes leftover after parsing attributes in process `syz.5.237'. [ 63.079281][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 63.207546][ T4428] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 63.232354][ T4428] bond2: entered promiscuous mode [ 63.237626][ T4428] bond2: entered allmulticast mode [ 63.243300][ T4428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.272751][ T4428] erspan1: entered allmulticast mode [ 63.292449][ T4428] bond2: (slave erspan1): making interface the new active one [ 63.306262][ T4428] erspan1: entered promiscuous mode [ 63.320730][ T4428] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 63.337665][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 63.354196][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 63.373046][ T4433] bond2 (unregistering): (slave erspan1): Releasing active interface [ 63.381925][ T4433] erspan1: left promiscuous mode [ 63.388545][ T4433] bond2 (unregistering): Released all slaves [ 63.502515][ T4435] loop0: detected capacity change from 0 to 1024 [ 63.509568][ T4435] EXT4-fs: Ignoring removed bh option [ 63.528917][ T4435] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 63.560053][ T4435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.579674][ T4435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.589020][ T4435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.162742][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.220478][ T4460] loop5: detected capacity change from 0 to 512 [ 64.257231][ T4460] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.253: iget: bad i_size value: 38620345925642 [ 64.271980][ T4460] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.274676][ T4460] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.253: couldn't read orphan inode 15 (err -117) [ 64.283857][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 64.283877][ C1] EXT4-fs (loop5): initial error at time 2000000026: ext4_orphan_get:1397: inode 15 [ 64.283931][ C1] EXT4-fs (loop5): last error at time 2000000026: ext4_orphan_get:1397: inode 15 [ 64.320750][ T4460] loop5: lost filesystem error report for type 5 error -117 [ 64.321501][ T4460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.366545][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.596087][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.256'. [ 66.661989][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 67.103823][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 67.194914][ T4548] team0: Port device team_slave_0 removed [ 70.624660][ T4630] loop2: detected capacity change from 0 to 164 [ 70.652790][ T4630] ISOFS: unable to read i-node block [ 70.667951][ T4625] loop0: detected capacity change from 0 to 128 [ 70.670249][ T4630] isofs_fill_super: get root inode failed [ 70.686090][ T4630] ipip0: entered promiscuous mode [ 70.793990][ T4636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.303'. [ 70.817287][ T4636] team0: Port device team_slave_0 removed [ 70.842735][ T4625] syz.0.300: attempt to access beyond end of device [ 70.842735][ T4625] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 70.860781][ T4625] syz.0.300: attempt to access beyond end of device [ 70.860781][ T4625] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 70.875299][ T4625] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 70.885521][ T4625] syz.0.300: attempt to access beyond end of device [ 70.885521][ T4625] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 70.901219][ T4625] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 70.926546][ T4625] syz.0.300: attempt to access beyond end of device [ 70.926546][ T4625] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 70.949322][ T4625] syz.0.300: attempt to access beyond end of device [ 70.949322][ T4625] loop0: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 70.964397][ T4625] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 70.975628][ T4625] syz.0.300: attempt to access beyond end of device [ 70.975628][ T4625] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 70.990559][ T4625] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 71.002836][ T4625] syz.0.300: attempt to access beyond end of device [ 71.002836][ T4625] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 71.020058][ T4625] syz.0.300: attempt to access beyond end of device [ 71.020058][ T4625] loop0: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 71.034195][ T4625] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 71.043186][ T4625] syz.0.300: attempt to access beyond end of device [ 71.043186][ T4625] loop0: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 71.056975][ T4625] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 71.069097][ T4625] syz.0.300: attempt to access beyond end of device [ 71.069097][ T4625] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 71.085737][ T4625] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 71.095027][ T4625] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 71.157020][ T4625] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 71.170432][ T4625] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 71.725043][ T4651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.306'. [ 74.117713][ T4687] loop2: detected capacity change from 0 to 128 [ 74.656084][ T4708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 74.944700][ T4726] loop4: detected capacity change from 0 to 512 [ 75.068265][ T4726] __quota_error: 84 callbacks suppressed [ 75.068358][ T4726] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 75.084257][ T4726] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 75.094334][ T4726] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.329: Failed to acquire dquot type 1 [ 75.105608][ T4726] loop4: lost filesystem error report for type 5 error -117 [ 75.107443][ T4726] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 75.114790][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 75.114810][ C1] EXT4-fs (loop4): last error at time 2000000037: ext4_acquire_dquot:7034 [ 75.139951][ T4726] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 75.149912][ T4726] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.329: Failed to acquire dquot type 1 [ 75.161365][ T4726] loop4: lost filesystem error report for type 5 error -117 [ 75.165324][ T4726] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.329: bg 0: block 248: padding at end of block bitmap is not set [ 75.186900][ T4726] loop4: lost filesystem error report for type 5 error -117 [ 75.187721][ T4726] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 75.204031][ T4726] loop4: lost filesystem error report for type 5 error -117 [ 75.205348][ T4726] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 75.222840][ T4726] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 75.232906][ T4726] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.329: Failed to acquire dquot type 1 [ 75.244140][ T4726] loop4: lost filesystem error report for type 5 error -117 [ 75.245748][ T4726] EXT4-fs (loop4): 1 orphan inode deleted [ 75.260599][ T4726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.273294][ T4726] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.343934][ T4727] loop3: detected capacity change from 0 to 8192 [ 75.367479][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.374861][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.413549][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.426106][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.493329][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.511182][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.520066][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.548199][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.574524][ T4735] loop2: detected capacity change from 0 to 512 [ 75.614296][ T4735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.627905][ T4735] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.640711][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.713409][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.911610][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 75.995295][ T4744] team0: Port device team_slave_0 removed [ 76.356852][ T4749] loop2: detected capacity change from 0 to 2048 [ 76.488962][ T4749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.522452][ T28] audit: type=1400 audit(2000000038.850:634): avc: denied { write } for pid=4747 comm="syz.2.341" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.692754][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.485111][ T4793] loop2: detected capacity change from 0 to 512 [ 77.572408][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 77.714626][ T4793] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 77.724802][ T4793] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 77.734972][ T4793] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.352: Failed to acquire dquot type 1 [ 77.746259][ T4793] loop2: lost filesystem error report for type 5 error -117 [ 77.748002][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 77.761842][ C1] EXT4-fs (loop2): last error at time 2000000040: ext4_acquire_dquot:7034 [ 77.810005][ T4797] loop5: detected capacity change from 0 to 512 [ 77.903221][ T4797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.915899][ T4793] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 77.925988][ T4793] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.352: Failed to acquire dquot type 1 [ 77.937333][ T4793] loop2: lost filesystem error report for type 5 error -117 [ 77.939302][ T4793] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.352: bg 0: block 248: padding at end of block bitmap is not set [ 77.943954][ T4797] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.946648][ T4793] loop2: lost filesystem error report for type 5 error -117 [ 77.976328][ T4799] loop0: detected capacity change from 0 to 8192 [ 77.990283][ T4793] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 77.999011][ T4793] loop2: lost filesystem error report for type 5 error -117 [ 77.999387][ T4793] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.352: Failed to acquire dquot type 1 [ 78.017885][ T4793] loop2: lost filesystem error report for type 5 error -117 [ 78.018163][ T4793] EXT4-fs (loop2): 1 orphan inode deleted [ 78.031820][ T4793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.044379][ T4793] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.154182][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.161426][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.227560][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.246327][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.260647][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.308544][ T4803] bond0: left promiscuous mode [ 78.323411][ T4803] bond_slave_0: left promiscuous mode [ 78.329001][ T4803] bond_slave_1: left promiscuous mode [ 78.330012][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.353982][ T314] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.381275][ T314] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.423120][ T314] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.453893][ T314] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.470029][ T314] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.488998][ T314] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.507188][ T4811] syzkaller0: entered promiscuous mode [ 78.516691][ T4811] syzkaller0: entered allmulticast mode [ 78.533151][ T314] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.560333][ T314] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.636061][ T4816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.664546][ T4816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.735729][ T4846] loop0: detected capacity change from 0 to 512 [ 79.766125][ T4846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.805343][ T4846] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.873529][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.959396][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 80.181700][ T4867] syzkaller0: entered promiscuous mode [ 80.204456][ T4867] syzkaller0: entered allmulticast mode [ 81.123126][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.143957][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.220244][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 81.220297][ T28] audit: type=1326 audit(2000000043.550:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.2.381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa541d0ce59 code=0x0 [ 81.822953][ T4901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.388'. [ 82.422899][ T4918] loop3: detected capacity change from 0 to 256 [ 82.758160][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.405'. [ 84.416686][ T4944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.409'. [ 85.730694][ T4931] loop3: detected capacity change from 0 to 2048 [ 86.203290][ T28] audit: type=1400 audit(2000000048.520:637): avc: denied { listen } for pid=4975 comm="syz.5.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.225502][ T4931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.258484][ T28] audit: type=1400 audit(2000000048.530:638): avc: denied { accept } for pid=4975 comm="syz.5.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.328447][ T28] audit: type=1400 audit(2000000048.660:639): avc: denied { write } for pid=4930 comm="syz.3.397" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.346107][ T4965] loop0: detected capacity change from 0 to 256 [ 86.544013][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.604078][ T28] audit: type=1400 audit(2000000048.930:640): avc: denied { read } for pid=4990 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.712260][ T28] audit: type=1400 audit(2000000049.040:641): avc: denied { write } for pid=4990 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.068776][ T5023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.423'. [ 88.350940][ T4991] syz.0.416 (4991) used greatest stack depth: 8664 bytes left [ 89.280407][ T5039] loop4: detected capacity change from 0 to 256 [ 89.535783][ T5036] loop0: detected capacity change from 0 to 2048 [ 89.756443][ T5036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.821290][ T28] audit: type=1400 audit(2000000052.140:642): avc: denied { write } for pid=5034 comm="syz.0.439" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.052536][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.254113][ T28] audit: type=1400 audit(2000000052.580:643): avc: denied { setopt } for pid=5064 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.348457][ T28] audit: type=1400 audit(2000000052.680:644): avc: denied { ioctl } for pid=5064 comm="syz.0.448" path="socket:[12255]" dev="sockfs" ino=12255 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.040684][ T28] audit: type=1400 audit(2000000053.370:645): avc: denied { create } for pid=5088 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.094284][ T28] audit: type=1400 audit(2000000053.370:646): avc: denied { accept } for pid=5088 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.760775][ T5099] loop0: detected capacity change from 0 to 512 [ 92.050919][ T5105] loop5: detected capacity change from 0 to 512 [ 92.068879][ T5105] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.104544][ T5105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.134327][ T5105] EXT4-fs (loop5): 1 truncate cleaned up [ 92.168516][ T5105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.216667][ T28] audit: type=1400 audit(2000000054.540:647): avc: denied { write } for pid=5104 comm="syz.5.462" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.238652][ T5105] EXT4-fs error (device loop5): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.5.462: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 92.297242][ T5105] EXT4-fs (loop5): Remounting filesystem read-only [ 92.307895][ T28] audit: type=1400 audit(2000000054.570:648): avc: denied { write } for pid=5104 comm="syz.5.462" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.328323][ T5105] EXT4-fs warning (device loop5): ext4_rename_delete:3739: inode #2: comm syz.5.462: Deleting old file: nlink 4, error=-117 [ 92.361834][ T28] audit: type=1400 audit(2000000054.570:649): avc: denied { remove_name } for pid=5104 comm="syz.5.462" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.375450][ T5114] netlink: 'syz.5.462': attribute type 1 has an invalid length. [ 92.410077][ T28] audit: type=1400 audit(2000000054.570:650): avc: denied { rename } for pid=5104 comm="syz.5.462" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.448763][ T28] audit: type=1400 audit(2000000054.780:651): avc: denied { mounton } for pid=5104 comm="syz.5.462" path="/60/bus/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.515280][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.383813][ T5145] Cannot find add_set index 1 as target [ 93.396188][ T28] audit: type=1326 audit(2000000055.720:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.3.465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 93.479197][ T28] audit: type=1326 audit(2000000055.750:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.3.465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 93.504572][ T28] audit: type=1326 audit(2000000055.750:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.3.465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 93.534996][ T28] audit: type=1326 audit(2000000055.750:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.3.465" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57dd2ece59 code=0x7ffc0000 [ 93.814672][ T5158] syz.0.466 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.519540][ T28] audit: type=1400 audit(2000000056.840:656): avc: denied { allowed } for pid=5167 comm="syz.5.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.758795][ T5174] syzkaller0: entered promiscuous mode [ 94.780920][ T5174] syzkaller0: entered allmulticast mode [ 96.638657][ T5207] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 96.639640][ T5206] lo: entered allmulticast mode [ 96.655853][ T5207] netlink: 'syz.0.482': attribute type 2 has an invalid length. [ 96.828085][ T5200] loop4: detected capacity change from 0 to 2048 [ 96.867954][ T5200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.081017][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.371177][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 97.371197][ T28] audit: type=1400 audit(2000000059.700:664): avc: denied { setopt } for pid=5222 comm="syz.4.488" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.614018][ T5237] syzkaller0: entered promiscuous mode [ 97.619987][ T5237] syzkaller0: entered allmulticast mode [ 98.606921][ T5246] syzkaller0: entered promiscuous mode [ 98.658878][ T5246] syzkaller0: entered allmulticast mode [ 98.801602][ T28] audit: type=1400 audit(2000000061.130:665): avc: denied { connect } for pid=5250 comm="syz.5.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.961511][ T5258] loop0: detected capacity change from 0 to 512 [ 99.003878][ T5258] EXT4-fs error (device loop0): ext4_quota_enable:7221: comm syz.0.501: Bad quota inum: 2, type: 1 [ 99.026392][ T5258] loop0: lost filesystem error report for type 5 error -117 [ 99.026563][ T5258] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 99.034054][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 99.034078][ C0] EXT4-fs (loop0): initial error at time 2000000061: ext4_quota_enable:7221 [ 99.034103][ C0] EXT4-fs (loop0): last error at time 2000000061: ext4_quota_enable:7221 [ 99.151951][ T5249] loop3: detected capacity change from 0 to 2048 [ 99.209669][ T5258] EXT4-fs (loop0): mount failed [ 99.327306][ T5249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.345058][ T5267] netlink: 'syz.4.503': attribute type 2 has an invalid length. [ 99.375514][ T28] audit: type=1400 audit(2000000061.700:666): avc: denied { write } for pid=5248 comm="syz.3.499" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.625628][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.843835][ T28] audit: type=1400 audit(2000000062.170:667): avc: denied { listen } for pid=5281 comm="syz.5.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 102.222544][ T5316] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 102.560332][ T28] audit: type=1400 audit(2000000064.880:668): avc: denied { write } for pid=5318 comm="syz.4.520" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.841861][ T5320] loop4: detected capacity change from 0 to 512 [ 102.929324][ T5320] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 102.964864][ T5320] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.989827][ T5320] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 103.010229][ T5320] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 103.033995][ T5321] loop2: detected capacity change from 0 to 512 [ 103.107365][ T5321] EXT4-fs: Ignoring removed i_version option [ 103.143314][ T5321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.161310][ T5320] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #16: comm syz.4.520: corrupted xattr block 31: invalid header [ 103.209480][ T5321] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.521: invalid block [ 103.222689][ T5320] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.226819][ T5320] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 103.236308][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 103.236357][ C0] EXT4-fs (loop4): initial error at time 2000000065: ext4_xattr_delete_inode:2972: inode 16 [ 103.236474][ C0] EXT4-fs (loop4): last error at time 2000000065: ext4_xattr_delete_inode:2972: inode 16 [ 103.291074][ T5321] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.298211][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 103.315437][ C0] EXT4-fs (loop2): initial error at time 2000000065: ext4_get_branch:178: inode 11: block 4294967295 [ 103.328557][ C0] EXT4-fs (loop2): last error at time 2000000065: ext4_get_branch:178: inode 11: block 4294967295 [ 103.364793][ T5321] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.521: invalid indirect mapped block 4294967295 (level 1) [ 103.389620][ T5321] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.390409][ T5321] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.521: invalid indirect mapped block 4294967295 (level 1) [ 103.416297][ T5320] EXT4-fs (loop4): 1 orphan inode deleted [ 103.425480][ T5320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.451103][ T5321] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.452334][ T5321] EXT4-fs (loop2): 2 truncates cleaned up [ 103.527791][ T5321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.603999][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.646148][ T28] audit: type=1400 audit(2000000065.970:669): avc: denied { setattr } for pid=5319 comm="syz.2.521" path="/105/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.690195][ T5337] netlink: 'syz.3.524': attribute type 10 has an invalid length. [ 103.692065][ T28] audit: type=1400 audit(2000000066.020:670): avc: denied { write } for pid=5336 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.705974][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.736987][ T28] audit: type=1400 audit(2000000066.070:671): avc: denied { getopt } for pid=5341 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.906447][ T28] audit: type=1400 audit(2000000066.220:672): avc: denied { sqpoll } for pid=5345 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 104.848005][ T28] audit: type=1400 audit(2000000067.170:673): avc: denied { connect } for pid=5359 comm="syz.3.530" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.118680][ T28] audit: type=1400 audit(2000000067.450:674): avc: denied { create } for pid=5365 comm="syz.5.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.329484][ T5369] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.534'. [ 105.340379][ T5369] netlink: zone id is out of range [ 105.346416][ T5369] netlink: zone id is out of range [ 105.740589][ T5369] netlink: del zone limit has 8 unknown bytes [ 105.893036][ T5376] loop3: detected capacity change from 0 to 1024 [ 105.921156][ T5376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 105.946817][ T5376] System zones: 0-1, 3-36 [ 105.991626][ T5376] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.537: bad orphan inode 134217728 [ 106.022921][ T5376] loop3: lost filesystem error report for type 5 error -117 [ 106.024831][ T5376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.078226][ T28] audit: type=1400 audit(2000000068.400:675): avc: denied { write } for pid=5375 comm="syz.3.537" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.129569][ T28] audit: type=1400 audit(2000000068.400:676): avc: denied { write } for pid=5375 comm="syz.3.537" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.209633][ T5383] smc: net device lo applied user defined pnetid SYZ2 [ 106.239554][ T5383] smc: net device lo erased user defined pnetid SYZ2 [ 106.630033][ T5396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 107.535454][ T5393] loop0: detected capacity change from 0 to 2048 [ 107.562145][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.680396][ T5393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.768307][ T28] audit: type=1400 audit(2000000070.040:677): avc: denied { write } for pid=5392 comm="syz.0.543" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.912466][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.417720][ T5410] netlink: 'syz.2.548': attribute type 2 has an invalid length. [ 108.473419][ T5394] SELinux: Context system_u:object_r:klogd_var_run_t:s0 is not valid (left unmapped). [ 108.506226][ T28] audit: type=1326 audit(2000000070.830:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.550" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541d0ce59 code=0x7ffc0000 [ 108.554777][ T28] audit: type=1400 audit(2000000070.830:679): avc: denied { relabelto } for pid=5389 comm="syz.4.542" name="file0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:klogd_var_run_t:s0" [ 108.605623][ T28] audit: type=1400 audit(2000000070.830:680): avc: denied { associate } for pid=5389 comm="syz.4.542" name="file0" dev="tmpfs" ino=581 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:klogd_var_run_t:s0" [ 108.640961][ T5420] batman_adv: batadv0: Adding interface: vlan2 [ 108.653525][ T5420] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.661583][ T28] audit: type=1326 audit(2000000070.830:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.550" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541d0ce59 code=0x7ffc0000 [ 108.739035][ T5422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'. [ 108.759429][ T28] audit: type=1326 audit(2000000070.830:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.550" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541d0ce59 code=0x7ffc0000 [ 108.809548][ T5420] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 108.821713][ T28] audit: type=1326 audit(2000000070.830:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.2.550" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fa541d0ce59 code=0x7ffc0000 [ 108.884066][ T5424] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.890654][ T5424] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 108.898426][ T5424] audit: backlog limit exceeded [ 109.552386][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 109.594980][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 109.632855][ T5436] loop5: detected capacity change from 0 to 8192 [ 109.720198][ T5432] loop0: detected capacity change from 0 to 764 [ 109.755290][ T5436] loop5: detected capacity change from 0 to 512 [ 109.810929][ T5436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.833104][ T5432] Symlink component flag not implemented [ 109.847632][ T5436] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.870294][ T5432] Symlink component flag not implemented (116) [ 109.883494][ T5442] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 110.083341][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.198310][ T5450] netlink: 44 bytes leftover after parsing attributes in process `syz.0.562'. [ 110.234192][ T5458] loop4: detected capacity change from 0 to 512 [ 110.256984][ T5458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.266021][ T5458] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.277066][ T5458] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.284687][ T5458] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.565: Allocating blocks 41-42 which overlap fs metadata [ 110.302063][ T5458] loop4: lost filesystem error report for type 5 error -117 [ 110.302578][ T5458] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.565: Failed to acquire dquot type 0 [ 110.310020][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 110.310040][ C0] EXT4-fs (loop4): initial error at time 2000000072: ext4_mb_mark_diskspace_used:4222 [ 110.310065][ C0] EXT4-fs (loop4): last error at time 2000000072: ext4_mb_mark_diskspace_used:4222 [ 110.351109][ T5458] loop4: lost filesystem error report for type 5 error -117 [ 110.351373][ T5458] EXT4-fs (loop4): 1 truncate cleaned up [ 110.392282][ T5458] EXT4-fs (loop4): pa ffff888100569540: logic 1, phys. 41, len 23 [ 110.400363][ T5458] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 110.471461][ T5458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.496419][ T5465] loop3: detected capacity change from 0 to 512 [ 110.533008][ T5465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.576810][ T5465] EXT4-fs (loop3): 1 orphan inode deleted [ 110.584549][ T5465] EXT4-fs (loop3): 1 truncate cleaned up [ 110.609946][ T5465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.621238][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.693061][ T5471] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 110.909150][ T5468] loop2: detected capacity change from 0 to 512 [ 110.989945][ T5468] EXT4-fs: Ignoring removed bh option [ 111.047862][ T5468] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 111.104289][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.195425][ T5478] syz_tun: entered allmulticast mode [ 111.222248][ T5468] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.568: corrupted in-inode xattr: e_value size too large [ 111.246705][ T5468] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.259530][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 111.279896][ C0] EXT4-fs (loop2): initial error at time 2000000073: ext4_iget_extra_inode:5128: inode 15 [ 111.293891][ C0] EXT4-fs (loop2): last error at time 2000000073: ext4_iget_extra_inode:5128 [ 111.294634][ T5480] loop4: detected capacity change from 0 to 4096 [ 111.294790][ C0] : inode 15 [ 111.324892][ T5468] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.568: couldn't read orphan inode 15 (err -117) [ 111.336192][ T5480] EXT4-fs: inline encryption not supported [ 111.346998][ T5468] loop2: lost filesystem error report for type 5 error -117 [ 111.385372][ T5480] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 111.425192][ T5468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.473260][ T5480] System zones: 0-5 [ 111.488945][ T5480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.533169][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.577305][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.643913][ T5492] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 111.790179][ T5486] netlink: 164 bytes leftover after parsing attributes in process `syz.0.574'. [ 111.841899][ T5452] loop5: detected capacity change from 0 to 1024 [ 111.900138][ T5492] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.001813][ T5452] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.040583][ T5492] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 112.103509][ T5452] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 112.168726][ T5497] bond1: (slave gretap1): making interface the new active one [ 112.192634][ T5452] EXT4-fs (loop5): invalid journal inode [ 112.224371][ T5497] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 112.233738][ T5452] EXT4-fs (loop5): can't get journal size [ 112.251682][ T5452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.271806][ T5498] macvlan2: entered promiscuous mode [ 112.279260][ T5498] macvlan2: entered allmulticast mode [ 112.290097][ T5498] bond1: entered promiscuous mode [ 112.305325][ T5498] gretap1: entered promiscuous mode [ 112.324161][ T5498] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.343967][ T5498] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 112.363178][ T5498] bond1: left promiscuous mode [ 112.369469][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.378622][ T5498] gretap1: left promiscuous mode [ 112.398698][ T5503] smc: net device lo applied user defined pnetid SYZ2 [ 112.411118][ T5503] smc: net device lo erased user defined pnetid SYZ2 [ 112.574215][ T5515] loop0: detected capacity change from 0 to 512 [ 112.616155][ T5515] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.583: inode has both inline data and extents flags [ 112.620386][ T5520] syzkaller0: entered promiscuous mode [ 112.637619][ T5520] syzkaller0: entered allmulticast mode [ 112.645375][ T5515] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.652598][ T5515] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.583: couldn't read orphan inode 15 (err -117) [ 112.652666][ T5515] loop0: lost filesystem error report for type 5 error -117 [ 112.654108][ T5515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.712029][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.870686][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 112.870705][ T28] audit: type=1400 audit(2000000075.190:816): avc: denied { firmware_load } for pid=5516 comm="syz.2.585" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 112.981791][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 113.041574][ T5533] netlink: 'syz.5.590': attribute type 13 has an invalid length. [ 113.073370][ T5533] netlink: 'syz.5.590': attribute type 17 has an invalid length. [ 113.117220][ T5531] loop4: detected capacity change from 0 to 256 [ 113.126332][ T5518] syz.2.585 (5518) used greatest stack depth: 8512 bytes left [ 113.147797][ T5531] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙' [ 113.170523][ T5533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.204445][ T5533] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.242388][ T5533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.284070][ T5531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'. [ 113.298583][ T5533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.306223][ T5531] netlink: 68 bytes leftover after parsing attributes in process `syz.4.589'. [ 113.318789][ T5533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.336564][ T5533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.351298][ T5533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.367727][ T5533] veth1_vlan: left promiscuous mode [ 113.383014][ T5533] veth0_vlan: left promiscuous mode [ 113.391199][ T5533] veth0_vlan: entered promiscuous mode [ 113.404352][ T5533] veth1_vlan: entered promiscuous mode [ 113.418587][ T5533] veth1_macvtap: left promiscuous mode [ 113.426544][ T5533] veth0_macvtap: left promiscuous mode [ 113.432958][ T5533] veth0_macvtap: entered promiscuous mode [ 113.443416][ T5533] veth1_macvtap: entered promiscuous mode [ 113.455320][ T5533] 8021q: adding VLAN 0 to HW filter on device eth0 [ 113.465430][ T5533] 8021q: adding VLAN 0 to HW filter on device eth1 [ 113.475689][ T5533] 8021q: adding VLAN 0 to HW filter on device eth2 [ 113.485957][ T5533] 8021q: adding VLAN 0 to HW filter on device eth3 [ 113.497602][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.504734][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.513765][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.521341][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.552441][ T5545] smc: net device lo applied user defined pnetid SYZ2 [ 113.561499][ T5547] syzkaller0: entered promiscuous mode [ 113.561620][ T5547] syzkaller0: entered allmulticast mode [ 113.566903][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.572771][ T5549] smc: net device lo erased user defined pnetid SYZ2 [ 113.582518][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.604578][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.630891][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.639463][ T5554] tipc: Started in network mode [ 113.644813][ T5554] tipc: Node identity ac14140f, cluster identity 4711 [ 113.653334][ T5554] tipc: New replicast peer: 255.255.255.255 [ 113.668962][ T5554] tipc: Enabled bearer , priority 10 [ 113.889780][ T5569] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.929002][ T5569] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 113.938239][ T5569] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 113.946815][ T5569] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 113.954752][ T5571] syzkaller0: entered promiscuous mode [ 113.976344][ T5571] syzkaller0: entered allmulticast mode [ 114.234370][ T5581] tipc: Enabled bearer , priority 0 [ 114.244678][ T5581] syzkaller0: entered promiscuous mode [ 114.250432][ T5581] syzkaller0: entered allmulticast mode [ 114.309173][ T28] audit: type=1400 audit(2000000076.640:817): avc: denied { setattr } for pid=5576 comm="syz.4.606" name="" dev="pipefs" ino=1615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 114.344839][ T5581] tipc: Resetting bearer [ 114.367250][ T5580] tipc: Resetting bearer [ 114.397708][ T5580] tipc: Disabling bearer [ 114.465059][ T5584] smc: net device lo applied user defined pnetid SYZ2 [ 114.514027][ T5584] smc: net device lo erased user defined pnetid SYZ2 [ 115.239213][ T23] tipc: Node number set to 2886997007 [ 115.311823][ T5591] set_capacity_and_notify: 2 callbacks suppressed [ 115.311841][ T5591] loop2: detected capacity change from 0 to 512 [ 115.329546][ T5594] loop0: detected capacity change from 0 to 128 [ 115.342048][ T5591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.371697][ T5591] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.610: invalid indirect mapped block 4294967295 (level 0) [ 115.418134][ T5591] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 115.418347][ T5591] EXT4-fs (loop2): Remounting filesystem read-only [ 115.434050][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 115.434084][ C1] EXT4-fs (loop2): initial error at time 2000000077: ext4_free_branches:1023: inode 16 [ 115.434118][ C1] EXT4-fs (loop2): last error at time 2000000077: ext4_free_branches:1023: inode 16 [ 115.573890][ T5591] EXT4-fs (loop2): 1 orphan inode deleted [ 115.590736][ T5603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 115.600649][ T5591] EXT4-fs (loop2): 1 truncate cleaned up [ 115.618541][ T5591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.636514][ T5603] bridge2: port 1(dummy0) entered blocking state [ 115.645364][ T5603] bridge2: port 1(dummy0) entered disabled state [ 115.663482][ T5603] dummy0: entered allmulticast mode [ 115.672417][ T5603] dummy0: entered promiscuous mode [ 115.702551][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.767872][ T28] audit: type=1400 audit(2000000078.090:818): avc: denied { write } for pid=5608 comm="syz.2.616" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.827634][ T5607] loop0: detected capacity change from 0 to 2048 [ 115.851343][ T28] audit: type=1400 audit(2000000078.090:819): avc: denied { open } for pid=5608 comm="syz.2.616" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.894047][ T5607] loop0: p1 p2 p3 [ 115.907166][ T5607] loop0: p2 size 458752 extends beyond EOD, truncated [ 115.922696][ T5607] loop0: p3 start 65280 is beyond EOD, truncated [ 115.936641][ T28] audit: type=1400 audit(2000000078.260:820): avc: denied { ioctl } for pid=5611 comm="syz.4.617" path="socket:[15543]" dev="sockfs" ino=15543 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.004755][ T28] audit: type=1400 audit(2000000078.290:821): avc: denied { bind } for pid=5611 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.083415][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 116.085232][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 116.530786][ T5625] loop4: detected capacity change from 0 to 2048 [ 116.547679][ T5625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.606477][ T5625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.647318][ T28] audit: type=1400 audit(2000000078.960:822): avc: denied { write } for pid=5623 comm="syz.4.622" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.913011][ T28] audit: type=1400 audit(2000000079.240:823): avc: denied { accept } for pid=5629 comm="syz.5.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.959722][ T5634] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 116.969455][ T5636] loop3: detected capacity change from 0 to 164 [ 117.006238][ T5634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.076068][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.162268][ T5634] bond2: (slave ip6gretap1): making interface the new active one [ 117.173907][ T5634] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 117.184159][ T5639] smc: net device lo applied user defined pnetid SYZ2 [ 117.192719][ T28] audit: type=1400 audit(2000000079.520:824): avc: denied { connect } for pid=5643 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.212415][ T5642] smc: net device lo erased user defined pnetid SYZ2 [ 117.236166][ T5634] bond2: entered allmulticast mode [ 117.241400][ T5634] ip6gretap1: entered allmulticast mode [ 117.305609][ T5651] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 117.305609][ T5651] The task syz.4.628 (5651) triggered the difference, watch for misbehavior. [ 117.326889][ T5653] loop2: detected capacity change from 0 to 512 [ 117.358456][ T5653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.404334][ T5649] loop0: detected capacity change from 0 to 512 [ 117.451948][ T28] audit: type=1400 audit(2000000079.780:825): avc: denied { write } for pid=5631 comm="syz.2.623" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.582861][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.831271][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 118.831288][ T28] audit: type=1400 audit(2000000081.140:829): avc: denied { bind } for pid=5689 comm="syz.4.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.243221][ T28] audit: type=1400 audit(2000000081.200:830): avc: denied { read } for pid=5689 comm="syz.4.643" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.377663][ T5698] loop2: detected capacity change from 0 to 512 [ 119.392163][ T28] audit: type=1400 audit(2000000081.200:831): avc: denied { ioctl } for pid=5689 comm="syz.4.643" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.435803][ T5696] netlink: 'syz.4.645': attribute type 4 has an invalid length. [ 119.475052][ T5696] netlink: 152 bytes leftover after parsing attributes in process `syz.4.645'. [ 119.693445][ T5680] loop0: detected capacity change from 0 to 1024 [ 119.772484][ T5680] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 119.827919][ T5680] JBD2: no valid journal superblock found [ 119.864549][ T5680] EXT4-fs (loop0): Could not load journal inode [ 120.015043][ T5696] .`: renamed from bond0 (while UP) [ 120.115769][ T28] audit: type=1400 audit(2000000082.440:832): avc: denied { ioctl } for pid=5702 comm="syz.4.648" path="socket:[15679]" dev="sockfs" ino=15679 ioctlcmd=0x5840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.204846][ T5705] tipc: Enabling of bearer rejected, already enabled [ 120.535947][ T5703] loop4: detected capacity change from 0 to 736 [ 120.866086][ T5714] syzkaller0: entered promiscuous mode [ 120.971519][ T5714] syzkaller0: entered allmulticast mode [ 121.342338][ T5701] loop2: detected capacity change from 0 to 2048 [ 121.361174][ T5701] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 121.362804][ T28] audit: type=1400 audit(2000000083.690:833): avc: denied { mounton } for pid=5700 comm="syz.2.647" path="/131/file1" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.403143][ T28] audit: type=1400 audit(2000000083.710:834): avc: denied { getopt } for pid=5727 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.646450][ T5732] netlink: 28 bytes leftover after parsing attributes in process `syz.5.658'. [ 121.803023][ T5732] netlink: 28 bytes leftover after parsing attributes in process `syz.5.658'. [ 122.482790][ T5753] syzkaller0: entered promiscuous mode [ 122.515594][ T5753] syzkaller0: entered allmulticast mode [ 122.528028][ T28] audit: type=1400 audit(2000000084.850:835): avc: denied { map } for pid=5750 comm="syz.2.662" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.552100][ T28] audit: type=1400 audit(2000000084.850:836): avc: denied { read } for pid=5750 comm="syz.2.662" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.759000][ T5757] loop0: detected capacity change from 0 to 1024 [ 122.810394][ T5757] EXT4-fs: inline encryption not supported [ 122.862418][ T5757] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.956864][ T5757] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.664: lblock 2 mapped to illegal pblock 2 (length 1) [ 123.011106][ T5757] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.013455][ T5757] EXT4-fs (loop0): Remounting filesystem read-only [ 123.022890][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 123.023163][ C1] EXT4-fs (loop0): initial error at time 2000000085: ext4_map_blocks:791: inode 3: block 2 [ 123.023310][ C1] EXT4-fs (loop0): last error at time 2000000085: ext4_map_blocks:791: inode 3: block 2 [ 123.136910][ T5757] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 123.151625][ T5757] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 123.161490][ T5757] EXT4-fs (loop0): 1 orphan inode deleted [ 123.173295][ T5757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.245170][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.277942][ T5764] loop3: detected capacity change from 0 to 1024 [ 123.301880][ T5764] EXT4-fs: Ignoring removed orlov option [ 123.327796][ T5764] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 123.349070][ T5764] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 123.367651][ T5764] EXT4-fs (loop3): orphan cleanup on readonly fs [ 123.377223][ T5764] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.666: Invalid inode table block 0 in block_group 0 [ 123.398114][ T5764] loop3: lost filesystem error report for type 5 error -117 [ 123.398448][ T5764] EXT4-fs (loop3): Remounting filesystem read-only [ 123.412398][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 123.412452][ C1] EXT4-fs (loop3): initial error at time 2000000085: __ext4_get_inode_loc:4885 [ 123.412513][ C1] EXT4-fs (loop3): last error at time 2000000085: __ext4_get_inode_loc:4885 [ 123.572057][ T5759] loop2: detected capacity change from 0 to 1024 [ 123.579609][ T5764] EXT4-fs (loop3): 1 truncate cleaned up [ 123.597190][ T5764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.645651][ T5759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 123.683468][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.691733][ T5759] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.896433][ T5774] netlink: 'syz.3.669': attribute type 4 has an invalid length. [ 123.908628][ T5774] netlink: 152 bytes leftover after parsing attributes in process `syz.3.669'. [ 124.001494][ T5774] .`: renamed from bond0 [ 124.380300][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 124.380318][ T28] audit: type=1400 audit(2000000086.700:838): avc: denied { setattr } for pid=5758 comm="syz.2.665" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.463831][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.927336][ T5801] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 124.978685][ T5801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.036805][ T5801] macvlan2: entered promiscuous mode [ 125.060255][ T5801] macvlan2: entered allmulticast mode [ 125.078279][ T5801] bond2: entered allmulticast mode [ 125.095911][ T5801] bond2: entered promiscuous mode [ 125.121421][ T5801] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.151431][ T5801] team0: Port device macvlan2 added [ 125.189611][ T5806] bond2: (slave ip6gretap1): making interface the new active one [ 125.217020][ T5806] ip6gretap1: entered promiscuous mode [ 125.231818][ T5806] ip6gretap1: entered allmulticast mode [ 125.250729][ T5806] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 125.792631][ T28] audit: type=1326 audit(2000000088.120:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.2.678" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fa541d06bd7 code=0x0 [ 127.653030][ T5830] tipc: Enabled bearer , priority 10 [ 127.831388][ T5840] syzkaller0: entered promiscuous mode [ 127.845811][ T5840] syzkaller0: entered allmulticast mode [ 128.049337][ T5846] syz.0.691 uses obsolete (PF_INET,SOCK_PACKET) [ 128.110261][ T5849] loop2: detected capacity change from 0 to 1024 [ 128.129629][ T5849] EXT4-fs: Ignoring removed orlov option [ 128.146970][ T5849] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 128.165056][ T5849] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.174211][ T5849] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.187517][ T5849] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.692: Invalid inode table block 0 in block_group 0 [ 128.205688][ T5849] loop2: lost filesystem error report for type 5 error -117 [ 128.207187][ T5849] EXT4-fs (loop2): Remounting filesystem read-only [ 128.214717][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 128.214770][ C1] EXT4-fs (loop2): initial error at time 2000000090: __ext4_get_inode_loc:4885 [ 128.214855][ C1] EXT4-fs (loop2): last error at time 2000000090: __ext4_get_inode_loc:4885 [ 128.247165][ T5849] Quota error (device loop2): write_blk: dquota write failed [ 128.328242][ T5849] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 128.367414][ T5849] EXT4-fs (loop2): 1 truncate cleaned up [ 128.404163][ T5849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.588979][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.768051][ T23] tipc: Node number set to 4278321153 [ 129.864164][ T5856] loop0: detected capacity change from 0 to 736 [ 130.015419][ T5869] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 130.110679][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.154162][ T5873] macvlan2: entered promiscuous mode [ 130.159530][ T5873] macvlan2: entered allmulticast mode [ 130.165088][ T5873] bond0: entered allmulticast mode [ 130.180878][ T5873] bond0: entered promiscuous mode [ 130.312332][ T5873] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.327523][ T5834] loop5: detected capacity change from 0 to 2048 [ 130.342580][ T5873] team0: Port device macvlan2 added [ 130.370320][ T5834] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 130.440476][ T5869] bond0: (slave ip6gretap1): making interface the new active one [ 130.487890][ T5869] ip6gretap1: entered promiscuous mode [ 130.512353][ T5869] ip6gretap1: entered allmulticast mode [ 130.539011][ T5869] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 131.659203][ T5891] tipc: Enabled bearer , priority 10 [ 132.047855][ T5907] loop4: detected capacity change from 0 to 1024 [ 132.071896][ T5907] EXT4-fs: inline encryption not supported [ 132.092101][ T5907] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.104912][ T5895] loop5: detected capacity change from 0 to 736 [ 132.141892][ T28] audit: type=1400 audit(2000000094.470:840): avc: denied { create } for pid=5908 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 132.187023][ T5907] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.705: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.219417][ T28] audit: type=1400 audit(2000000094.470:841): avc: denied { write } for pid=5908 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 132.256826][ T5907] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 132.258020][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 132.273627][ C0] EXT4-fs (loop4): initial error at time 2000000094: ext4_map_blocks:791: inode 3: block 2 [ 132.283687][ C0] EXT4-fs (loop4): last error at time 2000000094: ext4_map_blocks:791: inode 3: block 2 [ 132.294251][ T5907] EXT4-fs (loop4): Remounting filesystem read-only [ 132.304861][ T5907] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 132.314317][ T5907] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 132.326637][ T5907] EXT4-fs (loop4): 1 orphan inode deleted [ 132.341192][ T5907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.593988][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.771706][ T3377] tipc: Node number set to 1043481263 [ 132.916491][ T5915] loop2: detected capacity change from 0 to 736 [ 133.231776][ T5917] syz.3.707 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 133.242946][ T5917] CPU: 0 UID: 0 PID: 5917 Comm: syz.3.707 Tainted: G W syzkaller #0 PREEMPT(full) [ 133.243014][ T5917] Tainted: [W]=WARN [ 133.243021][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.243034][ T5917] Call Trace: [ 133.243041][ T5917] [ 133.243051][ T5917] __dump_stack+0x1d/0x30 [ 133.243081][ T5917] dump_stack_lvl+0x95/0xd0 [ 133.243107][ T5917] dump_stack+0x15/0x1b [ 133.243135][ T5917] dump_header+0x80/0x240 [ 133.243159][ T5917] oom_kill_process+0x295/0x350 [ 133.243216][ T5917] out_of_memory+0x97d/0xb80 [ 133.243313][ T5917] try_charge_memcg+0x62f/0xa10 [ 133.243346][ T5917] ? radix_tree_lookup+0xfa/0x140 [ 133.243435][ T5917] charge_memcg+0x6d/0x120 [ 133.243466][ T5917] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 133.243499][ T5917] __swap_cache_prepare_and_add+0x69/0x4a0 [ 133.243591][ T5917] ? alloc_pages_mpol+0x217/0x260 [ 133.243622][ T5917] swap_cache_alloc_folio+0xa2/0x120 [ 133.243648][ T5917] swap_cluster_readahead+0x25f/0x3c0 [ 133.243676][ T5917] swapin_readahead+0xde/0x840 [ 133.243706][ T5917] ? rcu_read_unlock_special+0x9f/0x200 [ 133.243757][ T5917] ? __rcu_read_unlock+0x4e/0x70 [ 133.243777][ T5917] ? swap_cache_get_folio+0x1e0/0x1f0 [ 133.243802][ T5917] do_swap_page+0x31e/0x2180 [ 133.243834][ T5917] ? __rcu_read_lock+0x36/0x50 [ 133.243866][ T5917] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 133.243925][ T5917] handle_mm_fault+0xb30/0x2e70 [ 133.243956][ T5917] ? irqentry_exit+0x7d/0x5d0 [ 133.243984][ T5917] ? rcu_read_unlock_special+0x9f/0x200 [ 133.244016][ T5917] do_user_addr_fault+0x62f/0x1050 [ 133.244147][ T5917] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 133.244173][ T5917] ? trace_page_fault_user+0x1f/0xa0 [ 133.244201][ T5917] exc_page_fault+0x62/0xa0 [ 133.244226][ T5917] asm_exc_page_fault+0x26/0x30 [ 133.244247][ T5917] RIP: 0033:0x7f57dd1b559e [ 133.244300][ T5917] Code: e9 27 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 5b ca 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 133.244322][ T5917] RSP: 002b:00007ffea7e4c940 EFLAGS: 00010202 [ 133.244343][ T5917] RAX: 00007f57dd565fa0 RBX: 00007f57dd565fa0 RCX: 0000000000000026 [ 133.244359][ T5917] RDX: 0000000000000001 RSI: 00007f57dd566038 RDI: 0000000000000006 [ 133.244373][ T5917] RBP: 00007f57dd567da0 R08: 0000000000000001 R09: 0000000000000001 [ 133.244426][ T5917] R10: 0000000000000026 R11: 0000000000000246 R12: 0000000000020839 [ 133.244442][ T5917] R13: 00007f57dd56618c R14: 0000000000020594 R15: 00007f57dd566180 [ 133.244464][ T5917] [ 133.244481][ T5917] memory: usage 307200kB, limit 307200kB, failcnt 636 [ 133.518625][ T5917] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 133.526675][ T5917] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 133.534000][ T5917] Memory cgroup stats for /syz3: [ 133.534662][ T5917] cache 0 [ 133.542594][ T5917] rss 0 [ 133.545417][ T5917] shmem 0 [ 133.548416][ T5917] mapped_file 0 [ 133.552065][ T5917] dirty 0 [ 133.555055][ T5917] writeback 28672 [ 133.558726][ T5917] workingset_refault_anon 436 [ 133.563469][ T5917] workingset_refault_file 1007 [ 133.568285][ T5917] swap 172032 [ 133.571681][ T5917] swapcached 18800640 [ 133.575697][ T5917] pgpgin 119014 [ 133.579219][ T5917] pgpgout 119005 [ 133.582784][ T5917] pgfault 101239 [ 133.586395][ T5917] pgmajfault 2154 [ 133.590079][ T5917] inactive_anon 36864 [ 133.594271][ T5917] active_anon 0 [ 133.597893][ T5917] inactive_file 0 [ 133.740728][ T5917] active_file 0 [ 133.744249][ T5917] unevictable 0 [ 133.747775][ T5917] hierarchical_memory_limit 314572800 [ 133.753305][ T5917] hierarchical_memsw_limit 9223372036854771712 [ 133.759510][ T5917] total_cache 0 [ 133.763125][ T5917] total_rss 0 [ 133.766503][ T5917] total_shmem 0 [ 133.770022][ T5917] total_mapped_file 0 [ 133.774050][ T5917] total_dirty 0 [ 133.777519][ T5917] total_writeback 28672 [ 133.781707][ T5917] total_workingset_refault_anon 436 [ 133.786930][ T5917] total_workingset_refault_file 1007 [ 133.792329][ T5917] total_swap 172032 [ 133.796152][ T5917] total_swapcached 18800640 [ 133.800807][ T5917] total_pgpgin 119014 [ 133.804814][ T5917] total_pgpgout 119005 [ 133.808937][ T5917] total_pgfault 101245 [ 133.813257][ T5917] total_pgmajfault 2154 [ 133.817484][ T5917] total_inactive_anon 36864 [ 133.822182][ T5917] total_active_anon 0 [ 133.826224][ T5917] total_inactive_file 0 [ 133.830425][ T5917] total_active_file 0 [ 133.834504][ T5917] total_unevictable 0 [ 133.855619][ T5917] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.707,pid=5917,uid=0 [ 133.870357][ T5917] Memory cgroup out of memory: Killed process 5917 (syz.3.707) total-vm:96348kB, anon-rss:1232kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 134.643910][ T5916] loop5: detected capacity change from 0 to 1024 [ 134.806676][ T5916] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 135.050255][ T5916] JBD2: no valid journal superblock found [ 135.067103][ T5916] EXT4-fs (loop5): Could not load journal inode [ 135.248955][ T5939] loop3: detected capacity change from 0 to 4096 [ 135.291725][ T5939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.403108][ T28] audit: type=1400 audit(2000000097.730:842): avc: denied { write } for pid=5938 comm="syz.3.715" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.441042][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'. [ 135.473804][ T5939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'. [ 135.488549][ T28] audit: type=1400 audit(2000000097.760:843): avc: denied { create } for pid=5938 comm="syz.3.715" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 135.588661][ T28] audit: type=1400 audit(2000000097.760:844): avc: denied { write } for pid=5938 comm="syz.3.715" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.613460][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.628211][ T28] audit: type=1400 audit(2000000097.760:845): avc: denied { rmdir } for pid=5938 comm="syz.3.715" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 135.773444][ T5950] tipc: Started in network mode [ 135.788825][ T5950] tipc: Node identity ac14140f, cluster identity 4711 [ 135.814324][ T5950] tipc: Enabled bearer , priority 10 [ 136.125546][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.722'. [ 136.157263][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.722'. [ 136.302372][ T5956] loop4: detected capacity change from 0 to 1024 [ 136.332009][ T5956] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 136.368131][ T5956] JBD2: no valid journal superblock found [ 136.382967][ T5956] EXT4-fs (loop4): Could not load journal inode [ 136.928292][ T3377] tipc: Node number set to 2886997007 [ 137.055093][ T5985] loop0: detected capacity change from 0 to 1024 [ 137.112166][ T5985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.160155][ T28] audit: type=1400 audit(2000000099.490:846): avc: denied { read } for pid=5984 comm="syz.0.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.198123][ T28] audit: type=1400 audit(2000000099.520:847): avc: denied { write } for pid=5984 comm="syz.0.725" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.245892][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.185437][ T28] audit: type=1400 audit(2000000104.510:848): avc: denied { setopt } for pid=6046 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.409320][ T28] audit: type=1400 audit(2000000104.730:849): avc: denied { write } for pid=6046 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.597767][ T6029] loop4: detected capacity change from 0 to 1024 [ 142.621474][ T6052] syzkaller0: entered promiscuous mode [ 142.642836][ T6029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.647286][ T6052] syzkaller0: entered allmulticast mode [ 142.685640][ T28] audit: type=1400 audit(2000000105.010:850): avc: denied { write } for pid=6026 comm="syz.4.741" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.762322][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.774419][ T6045] loop2: detected capacity change from 0 to 32768 [ 142.809795][ T6045] loop2: p1 p3 < > [ 142.864125][ T28] audit: type=1400 audit(2000000105.190:851): avc: denied { read write } for pid=6062 comm="syz.5.750" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 142.899526][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 142.931635][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.963673][ T28] audit: type=1400 audit(2000000105.190:852): avc: denied { open } for pid=6062 comm="syz.5.750" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.075463][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 143.089098][ T3529] udevd[3529]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 143.153496][ T28] audit: type=1400 audit(2000000105.460:853): avc: denied { write } for pid=6063 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 143.213924][ T28] audit: type=1400 audit(2000000105.540:854): avc: denied { bind } for pid=6070 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.443741][ T6076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6076 comm=syz.3.754 [ 143.734835][ T28] audit: type=1400 audit(2000000105.910:855): avc: denied { getopt } for pid=6070 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.988775][ T6081] loop0: detected capacity change from 0 to 128 [ 144.231272][ T6088] tmpfs: Bad value for 'mpol' [ 144.519886][ T28] audit: type=1400 audit(2000000106.850:856): avc: denied { read } for pid=6087 comm="syz.5.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.613175][ T28] audit: type=1400 audit(2000000106.940:857): avc: denied { mount } for pid=6106 comm=04 name="/" dev="configfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 145.255418][ T6136] loop3: detected capacity change from 0 to 128 [ 145.267868][ T6136] msdos: Bad value for 'gid' [ 145.273750][ T6136] msdos: Bad value for 'gid' [ 145.792776][ T6162] loop2: detected capacity change from 0 to 512 [ 145.794092][ T6162] EXT4-fs: Ignoring removed bh option [ 145.794183][ T6162] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.805985][ T6162] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 145.807940][ T6162] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 145.817009][ T6162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 145.817748][ T6162] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.778: Failed to acquire dquot type 1 [ 145.817775][ T6162] loop2: lost filesystem error report for type 5 error -5 [ 145.822387][ T6162] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.778: Invalid block bitmap block 0 in block_group 0 [ 145.822461][ T6162] loop2: lost filesystem error report for type 5 error -117 [ 145.824111][ T6162] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.778: Invalid block bitmap block 0 in block_group 0 [ 145.824214][ T6162] loop2: lost filesystem error report for type 5 error -117 [ 145.827981][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 145.828002][ C1] EXT4-fs (loop2): last error at time 2000000108: ext4_read_block_bitmap_nowait:483 [ 145.834133][ T6162] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.778: Invalid block bitmap block 0 in block_group 0 [ 145.834166][ T6162] loop2: lost filesystem error report for type 5 error -117 [ 145.834356][ T6162] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.778: Failed to acquire dquot type 1 [ 145.834406][ T6162] loop2: lost filesystem error report for type 5 error -28 [ 145.834730][ T6162] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.778: Failed to acquire dquot type 1 [ 145.834756][ T6162] loop2: lost filesystem error report for type 5 error -28 [ 145.836582][ T6162] EXT4-fs (loop2): 1 orphan inode deleted [ 145.842144][ T6162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.872270][ T6154] loop3: detected capacity change from 0 to 512 [ 145.878938][ T6154] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 146.146189][ T6138] loop5: detected capacity change from 0 to 512 [ 146.235990][ T6138] EXT4-fs: Ignoring removed bh option [ 146.302895][ T6138] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 146.328057][ T6138] EXT4-fs (loop5): 1 truncate cleaned up [ 146.447205][ T6138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.479881][ T6178] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.784'. [ 146.546569][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 146.577250][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.656131][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 146.691160][ T6183] veth1_macvtap: left promiscuous mode [ 146.806623][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.356245][ T6204] loop3: detected capacity change from 0 to 512 [ 147.543238][ T6204] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.649644][ T6204] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.741836][ T6204] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.878283][ T6204] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 147.895354][ T6204] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #16: comm syz.3.794: corrupted xattr block 31: invalid header [ 147.928442][ T6204] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.931848][ T6204] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 147.941353][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 147.941420][ C1] EXT4-fs (loop3): initial error at time 2000000110: ext4_xattr_delete_inode:2972: inode 16 [ 147.941584][ C1] EXT4-fs (loop3): last error at time 2000000110: ext4_xattr_delete_inode:2972: inode 16 [ 147.996369][ T6195] loop4: detected capacity change from 0 to 32768 [ 148.004806][ T6204] EXT4-fs (loop3): 1 orphan inode deleted [ 148.034765][ T6204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.132123][ T6195] loop4: p1 p3 < > [ 148.197940][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.486445][ T6224] loop0: detected capacity change from 0 to 764 [ 148.686728][ T6236] loop5: detected capacity change from 0 to 128 [ 148.711269][ T6236] msdos: Bad value for 'gid' [ 148.737663][ T6236] msdos: Bad value for 'gid' [ 149.029192][ T6246] netlink: 11910 bytes leftover after parsing attributes in process `syz.2.807'. [ 149.112284][ T6248] loop2: detected capacity change from 0 to 1024 [ 149.126795][ T6248] EXT4-fs: Ignoring removed nobh option [ 149.147902][ T6248] EXT4-fs: Ignoring removed i_version option [ 149.180993][ T6248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.209668][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 149.209686][ T28] audit: type=1400 audit(2000000111.540:868): avc: denied { write } for pid=6247 comm="syz.2.808" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.237818][ T28] audit: type=1400 audit(2000000111.560:869): avc: denied { create } for pid=6247 comm="syz.2.808" name="cpuacct.usage_percpu_user" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 149.265794][ T28] audit: type=1400 audit(2000000111.590:870): avc: denied { read append open } for pid=6247 comm="syz.2.808" path="/163/file1/cpuacct.usage_percpu_user" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 149.387012][ T28] audit: type=1400 audit(2000000111.710:871): avc: denied { map } for pid=6247 comm="syz.2.808" path="/163/file1/cpuacct.usage_percpu_user" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 149.419504][ T6248] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 149.439785][ T28] audit: type=1400 audit(2000000111.710:872): avc: denied { write } for pid=6247 comm="syz.2.808" path="/163/file1/cpuacct.usage_percpu_user" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 149.468346][ T6248] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 708 with error 28 [ 149.488012][ T6248] EXT4-fs (loop2): This should not happen!! Data will be lost [ 149.488012][ T6248] [ 149.509612][ T6248] EXT4-fs (loop2): Total free blocks count 0 [ 149.528758][ T6248] EXT4-fs (loop2): Free/Dirty block details [ 149.538837][ T6248] EXT4-fs (loop2): free_blocks=20480 [ 149.550763][ T6248] EXT4-fs (loop2): dirty_blocks=720 [ 149.560575][ T6248] EXT4-fs (loop2): Block reservation details [ 149.576918][ T6248] EXT4-fs (loop2): i_reserved_data_blocks=45 [ 150.913764][ T314] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 708 with error 28 [ 150.950428][ T3302] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 151.155781][ T6270] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.815'. [ 151.383784][ T6275] ip6erspan0: entered allmulticast mode [ 151.603203][ T6254] loop5: detected capacity change from 0 to 1024 [ 151.833644][ T6285] loop3: detected capacity change from 0 to 2048 [ 151.907415][ T6285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.547127][ T6254] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 152.579099][ T28] audit: type=1326 audit(2000000114.900:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.2.821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541d0ce59 code=0x7ffc0000 [ 152.677604][ T6254] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 152.740544][ T28] audit: type=1326 audit(2000000114.900:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.2.821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541d0ce59 code=0x7ffc0000 [ 152.828420][ T6254] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.809: Failed to acquire dquot type 0 [ 152.866919][ T6307] capability: warning: `syz.2.825' uses deprecated v2 capabilities in a way that may be insecure [ 152.911058][ T28] audit: type=1326 audit(2000000114.900:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6298 comm="syz.2.821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa541d0ce59 code=0x7ffc0000 [ 152.983356][ T6254] loop5: lost filesystem error report for type 5 error -117 [ 152.987981][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 153.001770][ C0] EXT4-fs (loop5): initial error at time 2000000115: ext4_acquire_dquot:7034 [ 153.010577][ C0] EXT4-fs (loop5): last error at time 2000000115: ext4_acquire_dquot:7034 [ 153.036489][ T6254] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 153.134788][ T6313] loop0: detected capacity change from 0 to 1024 [ 153.148354][ T6254] EXT4-fs (loop5): 1 truncate cleaned up [ 153.206764][ T6313] EXT4-fs: Ignoring removed orlov option [ 153.253526][ T6254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.324757][ T6313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.350236][ T6315] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 153.409749][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.458788][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.520842][ T6323] tipc: Can't bind to reserved service type 0 [ 153.594203][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.700501][ T6330] 9p: Could not find request transport: ft [ 153.713215][ T6326] loop3: detected capacity change from 0 to 164 [ 153.834889][ T6326] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 153.915847][ T6326] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 153.966653][ T6326] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 154.023253][ T6349] netlink: 'syz.0.840': attribute type 4 has an invalid length. [ 154.038624][ T6349] netlink: 'syz.0.840': attribute type 4 has an invalid length. [ 154.102690][ T6355] netlink: 14 bytes leftover after parsing attributes in process `syz.3.841'. [ 154.141572][ T6355] dummy0 (unregistering): left allmulticast mode [ 154.162528][ T6355] dummy0 (unregistering): left promiscuous mode [ 154.187512][ T6355] bridge2: port 1(dummy0) entered disabled state [ 154.234869][ T6360] loop0: detected capacity change from 0 to 256 [ 154.838054][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 154.849697][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 154.899950][ T6373] sg_write: data in/out 48/10 bytes for SCSI command 0x5d-- guessing data in; [ 154.899950][ T6373] program syz.0.848 not setting count and/or reply_len properly [ 155.454324][ T6390] loop3: detected capacity change from 0 to 256 [ 155.463238][ T6390] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.537502][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 155.537520][ T28] audit: type=1400 audit(2000000117.860:942): avc: denied { setopt } for pid=6387 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.570881][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.853'. [ 155.585390][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.853'. [ 155.617569][ T6394] netlink: 'syz.2.855': attribute type 17 has an invalid length. [ 155.792694][ T6397] syzkaller0: entered promiscuous mode [ 155.799222][ T6397] syzkaller0: entered allmulticast mode [ 155.983954][ T28] audit: type=1400 audit(2000000118.280:943): avc: denied { relabelfrom } for pid=6405 comm="syz.4.860" name="NETLINK" dev="sockfs" ino=18022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.030637][ T28] audit: type=1400 audit(2000000118.350:944): avc: denied { relabelto } for pid=6405 comm="syz.4.860" name="NETLINK" dev="sockfs" ino=18022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 156.078325][ T6409] loop5: detected capacity change from 0 to 512 [ 156.104040][ T6409] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.871: Bad quota inum: 2, type: 1 [ 156.140030][ T6409] loop5: lost filesystem error report for type 5 error -117 [ 156.147993][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 156.161827][ C0] EXT4-fs (loop5): initial error at time 2000000118: ext4_quota_enable:7221 [ 156.166577][ T6422] loop0: detected capacity change from 0 to 256 [ 156.170586][ C0] EXT4-fs (loop5): last error at time 2000000118: ext4_quota_enable:7221 [ 156.184268][ T28] audit: type=1400 audit(2000000118.510:945): avc: denied { listen } for pid=6412 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.190691][ T6409] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 156.345061][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 156.393230][ T6422] bridge_slave_1: left allmulticast mode [ 156.420709][ T6409] EXT4-fs (loop5): mount failed [ 156.431260][ T6422] bridge_slave_1: left promiscuous mode [ 156.448775][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.477035][ T6422] bridge_slave_0: left allmulticast mode [ 156.483171][ T6422] bridge_slave_0: left promiscuous mode [ 156.490561][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.855176][ T6432] loop0: detected capacity change from 0 to 512 [ 157.188953][ T6432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.353045][ T6432] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.421695][ T6442] loop5: detected capacity change from 0 to 512 [ 157.512992][ T6442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.787724][ T6442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.809212][ T28] audit: type=1400 audit(2000000120.130:946): avc: denied { ioctl } for pid=6443 comm="syz.3.873" path="socket:[17138]" dev="sockfs" ino=17138 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.847919][ T6442] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.913653][ T6442] EXT4-fs (loop5): failed to initialize system zone (-117) [ 157.934249][ T6442] EXT4-fs (loop5): mount failed [ 158.023407][ T6452] loop4: detected capacity change from 0 to 1024 [ 158.089173][ T6452] EXT4-fs: Ignoring removed bh option [ 158.177331][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.202888][ T6452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.320331][ T28] audit: type=1400 audit(2000000120.640:947): avc: denied { write } for pid=6448 comm="syz.4.875" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.389943][ T6462] syzkaller0: entered promiscuous mode [ 158.420463][ T6462] syzkaller0: entered allmulticast mode [ 158.447865][ T28] audit: type=1400 audit(2000000120.770:948): avc: denied { read write } for pid=6448 comm="syz.4.875" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.488728][ T6464] loop3: detected capacity change from 0 to 4096 [ 158.512792][ T6464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.539820][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.564740][ T6464] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 158.582462][ T28] audit: type=1400 audit(2000000120.770:949): avc: denied { open } for pid=6448 comm="syz.4.875" path="/168/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.633687][ T6464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.693246][ T28] audit: type=1400 audit(2000000121.020:950): avc: denied { write } for pid=6463 comm="syz.3.878" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.720666][ T28] audit: type=1400 audit(2000000121.020:951): avc: denied { map } for pid=6463 comm="syz.3.878" path="/179/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.754947][ T6475] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.881'. [ 158.767359][ T6475] netlink: zone id is out of range [ 158.774629][ T6475] netlink: zone id is out of range [ 158.785575][ T6475] netlink: del zone limit has 8 unknown bytes [ 158.895460][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.865140][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.872400][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.959358][ T6519] loop5: detected capacity change from 0 to 1024 [ 161.000495][ T6519] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 161.029561][ T6519] System zones: 0-1, 3-36 [ 161.034269][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.053373][ T6519] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.892: bad orphan inode 134217728 [ 161.073441][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.090244][ T6519] loop5: lost filesystem error report for type 5 error -117 [ 161.090913][ T6519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.170764][ T6511] bond2: left allmulticast mode [ 161.176110][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 161.176128][ T28] audit: type=1400 audit(2000000123.500:954): avc: denied { write } for pid=6518 comm="syz.5.892" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.206737][ T6511] ip6gretap1: left allmulticast mode [ 161.212667][ T6511] bond2: left promiscuous mode [ 161.217646][ T6511] ip6gretap1: left promiscuous mode [ 161.224909][ T5587] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.237274][ T5587] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.269975][ T5587] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.300446][ T5587] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.413973][ T6530] team0 (unregistering): Port device team_slave_1 removed [ 161.463668][ T6530] team0 (unregistering): Port device vxlan0 removed [ 161.979485][ T6537] loop4: detected capacity change from 0 to 764 [ 162.112223][ T6537] Symlink component flag not implemented [ 162.130087][ T6537] Symlink component flag not implemented (116) [ 162.429405][ T6545] loop2: detected capacity change from 0 to 8192 [ 162.490864][ T6545] loop2: detected capacity change from 0 to 512 [ 162.520416][ T6545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.558098][ T6545] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.573263][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.601049][ T28] audit: type=1400 audit(2000000124.920:955): avc: denied { write } for pid=6544 comm="syz.2.903" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.747244][ T6550] netlink: 44 bytes leftover after parsing attributes in process `syz.5.904'. [ 163.198621][ T6561] loop3: detected capacity change from 0 to 512 [ 163.237102][ T6561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.258306][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.287018][ T6561] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.321360][ T6561] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.338692][ T6561] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.907: Allocating blocks 41-42 which overlap fs metadata [ 163.366102][ T6561] loop3: lost filesystem error report for type 5 error -117 [ 163.366340][ T6561] Quota error (device loop3): write_blk: dquota write failed [ 163.373710][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 163.373755][ C1] EXT4-fs (loop3): initial error at time 2000000125: ext4_mb_mark_diskspace_used:4222 [ 163.373784][ C1] EXT4-fs (loop3): last error at time 2000000125: ext4_mb_mark_diskspace_used:4222 [ 163.490165][ T6570] loop5: detected capacity change from 0 to 4096 [ 163.500884][ T6561] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 163.519288][ T6570] EXT4-fs: inline encryption not supported [ 163.548199][ T6561] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.907: Failed to acquire dquot type 0 [ 163.569004][ T6570] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 163.592652][ T6570] System zones: 0-5 [ 163.598282][ T6561] loop3: lost filesystem error report for type 5 error -117 [ 163.598447][ T6561] EXT4-fs (loop3): 1 truncate cleaned up [ 163.617640][ T6566] loop4: detected capacity change from 0 to 512 [ 163.625407][ T6570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.651623][ T6566] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.667764][ T6561] EXT4-fs (loop3): pa ffff8881080f62a0: logic 1, phys. 41, len 23 [ 163.675691][ T6561] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 163.686402][ T28] audit: type=1400 audit(2000000126.000:956): avc: denied { write } for pid=6569 comm="syz.5.912" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.689347][ T6561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.735591][ T6566] EXT4-fs (loop4): 1 orphan inode deleted [ 163.769977][ T6566] EXT4-fs (loop4): 1 truncate cleaned up [ 163.777791][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.799135][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.810669][ T6566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.832543][ T28] audit: type=1400 audit(2000000126.160:957): avc: denied { write } for pid=6565 comm="syz.4.911" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.873034][ T28] audit: type=1400 audit(2000000126.200:958): avc: denied { mounton } for pid=6565 comm="syz.4.911" path="/175/file0/bus" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 163.938056][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.939131][ T28] audit: type=1400 audit(2000000126.260:959): avc: denied { write } for pid=3296 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.998123][ T28] audit: type=1400 audit(2000000126.260:960): avc: denied { unlink } for pid=3296 comm="syz-executor" name="bus" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 164.098961][ T6590] loop4: detected capacity change from 0 to 512 [ 164.106846][ T6590] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.151727][ T6590] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 164.161154][ T6590] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 164.169475][ T6590] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 164.261869][ T6595] netlink: 'syz.4.919': attribute type 13 has an invalid length. [ 164.262180][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.277034][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.309731][ T6595] netlink: 'syz.4.919': attribute type 17 has an invalid length. [ 164.439566][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.454449][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.507789][ T6594] bond0: left allmulticast mode [ 164.513862][ T6594] ip6gretap1: left allmulticast mode [ 164.519571][ T6594] bond0: left promiscuous mode [ 164.524622][ T6594] ip6gretap1: left promiscuous mode [ 164.627763][ T6595] 8021q: adding VLAN 0 to HW filter on device .` [ 164.655849][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'. [ 164.675720][ T6595] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.732911][ T6595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.809186][ T6612] loop5: detected capacity change from 0 to 256 [ 164.816708][ T6595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.836916][ T6612] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙' [ 164.837648][ T6595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.863469][ T6595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.875725][ T6595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.903412][ T6595] veth1_vlan: left promiscuous mode [ 164.910193][ T6595] veth0_vlan: left promiscuous mode [ 164.919278][ T6595] veth0_vlan: entered promiscuous mode [ 164.931494][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.920'. [ 164.932466][ T6595] veth1_vlan: entered promiscuous mode [ 164.951057][ T6612] netlink: 68 bytes leftover after parsing attributes in process `syz.5.920'. [ 164.967926][ T6595] veth1_macvtap: left promiscuous mode [ 164.986582][ T6595] veth0_macvtap: left promiscuous mode [ 164.996732][ T6595] veth0_macvtap: entered promiscuous mode [ 165.009534][ T6595] veth1_macvtap: entered promiscuous mode [ 165.019223][ T6595] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 165.026615][ T6595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.038392][ T6595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.046175][ T6622] netlink: 14 bytes leftover after parsing attributes in process `syz.0.933'. [ 165.062191][ T6595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.117167][ T6595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.128413][ T6595] xfrm1: left promiscuous mode [ 165.133279][ T6595] xfrm1: left allmulticast mode [ 165.140985][ T6595] veth3: left allmulticast mode [ 165.146701][ T6595] ipip0: left promiscuous mode [ 165.156196][ T6595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.169686][ T6595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.178224][ T6595] bond0: entered allmulticast mode [ 165.183620][ T6595] ip6gretap1: entered allmulticast mode [ 165.189795][ T6595] bond0: entered promiscuous mode [ 165.198986][ T6595] ip6gretap1: entered promiscuous mode [ 165.208923][ T6595] macvlan2: left promiscuous mode [ 165.217095][ T6595] bond0: left promiscuous mode [ 165.222188][ T6595] ip6gretap1: left promiscuous mode [ 165.227677][ T6595] macvlan2: left allmulticast mode [ 165.228680][ T6630] loop5: detected capacity change from 0 to 4096 [ 165.232942][ T6595] bond0: left allmulticast mode [ 165.240738][ T6630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.244258][ T6595] ip6gretap1: left allmulticast mode [ 165.257793][ T6632] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6632 comm=syz.2.925 [ 165.271377][ T6630] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 165.276723][ T6595] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.290772][ T6595] ip6gretap1: entered promiscuous mode [ 165.291002][ T6630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.311350][ T6595] ip6erspan0: left allmulticast mode [ 165.323584][ T28] audit: type=1400 audit(2000000127.650:961): avc: denied { write } for pid=6629 comm="syz.5.935" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.365420][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.372617][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.392186][ T3737] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.411508][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.418650][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.493635][ T6641] loop4: detected capacity change from 0 to 128 [ 165.607540][ T6633] loop3: detected capacity change from 0 to 32768 [ 165.632187][ T6646] loop5: detected capacity change from 0 to 1024 [ 165.671380][ T6646] EXT4-fs: Ignoring removed nobh option [ 165.678805][ T6633] loop3: p1 p3 < > [ 165.693854][ T6646] EXT4-fs: Ignoring removed i_version option [ 165.731794][ T6646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.869415][ T789] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 165.897554][ T6655] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 165.913982][ T6649] loop0: detected capacity change from 0 to 512 [ 165.918272][ T6655] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1012 with error 28 [ 165.945506][ T6649] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 165.959072][ T6649] EXT4-fs (loop0): orphan cleanup on readonly fs [ 165.964737][ T6655] EXT4-fs (loop5): This should not happen!! Data will be lost [ 165.964737][ T6655] [ 165.983480][ T6655] EXT4-fs (loop5): Total free blocks count 0 [ 165.990972][ T6655] EXT4-fs (loop5): Free/Dirty block details [ 165.997120][ T6655] EXT4-fs (loop5): free_blocks=20480 [ 166.002652][ T6655] EXT4-fs (loop5): dirty_blocks=1024 [ 166.009023][ T6655] EXT4-fs (loop5): Block reservation details [ 166.015178][ T6655] EXT4-fs (loop5): i_reserved_data_blocks=64 [ 166.025293][ T6649] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 166.061897][ T6649] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 166.078977][ T6649] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #16: comm syz.0.931: corrupted xattr block 31: invalid header [ 166.106031][ T6649] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 166.106753][ T6649] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 166.116333][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 166.116402][ C0] EXT4-fs (loop0): initial error at time 2000000128: ext4_xattr_delete_inode:2972: inode 16 [ 166.116582][ C0] EXT4-fs (loop0): last error at time 2000000128: ext4_xattr_delete_inode:2972: inode 16 [ 166.167764][ T6649] EXT4-fs (loop0): 1 orphan inode deleted [ 166.175125][ T6660] loop3: detected capacity change from 0 to 1024 [ 166.209742][ T6649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.223733][ T6660] EXT4-fs: Ignoring removed orlov option [ 166.241179][ T6660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.274720][ T38] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1012 with error 28 [ 166.317036][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 166.317056][ T28] audit: type=1400 audit(2000000128.640:963): avc: denied { write } for pid=6659 comm="syz.3.932" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.347710][ T28] audit: type=1400 audit(2000000128.640:964): avc: denied { write } for pid=6659 comm="syz.3.932" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.382981][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.441295][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.607810][ T3737] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 166.648961][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 166.669537][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 166.669682][ T6675] loop4: detected capacity change from 0 to 4096 [ 166.691470][ T6675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.701014][ T6675] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 166.724602][ T6675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.782311][ T28] audit: type=1400 audit(2000000129.070:965): avc: denied { write } for pid=6674 comm="syz.4.940" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.881237][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.288585][ T6693] syzkaller0: entered promiscuous mode [ 167.307528][ T6693] syzkaller0: entered allmulticast mode [ 167.748315][ T6704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6704 comm=syz.4.945 [ 167.835172][ T6703] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 167.855622][ T6699] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 167.866570][ T28] audit: type=1326 audit(2000000130.200:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6702 comm="syz.5.948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4a38ce59 code=0x7ffc0000 [ 167.873849][ T6699] EXT4-fs (loop2): orphan cleanup on readonly fs [ 167.909852][ T6703] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 167.910904][ T28] audit: type=1326 audit(2000000130.230:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6702 comm="syz.5.948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa4a38ce59 code=0x7ffc0000 [ 167.932059][ T6699] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 167.944594][ T28] audit: type=1326 audit(2000000130.230:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6702 comm="syz.5.948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4a38ce59 code=0x7ffc0000 [ 167.944671][ T28] audit: type=1326 audit(2000000130.230:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6702 comm="syz.5.948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4a38ce59 code=0x7ffc0000 [ 167.971968][ T6703] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 167.984834][ T28] audit: type=1326 audit(2000000130.240:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6702 comm="syz.5.948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7ffa4a38ce59 code=0x7ffc0000 [ 168.016677][ T6699] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 168.055488][ T6699] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #16: comm syz.2.947: corrupted xattr block 31: invalid header [ 168.070978][ T6699] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.071623][ T6699] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 168.080991][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 168.081055][ C1] EXT4-fs (loop2): initial error at time 2000000130: ext4_xattr_delete_inode:2972: inode 16 [ 168.081188][ C1] EXT4-fs (loop2): last error at time 2000000130: ext4_xattr_delete_inode:2972: inode 16 [ 168.118512][ T28] audit: type=1326 audit(2000000130.350:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6702 comm="syz.5.948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4a38ce59 code=0x7ffc0000 [ 168.144144][ T28] audit: type=1326 audit(2000000130.410:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6702 comm="syz.5.948" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4a38ce59 code=0x7ffc0000 [ 168.144518][ T6699] EXT4-fs (loop2): 1 orphan inode deleted [ 168.178983][ T6699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.295195][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.362379][ T6713] EXT4-fs: Ignoring removed nobh option [ 168.370343][ T6713] EXT4-fs: Ignoring removed i_version option [ 168.419823][ T6713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.558032][ T6718] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 168.598984][ T6718] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1164 with error 28 [ 168.634327][ T6718] EXT4-fs (loop3): This should not happen!! Data will be lost [ 168.634327][ T6718] [ 168.644768][ T6718] EXT4-fs (loop3): Total free blocks count 0 [ 168.651321][ T6718] EXT4-fs (loop3): Free/Dirty block details [ 168.657483][ T6718] EXT4-fs (loop3): free_blocks=20480 [ 168.663065][ T6718] EXT4-fs (loop3): dirty_blocks=1168 [ 168.668836][ T6718] EXT4-fs (loop3): Block reservation details [ 168.674917][ T6718] EXT4-fs (loop3): i_reserved_data_blocks=73 [ 168.682242][ T58] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 169.183533][ T6709] ================================================================== [ 169.191782][ T6709] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 169.198945][ T6709] [ 169.201291][ T6709] write to 0xffff88811b04f38c of 4 bytes by task 6727 on cpu 0: [ 169.208949][ T6709] xas_set_mark+0x12b/0x140 [ 169.213609][ T6709] __folio_start_writeback+0x17b/0x370 [ 169.219100][ T6709] __block_write_full_folio+0x53a/0x8f0 [ 169.224682][ T6709] block_write_full_folio+0x2c1/0x2e0 [ 169.230179][ T6709] __mpage_writepages+0x763/0x1390 [ 169.235571][ T6709] fat_writepages+0x26/0x30 [ 169.240198][ T6709] do_writepages+0x1c6/0x310 [ 169.245087][ T6709] file_write_and_wait_range+0x178/0x2f0 [ 169.250766][ T6709] mmb_fsync_noflush+0x48/0x140 [ 169.255655][ T6709] fat_file_fsync+0x98/0x110 [ 169.260383][ T6709] vfs_fsync_range+0xc5/0xe0 [ 169.265014][ T6709] generic_file_write_iter+0x1ba/0x310 [ 169.270504][ T6709] iter_file_splice_write+0x6c4/0xa80 [ 169.275913][ T6709] direct_splice_actor+0x156/0x2a0 [ 169.281135][ T6709] splice_direct_to_actor+0x311/0x670 [ 169.286562][ T6709] do_splice_direct+0x119/0x1a0 [ 169.291522][ T6709] do_sendfile+0x382/0x650 [ 169.295948][ T6709] __x64_sys_sendfile64+0x105/0x150 [ 169.301196][ T6709] x64_sys_call+0x2dc4/0x3020 [ 169.306335][ T6709] do_syscall_64+0x12c/0x3b0 [ 169.310956][ T6709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.316954][ T6709] [ 169.319310][ T6709] read to 0xffff88811b04f38c of 4 bytes by task 6709 on cpu 1: [ 169.326947][ T6709] xas_find_marked+0x5d7/0x620 [ 169.331774][ T6709] filemap_get_folios_tag+0xfa/0x430 [ 169.337101][ T6709] writeback_iter+0x4bb/0x800 [ 169.341802][ T6709] __mpage_writepages+0x8a/0x1390 [ 169.346870][ T6709] fat_writepages+0x26/0x30 [ 169.351408][ T6709] do_writepages+0x1c6/0x310 [ 169.356025][ T6709] file_write_and_wait_range+0x178/0x2f0 [ 169.361708][ T6709] mmb_fsync_noflush+0x48/0x140 [ 169.366700][ T6709] fat_file_fsync+0x98/0x110 [ 169.371530][ T6709] vfs_fsync_range+0xc5/0xe0 [ 169.376130][ T6709] generic_file_write_iter+0x1ba/0x310 [ 169.381598][ T6709] iter_file_splice_write+0x6c4/0xa80 [ 169.386998][ T6709] direct_splice_actor+0x156/0x2a0 [ 169.392129][ T6709] splice_direct_to_actor+0x311/0x670 [ 169.397523][ T6709] do_splice_direct+0x119/0x1a0 [ 169.402399][ T6709] do_sendfile+0x382/0x650 [ 169.406830][ T6709] __x64_sys_sendfile64+0x105/0x150 [ 169.412047][ T6709] x64_sys_call+0x2dc4/0x3020 [ 169.416736][ T6709] do_syscall_64+0x12c/0x3b0 [ 169.421347][ T6709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.427446][ T6709] [ 169.429860][ T6709] value changed: 0x0a000021 -> 0x04000021 [ 169.435646][ T6709] [ 169.438016][ T6709] Reported by Kernel Concurrency Sanitizer on: [ 169.444182][ T6709] CPU: 1 UID: 0 PID: 6709 Comm: syz.5.949 Tainted: G W syzkaller #0 PREEMPT(full) [ 169.454964][ T6709] Tainted: [W]=WARN [ 169.458767][ T6709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.468878][ T6709] ================================================================== [ 169.531509][ T3303] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 169.578036][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 177.018048][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!