last executing test programs: 1m56.686011796s ago: executing program 1 (id=85): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setuid(0xee01) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 1m56.395179056s ago: executing program 1 (id=93): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1m55.835663682s ago: executing program 1 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201300000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) 1m55.777217908s ago: executing program 1 (id=108): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 1m55.632395142s ago: executing program 1 (id=113): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m55.605266395s ago: executing program 1 (id=115): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syslog(0x3, 0x0, 0x0) 1m40.4965039s ago: executing program 32 (id=115): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syslog(0x3, 0x0, 0x0) 29.335984338s ago: executing program 2 (id=3292): openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 29.31363291s ago: executing program 2 (id=3294): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) exit(0x5) 28.466415615s ago: executing program 2 (id=3324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 28.376637874s ago: executing program 2 (id=3327): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@resgid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 28.102853661s ago: executing program 2 (id=3338): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x200000005c832, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r0 = syz_io_uring_setup(0x63af, &(0x7f0000001940)={0x0, 0xf3f0, 0x10000, 0x10, 0x378}, &(0x7f0000010080), &(0x7f0000000400)) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002100)=""/4083, 0xff3}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001ac0)={0x1, 0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000019c0)=""/136, 0x88}], 0x0}, 0x20) 27.966838935s ago: executing program 2 (id=3343): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000180)={[{@grpquota}, {@inode_readahead_blks}, {@quota}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) creat(&(0x7f0000000240)='./file1\x00', 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) 27.949264157s ago: executing program 33 (id=3343): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000180)={[{@grpquota}, {@inode_readahead_blks}, {@quota}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) creat(&(0x7f0000000240)='./file1\x00', 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) 23.565053387s ago: executing program 4 (id=3498): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x0, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 23.388320094s ago: executing program 4 (id=3505): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x7f, @empty, 0x3a16d34d}}, 0xfffffc, 0x31, 0xffff1896, 0x5, 0xa6, 0x18000000, 0x6}, 0x9c) 23.349211038s ago: executing program 4 (id=3506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1, 0x0, 0x4}, 0xa) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) 23.348749918s ago: executing program 4 (id=3507): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 23.304742062s ago: executing program 4 (id=3510): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="f1ff"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 23.249442308s ago: executing program 4 (id=3511): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 23.242389389s ago: executing program 34 (id=3511): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4.411608478s ago: executing program 7 (id=4194): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) 4.222314957s ago: executing program 7 (id=4203): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) listxattr(0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000380), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x0) 4.19484396s ago: executing program 7 (id=4205): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 4.140925685s ago: executing program 7 (id=4209): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@resgid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.897025889s ago: executing program 7 (id=4214): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f569a15bfd30f671c0a2fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37577813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f1265b9d114c99fb469914a213bb289c5bdf5af3835d089a2300"/1504, 0x5f2}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 3.744813994s ago: executing program 7 (id=4218): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 3.717776257s ago: executing program 35 (id=4218): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 2.063807323s ago: executing program 6 (id=4253): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x44f0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.990806131s ago: executing program 5 (id=4257): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.971984582s ago: executing program 6 (id=4259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.944702035s ago: executing program 5 (id=4260): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r2, &(0x7f000000ee40)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/243, 0xf3}], 0x1}, 0x2}], 0x1, 0x0, 0x0) 1.902436049s ago: executing program 6 (id=4262): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.550011395s ago: executing program 3 (id=4281): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.487331031s ago: executing program 3 (id=4286): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) 1.247292935s ago: executing program 3 (id=4288): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.19957093s ago: executing program 3 (id=4290): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 1.10461106s ago: executing program 8 (id=4298): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000008c0)=ANY=[@ANYBLOB="6d616e676c65000000000002000000000000000000000000000000000000000003"], 0x58) 1.079167902s ago: executing program 5 (id=4300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f0000010440)={0xa, 0x20, 0x0, @local, 0x9}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 1.043754806s ago: executing program 5 (id=4302): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x40, 0x0, 0xb9ff, 0x0, '\x00\x00@\x00'}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x59f, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) 996.549551ms ago: executing program 3 (id=4303): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') 996.181381ms ago: executing program 6 (id=4304): sendto(0xffffffffffffffff, &(0x7f0000000380)="120000001200e7ef007b", 0xa, 0x4000, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x6c3, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2, 0x10f}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 801.61257ms ago: executing program 6 (id=4306): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 657.713495ms ago: executing program 8 (id=4318): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 645.983296ms ago: executing program 5 (id=4308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 644.994435ms ago: executing program 6 (id=4309): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 623.333968ms ago: executing program 5 (id=4310): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0), 0xffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 620.146078ms ago: executing program 8 (id=4311): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r0, 0x0, 0x11, 0x801afd) 588.592031ms ago: executing program 0 (id=4312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f0000010440)={0xa, 0x20, 0x0, @local, 0x9}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 582.265812ms ago: executing program 3 (id=4313): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 540.873696ms ago: executing program 0 (id=4314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x50}}, 0x4048000) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x6}, [], {}, {0x20, 0x5}}, 0x24, 0x2) 375.050182ms ago: executing program 8 (id=4315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 374.819983ms ago: executing program 0 (id=4317): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/19, 0x13}, 0x5}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 345.230675ms ago: executing program 8 (id=4319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 321.312768ms ago: executing program 0 (id=4320): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000008c0)=ANY=[@ANYBLOB="6d616e676c65000000000002000000000000000000000000000000000000000003"], 0x58) 312.480739ms ago: executing program 8 (id=4321): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x40, 0x0, 0xb9ff, 0x0, '\x00\x00@\x00'}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x59f, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) 0s ago: executing program 0 (id=4322): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) kernel console output (not intermixed with test programs): 1397: comm syz.4.2633: couldn't read orphan inode 15 (err -117) [ 102.060354][ T9739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.089376][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.395476][ T9789] loop3: detected capacity change from 0 to 128 [ 102.508955][ T9781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.518111][ T9781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.540423][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 102.540436][ T29] audit: type=1400 audit(1763489666.248:3678): avc: denied { create } for pid=9809 comm="syz.4.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.566762][ T29] audit: type=1400 audit(1763489666.278:3679): avc: denied { write } for pid=9809 comm="syz.4.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.602672][ T29] audit: type=1400 audit(1763489666.308:3680): avc: denied { read } for pid=9814 comm="syz.3.2666" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.625894][ T29] audit: type=1400 audit(1763489666.308:3681): avc: denied { open } for pid=9814 comm="syz.3.2666" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.649197][ T29] audit: type=1400 audit(1763489666.308:3682): avc: denied { ioctl } for pid=9814 comm="syz.3.2666" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.694148][ T29] audit: type=1400 audit(1763489666.398:3683): avc: denied { create } for pid=9820 comm="syz.3.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 102.715912][ T29] audit: type=1400 audit(1763489666.418:3684): avc: denied { bind } for pid=9820 comm="syz.3.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 102.736982][ T29] audit: type=1400 audit(1763489666.418:3685): avc: denied { create } for pid=9822 comm="syz.4.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.757115][ T29] audit: type=1400 audit(1763489666.448:3686): avc: denied { setattr } for pid=9822 comm="syz.4.2670" name="NFC_LLCP" dev="sockfs" ino=26221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.786720][ T29] audit: type=1400 audit(1763489666.488:3687): avc: denied { create } for pid=9824 comm="syz.4.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.858188][ T9833] loop3: detected capacity change from 0 to 512 [ 102.880961][ T9833] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2675: bg 0: block 248: padding at end of block bitmap is not set [ 102.895578][ T9833] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2675: Failed to acquire dquot type 1 [ 102.907571][ T9833] EXT4-fs (loop3): 1 truncate cleaned up [ 102.914084][ T9833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.926687][ T9833] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.945357][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.961611][ T9839] sch_fq: defrate 6 ignored. [ 102.979451][ T9841] tipc: Enabling of bearer rejected, failed to enable media [ 103.039965][ T9845] Falling back ldisc for ttyS3. [ 103.071968][ T9850] loop4: detected capacity change from 0 to 512 [ 103.079015][ T9850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.106068][ T9850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.118822][ T9850] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.143687][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.164622][ T9856] loop0: detected capacity change from 0 to 8192 [ 103.181208][ T9856] Buffer I/O error on dev loop0, logical block 57847, async page read [ 103.295450][ T9870] loop4: detected capacity change from 0 to 512 [ 103.320478][ T9870] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2691: bg 0: block 5: invalid block bitmap [ 103.344834][ T9870] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 103.353846][ T9870] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2691: invalid indirect mapped block 3 (level 2) [ 103.367388][ T9870] EXT4-fs (loop4): 1 orphan inode deleted [ 103.373216][ T9870] EXT4-fs (loop4): 1 truncate cleaned up [ 103.379228][ T9870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.394114][ T9870] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.4.2691: path /660/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 103.447144][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.466044][ T9882] atomic_op ffff8881044ce928 conn xmit_atomic 0000000000000000 [ 103.585444][ T9894] random: crng reseeded on system resumption [ 103.752166][ T9910] netlink: 'syz.0.2709': attribute type 10 has an invalid length. [ 103.760498][ T9910] veth0_macvtap: left promiscuous mode [ 103.766394][ T9910] team0: Device veth0_macvtap failed to register rx_handler [ 103.796690][ T9914] serio: Serial port ttyS3 [ 103.978722][ T8077] Bluetooth: hci1: Frame reassembly failed (-84) [ 104.109481][ T8573] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.360058][ T9954] loop5: detected capacity change from 0 to 512 [ 104.366692][ T9954] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.373531][ T9954] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.385311][ T9954] EXT4-fs (loop5): 1 truncate cleaned up [ 104.391690][ T9954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.415276][ T4830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.691886][ T9966] __nla_validate_parse: 7 callbacks suppressed [ 104.691900][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 104.765161][ T9974] SELinux: policydb version 0 does not match my version range 15-35 [ 104.781831][ T9974] SELinux: failed to load policy [ 104.969022][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 105.223261][T10024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.231943][T10024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.306106][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.314605][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.838493][T10030] loop4: detected capacity change from 0 to 128 [ 105.849475][T10030] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.861604][T10030] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.918207][T10044] loop2: detected capacity change from 0 to 256 [ 105.934275][T10044] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.029676][ T8573] Bluetooth: hci1: command 0x1003 tx timeout [ 106.029738][ T3527] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 106.081132][T10074] loop2: detected capacity change from 0 to 128 [ 106.102228][T10074] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.138895][T10074] ext4 filesystem being mounted at /582/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.203081][T10074] EXT4-fs error (device loop2): make_indexed_dir:2269: inode #2: block 20: comm syz.2.2786: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=128, rec_len=9, size=1000 fake=0 [ 106.228628][T10074] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.2786: dx entry: limit 0 != root limit 125 [ 106.240510][T10074] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2786: Corrupt directory, running e2fsck is recommended [ 106.256470][T10095] loop0: detected capacity change from 0 to 512 [ 106.274991][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.293099][T10097] SELinux: ebitmap: empty map [ 106.299625][T10097] SELinux: failed to load policy [ 106.339037][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2801'. [ 106.455926][T10127] netlink: 'syz.0.2812': attribute type 1 has an invalid length. [ 106.700083][T10157] netlink: 'syz.2.2825': attribute type 1 has an invalid length. [ 106.871051][T10172] €Â: renamed from vlan1 [ 106.882382][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2833'. [ 106.882399][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2833'. [ 107.030191][T10190] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2841'. [ 107.113323][T10198] loop2: detected capacity change from 0 to 512 [ 107.113703][T10198] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.161312][T10204] ip6t_srh: unknown srh match flags 4000 [ 107.555548][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 107.555639][ T29] audit: type=1400 audit(1763489671.258:3818): avc: denied { mount } for pid=10232 comm="syz.4.2861" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.585979][ T29] audit: type=1400 audit(1763489671.288:3819): avc: denied { search } for pid=10232 comm="syz.4.2861" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.608319][ T29] audit: type=1400 audit(1763489671.288:3820): avc: denied { search } for pid=10232 comm="syz.4.2861" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.631031][ T29] audit: type=1400 audit(1763489671.288:3821): avc: denied { read open } for pid=10232 comm="syz.4.2861" path="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.669532][ T29] audit: type=1400 audit(1763489671.368:3822): avc: denied { prog_run } for pid=10234 comm="syz.4.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.689792][ T29] audit: type=1400 audit(1763489671.388:3823): avc: denied { append } for pid=10234 comm="syz.4.2862" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.738620][ T29] audit: type=1400 audit(1763489671.438:3824): avc: denied { create } for pid=10236 comm="syz.4.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.758841][ T29] audit: type=1400 audit(1763489671.458:3825): avc: denied { connect } for pid=10236 comm="syz.4.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.781474][ T29] audit: type=1400 audit(1763489671.488:3826): avc: denied { lock } for pid=10238 comm="syz.0.2864" path="socket:[28683]" dev="sockfs" ino=28683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 107.825342][T10242] loop4: detected capacity change from 0 to 1024 [ 107.825630][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2867'. [ 107.831822][ T29] audit: type=1400 audit(1763489671.528:3827): avc: denied { create } for pid=10241 comm="syz.0.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 107.862018][T10242] EXT4-fs: Ignoring removed orlov option [ 107.876911][T10242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.071331][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.139369][T10257] loop0: detected capacity change from 0 to 32768 [ 108.151125][T10270] loop4: detected capacity change from 0 to 1024 [ 108.202363][T10270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.211575][T10275] lo speed is unknown, defaulting to 1000 [ 108.260436][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.623027][T10293] loop0: detected capacity change from 0 to 32768 [ 108.690203][T10293] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 108.695491][T10293] loop0: p1 start 460800 is beyond EOD, truncated [ 108.701936][T10293] loop0: p2 size 83886080 extends beyond EOD, truncated [ 108.726460][T10293] loop0: p5 start 460800 is beyond EOD, truncated [ 108.733038][T10293] loop0: p6 size 83886080 extends beyond EOD, truncated [ 108.826566][T10311] loop5: detected capacity change from 0 to 32768 [ 109.273194][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2919'. [ 109.282861][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2919'. [ 109.440898][T10367] loop2: detected capacity change from 0 to 32768 [ 109.498846][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2934'. [ 109.520819][T10367] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 109.526434][T10367] loop2: p1 start 460800 is beyond EOD, truncated [ 109.532990][T10367] loop2: p2 size 83886080 extends beyond EOD, truncated [ 109.557854][T10367] loop2: p5 start 460800 is beyond EOD, truncated [ 109.564390][T10367] loop2: p6 size 83886080 extends beyond EOD, truncated [ 109.580013][T10389] sch_fq: defrate 4294967295 ignored. [ 109.660581][T10405] loop5: detected capacity change from 0 to 1024 [ 109.689948][T10405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.718484][ T4830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.781962][T10428] bridge0: entered allmulticast mode [ 109.790637][T10428] pim6reg: entered allmulticast mode [ 109.960989][ T3409] hid_parser_main: 107 callbacks suppressed [ 109.961008][ T3409] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.984320][T10460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2957'. [ 110.002640][ T3409] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.100246][T10432] loop5: detected capacity change from 0 to 32768 [ 110.106843][T10394] loop3: detected capacity change from 0 to 32768 [ 110.140098][T10432] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 110.145420][T10432] loop5: p1 start 460800 is beyond EOD, truncated [ 110.151886][T10432] loop5: p2 size 83886080 extends beyond EOD, truncated [ 110.160777][T10432] loop5: p5 start 460800 is beyond EOD, truncated [ 110.167245][T10432] loop5: p6 size 83886080 extends beyond EOD, truncated [ 110.248688][T10482] loop4: detected capacity change from 0 to 128 [ 110.291570][T10489] loop4: detected capacity change from 0 to 1024 [ 110.299786][T10489] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.312467][T10489] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #11: comm GPL: iget: bogus i_mode (1) [ 110.325844][T10489] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 11 (err -117) [ 110.339284][T10489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.362490][T10489] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.662361][T10530] loop4: detected capacity change from 0 to 1024 [ 110.670871][T10530] EXT4-fs: inline encryption not supported [ 110.679893][T10515] loop3: detected capacity change from 0 to 32768 [ 110.692352][T10530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.713097][T10530] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.2989: Allocating blocks 385-513 which overlap fs metadata [ 110.738111][T10530] EXT4-fs (loop4): pa ffff888107190620: logic 16, phys. 129, len 24 [ 110.746206][T10530] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 110.768969][T10530] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 110.791969][T10515] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 110.818837][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.900175][T10515] loop3: p1 start 460800 is beyond EOD, truncated [ 110.906773][T10515] loop3: p2 size 83886080 extends beyond EOD, truncated [ 110.916203][T10515] loop3: p5 start 460800 is beyond EOD, truncated [ 110.922855][T10515] loop3: p6 size 83886080 extends beyond EOD, truncated [ 111.056535][T10575] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 111.245405][T10593] loop5: detected capacity change from 0 to 32768 [ 111.289777][T10593] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 111.295120][T10593] loop5: p1 start 460800 is beyond EOD, truncated [ 111.301558][T10593] loop5: p2 size 83886080 extends beyond EOD, truncated [ 111.309754][T10593] loop5: p5 start 460800 is beyond EOD, truncated [ 111.316179][T10593] loop5: p6 size 83886080 extends beyond EOD, truncated [ 111.400266][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3019'. [ 111.504181][T10610] netlink: 'syz.2.3022': attribute type 3 has an invalid length. [ 111.548298][T10612] loop2: detected capacity change from 0 to 8192 [ 111.558697][T10612] bio_check_eod: 3668 callbacks suppressed [ 111.558744][T10612] syz.2.3023: attempt to access beyond end of device [ 111.558744][T10612] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 111.578312][T10612] Buffer I/O error on dev loop2, logical block 57847, async page read [ 111.610328][T10614] atomic_op ffff88811aa91128 conn xmit_atomic 0000000000000000 [ 111.686831][T10618] SELinux: failed to load policy [ 111.710649][T10622] random: crng reseeded on system resumption [ 111.734507][T10625] loop2: detected capacity change from 0 to 512 [ 111.742632][T10625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3029: bg 0: block 5: invalid block bitmap [ 111.755344][T10625] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 111.764623][T10625] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3029: invalid indirect mapped block 3 (level 2) [ 111.778162][T10625] EXT4-fs (loop2): 1 orphan inode deleted [ 111.783986][T10625] EXT4-fs (loop2): 1 truncate cleaned up [ 111.790278][T10625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.806184][T10625] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.2.3029: path /652/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 111.836029][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.876911][T10631] xt_connbytes: Forcing CT accounting to be enabled [ 111.883647][T10631] Cannot find set identified by id 0 to match [ 111.925080][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3035'. [ 112.025749][T10646] bond0: entered promiscuous mode [ 112.030908][T10646] bond0: entered allmulticast mode [ 112.036426][T10646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.045342][T10646] bond0 (unregistering): Released all slaves [ 112.292907][T10677] SELinux: policydb version 65535 does not match my version range 15-35 [ 112.308003][T10677] SELinux: failed to load policy [ 112.617462][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 112.617494][ T29] audit: type=1400 audit(1763489677.319:4015): avc: denied { connect } for pid=10737 comm="syz.2.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.662794][T10745] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 112.662794][T10745] program syz.5.3062 not setting count and/or reply_len properly [ 112.679858][ T29] audit: type=1326 audit(1763489677.369:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388f84f6c9 code=0x7ffc0000 [ 112.703449][ T29] audit: type=1326 audit(1763489677.369:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f388f84f6c9 code=0x7ffc0000 [ 112.726963][ T29] audit: type=1326 audit(1763489677.369:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388f84f6c9 code=0x7ffc0000 [ 112.757946][T10753] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 112.857045][ T29] audit: type=1326 audit(1763489677.559:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.5.3069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7e559f6c9 code=0x0 [ 112.884701][T10751] loop2: detected capacity change from 0 to 512 [ 112.892223][T10751] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.899272][T10751] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.938225][T10771] loop4: detected capacity change from 0 to 1024 [ 112.954456][T10751] EXT4-fs (loop2): 1 truncate cleaned up [ 112.960800][T10751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.976248][ T29] audit: type=1400 audit(1763489677.689:4020): avc: denied { remove_name } for pid=10750 comm="syz.2.3066" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.999017][ T29] audit: type=1400 audit(1763489677.689:4021): avc: denied { unlink } for pid=10750 comm="syz.2.3066" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.133959][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.143507][T10771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.156661][T10799] netlink: 'syz.0.3071': attribute type 19 has an invalid length. [ 113.164613][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 113.179862][T10771] ext4 filesystem being mounted at /749/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.183749][T10799] netlink: 'syz.0.3071': attribute type 19 has an invalid length. [ 113.198159][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 113.249302][T10770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.264200][ T29] audit: type=1400 audit(1763489677.969:4022): avc: denied { create } for pid=10810 comm="syz.2.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.295087][T10811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3074'. [ 113.314355][ T29] audit: type=1400 audit(1763489677.999:4023): avc: denied { write } for pid=10810 comm="syz.2.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.334583][ T29] audit: type=1400 audit(1763489677.999:4024): avc: denied { nlmsg_write } for pid=10810 comm="syz.2.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.414168][T10824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10824 comm=syz.3.3080 [ 113.505018][T10835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10835 comm=syz.0.3082 [ 113.520943][T10834] netlink: 'syz.3.3084': attribute type 3 has an invalid length. [ 113.674466][T10851] loop2: detected capacity change from 0 to 2048 [ 113.704090][T10851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.754390][T10861] loop3: detected capacity change from 0 to 4096 [ 113.761102][T10861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.768704][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.849168][T10861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.920220][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.079697][T10892] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 114.086209][T10892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.093765][T10892] vhci_hcd vhci_hcd.0: Device attached [ 114.127479][T10897] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 114.134081][T10897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.141617][T10897] vhci_hcd vhci_hcd.0: Device attached [ 114.162222][T10892] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(6) [ 114.168735][T10892] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 114.176313][T10892] vhci_hcd vhci_hcd.0: Device attached [ 114.195196][T10892] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 114.201798][T10892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.209308][T10892] vhci_hcd vhci_hcd.0: Device attached [ 114.218180][T10892] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(12) [ 114.224771][T10892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.232475][T10892] vhci_hcd vhci_hcd.0: Device attached [ 114.240416][T10906] vhci_hcd: connection closed [ 114.240510][T10901] vhci_hcd: connection closed [ 114.242075][T10894] vhci_hcd: connection closed [ 114.245269][T10898] vhci_hcd: connection closed [ 114.255238][T10904] vhci_hcd: connection closed [ 114.265239][ T42] vhci_hcd: stop threads [ 114.274238][ T42] vhci_hcd: release socket [ 114.278657][ T42] vhci_hcd: disconnect device [ 114.299498][ T42] vhci_hcd: stop threads [ 114.303821][ T42] vhci_hcd: release socket [ 114.308234][ T42] vhci_hcd: disconnect device [ 114.315908][T10909] loop2: detected capacity change from 0 to 512 [ 114.329963][T10909] EXT4-fs: Ignoring removed oldalloc option [ 114.338821][ T42] vhci_hcd: stop threads [ 114.343212][ T42] vhci_hcd: release socket [ 114.346259][T10909] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.347699][ T42] vhci_hcd: disconnect device [ 114.360992][ T3409] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 114.368380][ T3409] usb 11-1: enqueue for inactive port 0 [ 114.379306][ T3409] usb 11-1: enqueue for inactive port 0 [ 114.385133][ T3409] usb 11-1: enqueue for inactive port 0 [ 114.396795][T10909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002] [ 114.406624][T10909] System zones: 1-3, 19-19, 35-38 [ 114.406670][ T42] vhci_hcd: stop threads [ 114.415918][ T42] vhci_hcd: release socket [ 114.420364][ T42] vhci_hcd: disconnect device [ 114.425719][T10909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.439081][ T42] vhci_hcd: stop threads [ 114.443377][ T42] vhci_hcd: release socket [ 114.447797][ T42] vhci_hcd: disconnect device [ 114.448438][T10909] ext4 filesystem being mounted at /680/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.459550][ T3409] vhci_hcd: vhci_device speed not set [ 114.515087][T10921] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 114.515087][T10921] program syz.0.3119 not setting count and/or reply_len properly [ 114.633843][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.729335][T10940] loop2: detected capacity change from 0 to 128 [ 114.736392][T10940] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 114.749897][T10940] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 114.757729][T10940] FAT-fs (loop2): Filesystem has been set read-only [ 114.764511][T10940] syz.2.3124: attempt to access beyond end of device [ 114.764511][T10940] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 114.870510][T10952] loop0: detected capacity change from 0 to 128 [ 114.885810][T10952] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.898493][T10952] ext4 filesystem being mounted at /574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.936677][T10952] EXT4-fs error (device loop0): make_indexed_dir:2269: inode #2: block 20: comm syz.0.3130: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=128, rec_len=9, size=1000 fake=0 [ 114.959628][T10952] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.3130: dx entry: limit 0 != root limit 125 [ 114.971392][T10952] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3130: Corrupt directory, running e2fsck is recommended [ 115.001541][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.093377][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3136'. [ 115.298951][T10986] loop2: detected capacity change from 0 to 164 [ 115.307644][T10986] rock: directory entry would overflow storage [ 115.313915][T10986] rock: sig=0x4543, size=28, remaining=18 [ 115.363691][T10991] loop2: detected capacity change from 0 to 512 [ 115.372448][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3148'. [ 115.381886][T10991] ------------[ cut here ]------------ [ 115.387376][T10991] EA inode 11 i_nlink=2 [ 115.387711][T10991] WARNING: CPU: 1 PID: 10991 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 115.400842][T10990] IPVS: Error connecting to the multicast addr [ 115.402279][T10991] Modules linked in: [ 115.412394][T10991] CPU: 1 UID: 0 PID: 10991 Comm: syz.2.3147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.422254][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.432372][T10991] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 115.439052][T10991] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 81 d4 55 86 4c 89 ee e8 f7 f3 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 78 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 115.458699][T10991] RSP: 0018:ffffc90006ba75a0 EFLAGS: 00010246 [ 115.464800][T10991] RAX: 6c7fda39d9677f00 RBX: ffff8881198d9bb8 RCX: 0000000000080000 [ 115.472852][T10991] RDX: ffffc90003e47000 RSI: 0000000000004624 RDI: 0000000000004625 [ 115.481060][T10991] RBP: 0000000000000002 R08: 0001c90006ba7427 R09: 0000000000000000 [ 115.489206][T10991] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881198d9b68 [ 115.497361][T10991] R13: 000000000000000b R14: ffff8881198d9b20 R15: 0000000000000001 [ 115.505366][T10991] FS: 00007fd426c776c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 115.514445][T10991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.521147][T10991] CR2: 00007f7d25eb12f8 CR3: 000000011ba60000 CR4: 00000000003506f0 [ 115.529208][T10991] Call Trace: [ 115.532650][T10991] [ 115.535658][T10991] ext4_xattr_set_entry+0x77f/0x1020 [ 115.541080][T10991] ext4_xattr_ibody_set+0x184/0x3c0 [ 115.546301][T10991] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 115.552234][T10991] __ext4_expand_extra_isize+0x246/0x280 [ 115.557909][T10991] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 115.563547][T10991] ext4_evict_inode+0x80e/0xd90 [ 115.568478][T10991] ? __pfx_ext4_evict_inode+0x10/0x10 [ 115.573993][T10991] evict+0x2e3/0x550 [ 115.577921][T10991] ? __dquot_initialize+0x146/0x7c0 [ 115.583270][T10991] iput+0x4ed/0x650 [ 115.587129][T10991] ext4_process_orphan+0x1a9/0x1c0 [ 115.592344][T10991] ext4_orphan_cleanup+0x6a8/0xa00 [ 115.597700][T10991] ext4_fill_super+0x3483/0x3810 [ 115.602915][T10991] ? snprintf+0x86/0xb0 [ 115.607128][T10991] ? set_blocksize+0x1a8/0x310 [ 115.611934][T10991] ? sb_set_blocksize+0xe3/0x100 [ 115.616884][T10991] ? setup_bdev_super+0x30e/0x370 [ 115.621974][T10991] ? __pfx_ext4_fill_super+0x10/0x10 [ 115.627274][T10991] get_tree_bdev_flags+0x291/0x300 [ 115.632430][T10991] ? __pfx_ext4_fill_super+0x10/0x10 [ 115.637791][T10991] get_tree_bdev+0x1f/0x30 [ 115.642353][T10991] ext4_get_tree+0x1c/0x30 [ 115.646789][T10991] vfs_get_tree+0x57/0x1d0 [ 115.651316][T10991] do_new_mount+0x24d/0x660 [ 115.655894][T10991] path_mount+0x4a5/0xb70 [ 115.660278][T10991] ? user_path_at+0x109/0x130 [ 115.665082][T10991] __se_sys_mount+0x28c/0x2e0 [ 115.669791][T10991] __x64_sys_mount+0x67/0x80 [ 115.674454][T10991] x64_sys_call+0x2b51/0x3000 [ 115.679201][T10991] do_syscall_64+0xd2/0x200 [ 115.683732][T10991] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 115.689829][T10991] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 115.695672][T10991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.701605][T10991] RIP: 0033:0x7fd428210e6a [ 115.706033][T10991] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.725706][T10991] RSP: 002b:00007fd426c76e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.734159][T10991] RAX: ffffffffffffffda RBX: 00007fd426c76ef0 RCX: 00007fd428210e6a [ 115.742173][T10991] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd426c76eb0 [ 115.750190][T10991] RBP: 0000200000000180 R08: 00007fd426c76ef0 R09: 0000000000800700 [ 115.758461][T10991] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 115.763008][T10999] loop0: detected capacity change from 0 to 128 [ 115.766539][T10991] R13: 00007fd426c76eb0 R14: 000000000000046f R15: 0000200000000200 [ 115.780922][T10991] [ 115.783995][T10991] ---[ end trace 0000000000000000 ]--- [ 115.790197][T10991] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.3147: iget: bad extra_isize 90 (inode size 256) [ 115.814354][T10991] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3147: error while reading EA inode 18 err=-117 [ 115.839979][T10991] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.3147: iget: bad extra_isize 90 (inode size 256) [ 115.869812][T10991] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3147: error while reading EA inode 18 err=-117 [ 115.888313][T10991] EXT4-fs (loop2): 1 orphan inode deleted [ 115.894522][T10991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.923964][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.935034][T11007] netlink: 'syz.0.3164': attribute type 1 has an invalid length. [ 116.193584][T11067] IPVS: Error connecting to the multicast addr [ 116.228948][T11072] loop0: detected capacity change from 0 to 512 [ 116.236016][T11072] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.248855][T11076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3188'. [ 116.261507][T11072] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3186: Invalid block bitmap block 0 in block_group 0 [ 116.276253][T11072] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 116.285242][T11072] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.3186: attempt to clear invalid blocks 983261 len 1 [ 116.298967][T11072] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.3186: Invalid inode table block 0 in block_group 0 [ 116.313414][T11072] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 116.324188][T11072] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 116.336859][T11072] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.3186: Invalid inode table block 0 in block_group 0 [ 116.348351][T11085] loop4: detected capacity change from 0 to 128 [ 116.350422][T11072] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 116.365338][T11072] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.3186: mark_inode_dirty error [ 116.389829][T11072] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 116.405401][T11089] loop2: detected capacity change from 0 to 164 [ 116.413126][T11089] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.430445][T11072] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.3186: Invalid inode table block 0 in block_group 0 [ 116.451334][T11072] EXT4-fs (loop0): 1 truncate cleaned up [ 116.467478][T11089] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.476025][T11072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.498648][T11089] Symlink component flag not implemented [ 116.504353][T11089] Symlink component flag not implemented [ 116.510786][T11089] Symlink component flag not implemented (7) [ 116.516772][T11089] Symlink component flag not implemented (116) [ 116.587282][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.658050][T11119] sch_fq: defrate 4294967295 ignored. [ 116.672672][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3209'. [ 116.726755][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 116.731394][T11132] loop5: detected capacity change from 0 to 164 [ 116.742414][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 116.754561][T11132] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.764657][T11132] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.841366][T11139] SELinux: failed to load policy [ 116.934289][T11170] $Hÿ: renamed from .` [ 116.940118][T11170] $Hÿ: entered promiscuous mode [ 116.945184][T11170] bond_slave_0: entered promiscuous mode [ 116.951037][T11170] bond_slave_1: entered promiscuous mode [ 116.963436][T11173] smc: net device bond0 applied user defined pnetid SYZ0 [ 116.971185][T11173] smc: net device bond0 erased user defined pnetid SYZ0 [ 117.014647][T11181] loop0: detected capacity change from 0 to 1024 [ 117.036445][T11181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.051333][ T42] Bluetooth: hci0: Frame reassembly failed (-84) [ 117.090437][T11181] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.3238: Allocating blocks 497-513 which overlap fs metadata [ 117.109992][T11196] EXT4-fs (loop0): pa ffff888107190620: logic 48, phys. 177, len 21 [ 117.118076][T11196] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 117.189109][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.351828][T11217] loop2: detected capacity change from 0 to 512 [ 117.358492][T11217] EXT4-fs: Ignoring removed nobh option [ 117.371010][T11217] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.3254: corrupted inode contents [ 117.383517][T11217] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.3254: mark_inode_dirty error [ 117.395156][T11217] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.3254: corrupted inode contents [ 117.407290][T11217] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3254: mark_inode_dirty error [ 117.418898][T11217] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3254: Failed to acquire dquot type 0 [ 117.430701][T11217] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3254: corrupted inode contents [ 117.443040][T11217] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.3254: mark_inode_dirty error [ 117.454621][T11217] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3254: corrupted inode contents [ 117.466802][T11217] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3254: mark_inode_dirty error [ 117.478309][T11217] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3254: corrupted inode contents [ 117.490658][T11217] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 117.499389][T11217] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3254: corrupted inode contents [ 117.511794][T11217] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.3254: mark_inode_dirty error [ 117.523300][T11217] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 117.532730][T11217] EXT4-fs (loop2): 1 truncate cleaned up [ 117.538780][T11217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.551731][T11217] ext4 filesystem being mounted at /715/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.574495][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.658500][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 117.658513][ T29] audit: type=1400 audit(1763489682.359:4321): avc: denied { read } for pid=11228 comm="syz.3.3257" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.723973][ T29] audit: type=1400 audit(1763489682.429:4322): avc: denied { create } for pid=11236 comm="syz.3.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.743741][ T29] audit: type=1400 audit(1763489682.439:4323): avc: denied { connect } for pid=11236 comm="syz.3.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.802585][ T29] audit: type=1400 audit(1763489682.509:4324): avc: denied { create } for pid=11241 comm="syz.3.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.822387][ T29] audit: type=1400 audit(1763489682.509:4325): avc: denied { write } for pid=11241 comm="syz.3.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.843035][ T29] audit: type=1400 audit(1763489682.509:4326): avc: denied { create } for pid=11243 comm="syz.2.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 117.863792][ T29] audit: type=1400 audit(1763489682.509:4327): avc: denied { bind } for pid=11243 comm="syz.2.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 117.885705][ T29] audit: type=1400 audit(1763489682.589:4328): avc: denied { read } for pid=11241 comm="syz.3.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.907911][ T29] audit: type=1400 audit(1763489682.609:4329): avc: denied { connect } for pid=11247 comm="syz.2.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.923680][T11250] bridge0: entered allmulticast mode [ 117.928824][ T29] audit: type=1400 audit(1763489682.609:4330): avc: denied { write } for pid=11247 comm="syz.2.3263" name="icmp6" dev="proc" ino=4026532972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 117.939688][T11250] pim6reg: entered allmulticast mode [ 118.205379][T11264] loop3: detected capacity change from 0 to 164 [ 118.217183][T11264] syz.3.3273: attempt to access beyond end of device [ 118.217183][T11264] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 118.231219][T11264] syz.3.3273: attempt to access beyond end of device [ 118.231219][T11264] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 118.323911][T11281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3281'. [ 118.339716][T11283] loop2: detected capacity change from 0 to 1024 [ 118.346620][T11283] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.358325][T11283] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #11: comm GPL: iget: bogus i_mode (1) [ 118.369328][T11283] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm GPL: couldn't read orphan inode 11 (err -117) [ 118.392220][T11283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.409966][T11283] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.421480][T11292] atomic_op ffff88811aa90928 conn xmit_atomic 0000000000000000 [ 118.650655][T11319] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 118.761146][T11332] loop4: detected capacity change from 0 to 8192 [ 118.770793][T11332] syz.4.3304: attempt to access beyond end of device [ 118.770793][T11332] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 118.784271][T11332] Buffer I/O error on dev loop4, logical block 57847, async page read [ 118.975629][T11355] lo speed is unknown, defaulting to 1000 [ 119.048542][T11356] loop4: detected capacity change from 0 to 8192 [ 119.063485][T11362] netlink: 'syz.3.3318': attribute type 3 has an invalid length. [ 119.071272][ T8573] Bluetooth: hci0: command 0x1003 tx timeout [ 119.078235][ T3527] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.119460][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 119.162970][T11366] loop4: detected capacity change from 0 to 2048 [ 119.177742][T11368] loop3: detected capacity change from 0 to 512 [ 119.191534][T11366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 119.207748][T11368] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3320: bg 0: block 5: invalid block bitmap [ 119.220394][T11368] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 119.229299][T11368] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3320: invalid indirect mapped block 3 (level 2) [ 119.242888][T11368] EXT4-fs (loop3): 1 orphan inode deleted [ 119.248612][T11368] EXT4-fs (loop3): 1 truncate cleaned up [ 119.254776][T11368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.273198][T11368] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.3.3320: path /529/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 119.306292][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.377507][T11377] serio: Serial port ttyS3 [ 119.436726][T11379] atomic_op ffff888127ab4d28 conn xmit_atomic 0000000000000000 [ 119.473094][T11382] loop2: detected capacity change from 0 to 1024 [ 119.488516][T11382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.523705][T11382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.696794][T11404] bond3: entered promiscuous mode [ 119.701921][T11404] bond3: entered allmulticast mode [ 119.707308][T11404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.720204][T11404] bond3 (unregistering): Released all slaves [ 119.776230][ T4280] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.818315][T11411] SELinux: failed to load policy [ 119.835764][ T8145] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.845665][ T8145] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.910733][ T8145] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.920568][ T8145] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.971313][ T8145] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.981178][ T8145] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.009769][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 120.060880][ T8145] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.070681][ T8145] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.160089][ T8145] bridge_slave_1: left allmulticast mode [ 120.165865][ T8145] bridge_slave_1: left promiscuous mode [ 120.171735][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.192765][ T8145] bridge_slave_0: left promiscuous mode [ 120.198570][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.239514][ T2968] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 120.250981][ T8145] bond1 (unregistering): (slave gretap1): Releasing active interface [ 120.289747][ T8145] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 120.298251][ T8145] bridge0 (unregistering): left allmulticast mode [ 120.461460][ T8145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.470873][ T8145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.479963][ T8145] bond0 (unregistering): Released all slaves [ 120.488672][ T8145] bond1 (unregistering): Released all slaves [ 120.496464][T11425] lo speed is unknown, defaulting to 1000 [ 120.521491][T11477] loop5: detected capacity change from 0 to 512 [ 120.529628][T11477] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.587077][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'. [ 120.609798][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'. [ 120.631513][ T8145] hsr_slave_0: left promiscuous mode [ 120.642549][ T8145] hsr_slave_1: left promiscuous mode [ 120.648237][ T8145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.671899][ T8145] pim6reg (unregistering): left allmulticast mode [ 120.726714][ T8145] team0 (unregistering): Port device team_slave_1 removed [ 120.738861][ T8145] team0 (unregistering): Port device team_slave_0 removed [ 120.792887][T11504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3377'. [ 120.801959][T11514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3377'. [ 120.813200][T11425] chnl_net:caif_netlink_parms(): no params data found [ 120.825343][T11518] loop0: detected capacity change from 0 to 512 [ 120.840412][T11518] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.873854][T11518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.904623][T11518] ext4 filesystem being mounted at /636/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.916344][T11518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.926583][T11425] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.933685][T11425] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.941246][T11425] bridge_slave_0: entered allmulticast mode [ 120.948183][T11425] bridge_slave_0: entered promiscuous mode [ 120.964155][T11425] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.971264][T11425] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.978528][T11425] bridge_slave_1: entered allmulticast mode [ 120.988794][T11425] bridge_slave_1: entered promiscuous mode [ 121.025550][T11425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.042991][T11551] loop4: detected capacity change from 0 to 1024 [ 121.051211][T11551] EXT4-fs: Ignoring removed orlov option [ 121.055884][T11425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.081481][T11551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.098346][T11425] team0: Port device team_slave_0 added [ 121.107265][T11425] team0: Port device team_slave_1 added [ 121.132049][T11425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.139037][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.139180][T11561] loop0: detected capacity change from 0 to 512 [ 121.165036][T11425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.165946][T11425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.188874][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.214837][T11425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.230715][T11561] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.237577][T11561] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.249455][T11561] EXT4-fs (loop0): 1 truncate cleaned up [ 121.255650][T11561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.284089][T11425] hsr_slave_0: entered promiscuous mode [ 121.290878][T11425] hsr_slave_1: entered promiscuous mode [ 121.297453][T11425] debugfs: 'hsr0' already exists in 'hsr' [ 121.303289][T11425] Cannot create hsr debugfs directory [ 121.325274][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.351190][T11578] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 121.351190][T11578] program syz.0.3393 not setting count and/or reply_len properly [ 121.438218][T11425] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.447375][T11425] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.462695][T11425] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.476890][T11425] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.628316][T11425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.650783][T11425] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.667550][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.674734][ T8084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.707076][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.714194][ T8084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.759289][T11425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.759704][T11640] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 121.866235][T11425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.951832][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.003232][T11425] veth0_vlan: entered promiscuous mode [ 122.013726][T11425] veth1_vlan: entered promiscuous mode [ 122.031881][T11425] veth0_macvtap: entered promiscuous mode [ 122.031995][T11672] loop0: detected capacity change from 0 to 164 [ 122.039121][T11425] veth1_macvtap: entered promiscuous mode [ 122.051445][T11672] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.055485][T11425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.069482][T11672] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.077807][T11672] Symlink component flag not implemented [ 122.083506][T11672] Symlink component flag not implemented [ 122.087222][T11425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.097870][T11672] Symlink component flag not implemented (7) [ 122.103927][T11672] Symlink component flag not implemented (116) [ 122.113108][ T8096] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.150607][T11678] loop4: detected capacity change from 0 to 128 [ 122.159715][ T8145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.178619][ T8145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.195974][ T8145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.223160][T11686] netlink: 'syz.0.3409': attribute type 10 has an invalid length. [ 122.235212][T11686] ipvlan0: entered allmulticast mode [ 122.240702][T11686] veth0_vlan: entered allmulticast mode [ 122.247179][T11686] team0: Device ipvlan0 failed to register rx_handler [ 122.542052][T11731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11731 comm=syz.0.3428 [ 122.562012][T11733] ip6tnl0: Caught tx_queue_len zero misconfig [ 122.568134][T11733] netlink: 'syz.5.3429': attribute type 3 has an invalid length. [ 122.674332][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 122.674376][ T29] audit: type=1400 audit(1763489688.386:4497): avc: denied { create } for pid=11749 comm="syz.6.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.709549][ T29] audit: type=1400 audit(1763489688.416:4498): avc: denied { bind } for pid=11749 comm="syz.6.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.733557][ T29] audit: type=1400 audit(1763489688.426:4499): avc: denied { watch watch_reads } for pid=11752 comm="syz.5.3437" path="/647" dev="tmpfs" ino=3342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 122.774408][ T29] audit: type=1326 audit(1763489688.486:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11760 comm="syz.6.3440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce8e7bf6c9 code=0x0 [ 122.803003][ T29] audit: type=1400 audit(1763489688.516:4501): avc: denied { read write } for pid=11764 comm="syz.0.3442" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 122.804068][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 122.826638][ T29] audit: type=1400 audit(1763489688.516:4502): avc: denied { open } for pid=11764 comm="syz.0.3442" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 122.859957][ T10] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.966343][ T29] audit: type=1400 audit(1763489688.676:4503): avc: denied { cpu } for pid=11776 comm="syz.5.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 123.053497][T11789] loop5: detected capacity change from 0 to 128 [ 123.061581][T11789] ext4 filesystem being mounted at /654/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.099534][ T29] audit: type=1400 audit(1763489688.806:4504): avc: denied { append } for pid=11787 comm="syz.5.3452" path="/654/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 123.100886][T11789] EXT4-fs error (device loop5): dx_make_map:1296: inode #2: block 20: comm syz.5.3452: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 123.187793][T11789] EXT4-fs (loop5): Remounting filesystem read-only [ 123.232732][ T29] audit: type=1400 audit(1763489688.946:4505): avc: denied { read write } for pid=11795 comm="syz.3.3455" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 123.257086][ T29] audit: type=1400 audit(1763489688.946:4506): avc: denied { open } for pid=11795 comm="syz.3.3455" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 123.342722][T11816] loop4: detected capacity change from 0 to 256 [ 123.350171][T11816] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.845779][T11924] loop6: detected capacity change from 0 to 512 [ 123.856580][T11924] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3479: bad orphan inode 13 [ 123.876603][T11924] ext4_test_bit(bit=12, block=4) = 1 [ 123.882067][T11924] is_bad_inode(inode)=0 [ 123.886285][T11924] NEXT_ORPHAN(inode)=0 [ 123.890428][T11924] max_ino=32 [ 123.893620][T11924] i_nlink=1 [ 124.052495][T11961] loop4: detected capacity change from 0 to 8192 [ 124.119921][T11961] loop4: p2 p3 p4 [ 124.123957][T11961] loop4: p2 start 164919041 is beyond EOD, truncated [ 124.130712][T11961] loop4: p3 size 66846464 extends beyond EOD, truncated [ 124.143564][T11961] loop4: p4 size 37048832 extends beyond EOD, truncated [ 124.170845][T11987] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 124.170845][T11987] program syz.3.3491 not setting count and/or reply_len properly [ 124.305816][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3499'. [ 124.319088][T12003] vlan1: entered promiscuous mode [ 124.324219][T12003] gretap0: entered promiscuous mode [ 124.539624][T12026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3509'. [ 124.548654][T12026] netlink: 'syz.5.3509': attribute type 7 has an invalid length. [ 124.556571][T12026] netlink: 'syz.5.3509': attribute type 8 has an invalid length. [ 124.564335][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3509'. [ 124.709979][T12034] lo speed is unknown, defaulting to 1000 [ 124.768799][T12034] chnl_net:caif_netlink_parms(): no params data found [ 124.813106][T12034] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.820253][T12034] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.827546][T12034] bridge_slave_0: entered allmulticast mode [ 124.834268][T12034] bridge_slave_0: entered promiscuous mode [ 124.841210][T12034] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.848331][T12034] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.855668][T12034] bridge_slave_1: entered allmulticast mode [ 124.862279][T12034] bridge_slave_1: entered promiscuous mode [ 124.881806][T12034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.892119][T12034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.915036][T12034] team0: Port device team_slave_0 added [ 124.921897][T12034] team0: Port device team_slave_1 added [ 124.939502][T12034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.946458][T12034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.972413][T12034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.983856][T12034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.990873][T12034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.016787][T12034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.044557][T12034] hsr_slave_0: entered promiscuous mode [ 125.050748][T12034] hsr_slave_1: entered promiscuous mode [ 125.056590][T12034] debugfs: 'hsr0' already exists in 'hsr' [ 125.062337][T12034] Cannot create hsr debugfs directory [ 125.095049][T12050] loop6: detected capacity change from 0 to 128 [ 125.160273][T12056] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 125.166854][T12056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.174500][T12056] vhci_hcd vhci_hcd.0: Device attached [ 125.179817][T12034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 125.189895][T12034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 125.204661][T12034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 125.213915][T12061] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 125.220431][T12061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.227981][T12061] vhci_hcd vhci_hcd.0: Device attached [ 125.235220][T12034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 125.247039][T12056] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(6) [ 125.253576][T12056] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 125.261340][T12056] vhci_hcd vhci_hcd.0: Device attached [ 125.270692][T12056] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10) [ 125.277285][T12056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.284790][T12056] vhci_hcd vhci_hcd.0: Device attached [ 125.292202][T12056] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(12) [ 125.298817][T12056] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.306353][T12056] vhci_hcd vhci_hcd.0: Device attached [ 125.312884][T12075] vhci_hcd: connection closed [ 125.313082][ T8081] vhci_hcd: stop threads [ 125.319791][T12064] vhci_hcd: connection closed [ 125.322138][ T8081] vhci_hcd: release socket [ 125.331245][ T8081] vhci_hcd: disconnect device [ 125.332910][T12062] vhci_hcd: connection closed [ 125.336389][T12070] vhci_hcd: connection closed [ 125.341199][T12057] vhci_hcd: connection closed [ 125.349866][T12034] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.353307][ T8081] vhci_hcd: stop threads [ 125.354654][T12034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.361615][ T8081] vhci_hcd: release socket [ 125.365898][T12034] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.373096][ T8081] vhci_hcd: disconnect device [ 125.377531][T12034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.418601][ T8081] vhci_hcd: stop threads [ 125.422933][ T8081] vhci_hcd: release socket [ 125.427423][ T8081] vhci_hcd: disconnect device [ 125.440220][ T3409] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 125.449020][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3517'. [ 125.459341][T12081] IPVS: Error connecting to the multicast addr [ 125.460641][T12058] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 125.478431][ T8081] vhci_hcd: stop threads [ 125.482977][ T8081] vhci_hcd: release socket [ 125.487500][ T8081] vhci_hcd: disconnect device [ 125.506066][T12034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.512940][ T8081] vhci_hcd: stop threads [ 125.517188][ T8081] vhci_hcd: release socket [ 125.521854][ T8081] vhci_hcd: disconnect device [ 125.532982][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.547094][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.581351][T12034] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.602233][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.609289][ T8095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.625069][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.632180][ T8084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.741791][T12034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.851280][T12088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.870494][T12088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.901039][T12034] veth0_vlan: entered promiscuous mode [ 125.917118][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 125.928858][T12034] veth1_vlan: entered promiscuous mode [ 125.939370][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 125.982423][T12034] veth0_macvtap: entered promiscuous mode [ 126.000717][T12034] veth1_macvtap: entered promiscuous mode [ 126.018030][T12034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.030488][T12034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.047463][ T8136] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.062205][ T8136] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.081553][ T8136] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.091496][ T8136] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.216694][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3540'. [ 126.270435][T12178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.279204][T12178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.454479][T12219] loop5: detected capacity change from 0 to 164 [ 126.461666][T12219] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.473638][T12219] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.482318][T12219] Symlink component flag not implemented [ 126.487963][T12219] Symlink component flag not implemented [ 126.493966][T12219] Symlink component flag not implemented (7) [ 126.499986][T12219] Symlink component flag not implemented (116) [ 126.998486][T12311] sd 0:0:1:0: device reset [ 127.136482][T12329] SELinux: security_context_str_to_sid (ÿ) failed with errno=-22 [ 127.219956][T12343] loop0: detected capacity change from 0 to 2048 [ 127.228352][T12343] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 127.238213][T12343] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 127.249270][T12343] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 127.259441][T12343] EXT4-fs (loop0): group descriptors corrupted! [ 127.285763][T12350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12350 comm=syz.5.3581 [ 127.298428][T12350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12350 comm=syz.5.3581 [ 127.355420][T12358] loop0: detected capacity change from 0 to 512 [ 127.373167][T12358] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 127.373638][T12362] loop5: detected capacity change from 0 to 512 [ 127.389083][T12358] EXT4-fs (loop0): 1 truncate cleaned up [ 127.396911][T12362] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.3586: iget: bad extra_isize 90 (inode size 256) [ 127.411048][T12358] EXT4-fs mount: 4 callbacks suppressed [ 127.411065][T12358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.429487][T12362] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3586: error while reading EA inode 18 err=-117 [ 127.442038][T12362] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.3586: iget: bad extra_isize 90 (inode size 256) [ 127.442064][T12346] loop6: detected capacity change from 0 to 32768 [ 127.462224][T12362] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3586: error while reading EA inode 18 err=-117 [ 127.475518][T12362] EXT4-fs (loop5): 1 orphan inode deleted [ 127.479770][T12346] loop6: p1 p3 < > [ 127.482049][T12362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.486819][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.520011][ T4830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.698960][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 127.698975][ T29] audit: type=1400 audit(1763489693.406:4783): avc: denied { create } for pid=12392 comm="syz.3.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.733876][ T29] audit: type=1400 audit(1763489693.446:4784): avc: denied { bind } for pid=12392 comm="syz.3.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.754337][ T29] audit: type=1400 audit(1763489693.466:4785): avc: denied { listen } for pid=12392 comm="syz.3.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.774136][ T29] audit: type=1400 audit(1763489693.466:4786): avc: denied { connect } for pid=12392 comm="syz.3.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.813632][ T29] audit: type=1400 audit(1763489693.526:4787): avc: denied { write } for pid=12392 comm="syz.3.3599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.817248][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3603'. [ 127.842249][ T29] audit: type=1400 audit(1763489693.526:4788): avc: denied { append } for pid=12396 comm="syz.0.3602" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.866789][ T29] audit: type=1400 audit(1763489693.526:4789): avc: denied { open } for pid=12396 comm="syz.0.3602" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.891679][ T29] audit: type=1400 audit(1763489693.526:4790): avc: denied { ioctl } for pid=12396 comm="syz.0.3602" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.987702][ T29] audit: type=1400 audit(1763489693.696:4791): avc: denied { listen } for pid=12417 comm="syz.3.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.007970][ T29] audit: type=1400 audit(1763489693.696:4792): avc: denied { accept } for pid=12417 comm="syz.3.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.078840][ T8084] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.169335][T12445] $Hÿ: renamed from bond0 (while UP) [ 128.176857][T12445] $Hÿ: entered promiscuous mode [ 128.181956][T12445] bond_slave_0: entered promiscuous mode [ 128.187676][T12445] bond_slave_1: entered promiscuous mode [ 128.257934][T12437] lo speed is unknown, defaulting to 1000 [ 128.326213][T12437] chnl_net:caif_netlink_parms(): no params data found [ 128.351292][T12468] loop5: detected capacity change from 0 to 256 [ 128.393595][T12437] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.400743][T12437] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.408065][T12437] bridge_slave_0: entered allmulticast mode [ 128.414747][T12437] bridge_slave_0: entered promiscuous mode [ 128.421720][T12437] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.428956][T12437] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.431603][T12477] loop6: detected capacity change from 0 to 2048 [ 128.437650][T12437] bridge_slave_1: entered allmulticast mode [ 128.448979][T12437] bridge_slave_1: entered promiscuous mode [ 128.462061][T12477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.489367][T12437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.495577][T11425] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 128.499068][T12483] bridge0: entered allmulticast mode [ 128.519767][T11425] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 128.520066][T12437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.557854][T12483] pim6reg: entered allmulticast mode [ 128.563624][T11425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.590990][T12437] team0: Port device team_slave_0 added [ 128.610625][T12437] team0: Port device team_slave_1 added [ 128.648159][T12437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.655239][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.681242][T12437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.697959][T12437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.704969][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.730936][T12437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.765449][T12437] hsr_slave_0: entered promiscuous mode [ 128.774479][T12437] hsr_slave_1: entered promiscuous mode [ 128.782465][T12437] debugfs: 'hsr0' already exists in 'hsr' [ 128.788212][T12437] Cannot create hsr debugfs directory [ 128.805184][T12498] loop3: detected capacity change from 0 to 1024 [ 128.859010][T12498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.905595][T12498] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3639: Allocating blocks 497-513 which overlap fs metadata [ 128.931410][T12509] EXT4-fs (loop3): pa ffff8881071908c0: logic 48, phys. 177, len 21 [ 128.939476][T12509] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 128.986515][T12518] netlink: 'syz.5.3645': attribute type 13 has an invalid length. [ 129.027240][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.070107][ T3402] lo speed is unknown, defaulting to 1000 [ 129.070117][ T8136] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.075941][ T3402] syz2: Port: 1 Link DOWN [ 129.084239][ T8136] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.097075][T12521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3646'. [ 129.106167][T12521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3646'. [ 129.115530][ T8136] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.124102][ T8136] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.132920][ T8136] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.141313][ T8136] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.151596][ T8136] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.160038][ T8136] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.199158][T12527] capability: warning: `syz.5.3649' uses 32-bit capabilities (legacy support in use) [ 129.283078][T12536] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.3652'. [ 129.511290][T12555] tipc: Started in network mode [ 129.516277][T12555] tipc: Node identity ac14140f, cluster identity 4711 [ 129.523250][T12555] tipc: New replicast peer: 255.255.255.83 [ 129.529144][T12555] tipc: Enabled bearer , priority 10 [ 129.812952][T12578] netlink: 'syz.3.3670': attribute type 4 has an invalid length. [ 129.823285][T12578] netlink: 'syz.3.3670': attribute type 4 has an invalid length. [ 129.847441][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3671'. [ 129.948458][T12592] loop3: detected capacity change from 0 to 512 [ 129.970966][T12592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.024905][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3679'. [ 130.037316][ T8084] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.037929][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.084891][ T8084] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.096262][T12608] netlink: 'syz.0.3681': attribute type 13 has an invalid length. [ 130.107184][T12608] netlink: 'syz.0.3681': attribute type 13 has an invalid length. [ 130.115135][ T8095] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.123704][ T8095] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.135732][ T8084] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.147235][ T8095] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.155509][ T8095] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.167509][T12610] atomic_op ffff8881031d1928 conn xmit_atomic 0000000000000000 [ 130.210663][ T8084] bridge_slave_1: left allmulticast mode [ 130.216345][ T8084] bridge_slave_1: left promiscuous mode [ 130.222288][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.232452][ T8084] bridge_slave_0: left allmulticast mode [ 130.238320][ T8084] bridge_slave_0: left promiscuous mode [ 130.244138][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.334403][ T3412] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.342992][ T3412] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.354938][ T8084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.379868][ T8084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.400637][ T8084] bond0 (unregistering): Released all slaves [ 130.469839][ T8084] hsr_slave_0: left promiscuous mode [ 130.481796][ T8084] hsr_slave_1: left promiscuous mode [ 130.499569][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.507307][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.514762][ T3409] usb 13-1: enqueue for inactive port 0 [ 130.529554][ T3409] usb 13-1: enqueue for inactive port 0 [ 130.539211][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.546692][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.558105][ T8084] veth1_macvtap: left promiscuous mode [ 130.563965][ T8084] veth0_macvtap: left promiscuous mode [ 130.569589][ T8084] veth1_vlan: left promiscuous mode [ 130.574839][ T8084] veth0_vlan: left promiscuous mode [ 130.599846][ T3409] vhci_hcd: vhci_device speed not set [ 130.685897][ T8084] team0 (unregistering): Port device team_slave_1 removed [ 130.700483][ T8084] team0 (unregistering): Port device team_slave_0 removed [ 130.754526][ T3412] tipc: Node number set to 2886997007 [ 130.858402][T12654] netlink: 'syz.0.3701': attribute type 1 has an invalid length. [ 130.866186][T12654] netlink: 'syz.0.3701': attribute type 2 has an invalid length. [ 130.903360][T12437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 130.913375][T12437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 130.922987][T12437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 130.937189][T12437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 130.988466][T12437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.002290][T12437] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.012818][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.019920][ T8145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.034305][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.041476][ T8136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.131804][T12437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.257714][T12708] netlink: 'syz.0.3718': attribute type 13 has an invalid length. [ 131.276405][T12708] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 131.300853][ T8084] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.309475][ T8084] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.330173][T12437] veth0_vlan: entered promiscuous mode [ 131.347024][T12437] veth1_vlan: entered promiscuous mode [ 131.353468][ T8084] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.361888][ T8084] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.370967][ T8084] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.379356][ T8084] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.388909][ T8084] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.397370][ T8084] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.421973][T12437] veth0_macvtap: entered promiscuous mode [ 131.430751][T12437] veth1_macvtap: entered promiscuous mode [ 131.436918][T12720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.444223][T12720] IPv6: NLM_F_CREATE should be set when creating new route [ 131.451490][T12720] IPv6: NLM_F_CREATE should be set when creating new route [ 131.458708][T12720] IPv6: NLM_F_CREATE should be set when creating new route [ 131.484557][T12720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.486887][T12437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.523603][T12437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.535506][ T8081] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.544750][ T8081] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.561320][ T8081] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.572728][ T8081] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.627448][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3729'. [ 131.651220][T12741] SELinux: policydb version 65535 does not match my version range 15-35 [ 131.666485][T12741] SELinux: failed to load policy [ 131.682570][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3733'. [ 131.706428][T12747] netlink: 'syz.7.3734': attribute type 13 has an invalid length. [ 131.753435][T12747] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.760660][T12747] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.794177][T12747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.804656][T12747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.855921][ T8081] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.867063][ T8081] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.883750][ T8081] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.892994][ T8081] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.005122][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3749'. [ 132.014834][T12778] IPVS: Error connecting to the multicast addr [ 132.077418][T12789] netlink: 'syz.5.3753': attribute type 1 has an invalid length. [ 132.085257][T12789] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3753'. [ 132.277327][T12802] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 132.306994][T12806] netlink: 'syz.5.3760': attribute type 13 has an invalid length. [ 132.322646][T12808] loop7: detected capacity change from 0 to 128 [ 132.546286][T12844] loop3: detected capacity change from 0 to 512 [ 132.555813][T12844] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.584443][T12852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3781'. [ 132.593830][T12852] IPVS: Error connecting to the multicast addr [ 132.636662][T12844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.664066][T12858] macvtap0: entered promiscuous mode [ 132.670634][T12858] macvtap0: left promiscuous mode [ 132.675952][T12844] ext4 filesystem being mounted at /614/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.689698][T12844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.754622][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 132.754636][ T29] audit: type=1400 audit(1763489698.466:4954): avc: denied { remount } for pid=12843 comm="syz.3.3777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.063470][ T29] audit: type=1326 audit(1763489698.766:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 133.087037][ T29] audit: type=1326 audit(1763489698.766:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 133.110594][ T29] audit: type=1326 audit(1763489698.776:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 133.134004][ T29] audit: type=1326 audit(1763489698.776:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 133.157553][ T29] audit: type=1326 audit(1763489698.776:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 133.181044][ T29] audit: type=1326 audit(1763489698.776:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 133.204577][ T29] audit: type=1326 audit(1763489698.776:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 133.228198][ T29] audit: type=1326 audit(1763489698.776:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 133.251837][ T29] audit: type=1326 audit(1763489698.776:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 133.565410][T12890] SELinux: ebitmap: truncated map [ 133.587756][T12890] SELinux: failed to load policy [ 133.629287][T12892] loop7: detected capacity change from 0 to 512 [ 133.646252][T12892] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.671277][T12892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.684264][T12892] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.695866][T12892] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.774028][T12903] loop7: detected capacity change from 0 to 4096 [ 133.781404][T12903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.790795][T12903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.851140][T12437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.999200][T12919] SELinux: ebitmap: start bit 0 comes after start bit 384 [ 134.018620][T12919] SELinux: failed to load policy [ 134.200903][T12938] loop3: detected capacity change from 0 to 128 [ 134.209714][T12938] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.240537][T12938] ext4 filesystem being mounted at /623/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.369197][T12955] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 134.384090][T12952] loop5: detected capacity change from 0 to 2048 [ 134.393832][T12938] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 20: comm syz.3.3815: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 134.452765][T12952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 134.467717][T12938] EXT4-fs (loop3): Remounting filesystem read-only [ 134.600313][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'. [ 134.678485][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.716083][T12976] bridge_slave_0: left allmulticast mode [ 134.721872][T12976] bridge_slave_0: left promiscuous mode [ 134.727623][T12976] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.735764][T12976] bridge_slave_1: left allmulticast mode [ 134.741142][T12978] loop6: detected capacity change from 0 to 512 [ 134.741479][T12976] bridge_slave_1: left promiscuous mode [ 134.753439][T12976] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.763145][T12976] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 134.770627][T12976] bond_slave_0: left promiscuous mode [ 134.777773][T12976] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 134.785538][T12976] bond_slave_1: left promiscuous mode [ 134.792552][T12976] team0: Port device team_slave_0 removed [ 134.799245][T12976] team0: Port device team_slave_1 removed [ 134.805332][T12976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.813084][T12976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.820668][T12976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.155697][T12897] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.190082][ T4830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 135.269320][T13010] bridge_slave_0: left allmulticast mode [ 135.275222][T13010] bridge_slave_0: left promiscuous mode [ 135.280996][T13010] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.291290][T13010] bridge_slave_1: left allmulticast mode [ 135.296963][T13010] bridge_slave_1: left promiscuous mode [ 135.302741][T13010] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.316461][T13010] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 135.324302][T13010] bond_slave_0: left promiscuous mode [ 135.349808][T13010] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 135.371014][T13010] bond_slave_1: left promiscuous mode [ 135.387457][T13010] team0: Port device team_slave_0 removed [ 135.396500][T13010] team0: Port device team_slave_1 removed [ 135.403517][T13010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.410940][T13010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.419885][T13010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.427352][T13010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.442960][T13010] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.621978][T13034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3858'. [ 135.631114][T13034] validate_nla: 1 callbacks suppressed [ 135.631126][T13034] netlink: 'syz.0.3858': attribute type 7 has an invalid length. [ 135.644384][T13034] netlink: 'syz.0.3858': attribute type 8 has an invalid length. [ 135.652207][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 135.693602][T13038] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 135.795417][T13052] SELinux: ebitmap: start bit 0 comes after start bit 384 [ 135.814712][T13052] SELinux: failed to load policy [ 136.429068][T13106] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 136.435607][T13106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.443183][T13106] vhci_hcd vhci_hcd.0: Device attached [ 136.470407][T13106] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 136.477044][T13106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.484607][T13106] vhci_hcd vhci_hcd.0: Device attached [ 136.500884][T13106] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(8) [ 136.507417][T13106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 136.515066][T13106] vhci_hcd vhci_hcd.0: Device attached [ 136.530103][T13106] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(10) [ 136.536790][T13106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.544348][T13106] vhci_hcd vhci_hcd.0: Device attached [ 136.551630][T13106] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(12) [ 136.558239][T13106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.565814][T13106] vhci_hcd vhci_hcd.0: Device attached [ 136.572410][T13123] vhci_hcd: connection closed [ 136.572565][ T8084] vhci_hcd: stop threads [ 136.581571][ T8084] vhci_hcd: release socket [ 136.585974][ T8084] vhci_hcd: disconnect device [ 136.591344][T13119] vhci_hcd: connection closed [ 136.591478][ T8084] vhci_hcd: stop threads [ 136.600639][ T8084] vhci_hcd: release socket [ 136.605097][ T8084] vhci_hcd: disconnect device [ 136.610227][T13116] vhci_hcd: connection closed [ 136.610304][T13112] vhci_hcd: connection closed [ 136.615041][ T8084] vhci_hcd: stop threads [ 136.615169][T13109] vhci_hcd: connection closed [ 136.619854][ T8084] vhci_hcd: release socket [ 136.633213][ T8084] vhci_hcd: disconnect device [ 136.638258][ T8084] vhci_hcd: stop threads [ 136.639166][T13108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.642537][ T8084] vhci_hcd: release socket [ 136.642552][ T8084] vhci_hcd: disconnect device [ 136.660522][T13108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.669672][ T8084] vhci_hcd: stop threads [ 136.673964][ T8084] vhci_hcd: release socket [ 136.678381][ T8084] vhci_hcd: disconnect device [ 136.699562][ T3409] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 136.706981][ T3409] usb 15-1: enqueue for inactive port 0 [ 136.716408][ T3409] usb 15-1: enqueue for inactive port 0 [ 136.722043][ T3409] usb 15-1: enqueue for inactive port 0 [ 136.789476][ T3409] vhci_hcd: vhci_device speed not set [ 137.110897][T13138] loop3: detected capacity change from 0 to 512 [ 137.118496][T13138] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3895: bad orphan inode 13 [ 137.129259][T13138] ext4_test_bit(bit=12, block=4) = 1 [ 137.134584][T13138] is_bad_inode(inode)=0 [ 137.138755][T13138] NEXT_ORPHAN(inode)=0 [ 137.142893][T13138] max_ino=32 [ 137.146084][T13138] i_nlink=1 [ 137.149702][T13138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.223228][T13147] netlink: 'syz.7.3899': attribute type 3 has an invalid length. [ 137.400145][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.678866][T13223] loop3: detected capacity change from 0 to 512 [ 137.697365][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3933'. [ 137.712357][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3933'. [ 137.727552][T13223] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 137.736152][T13223] FAT-fs (loop3): Filesystem has been set read-only [ 137.765932][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 137.765968][ T29] audit: type=1400 audit(1763489703.476:5197): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 137.799574][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3946'. [ 137.814252][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3946'. [ 137.854661][ T29] audit: type=1326 audit(1763489703.566:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 137.878330][ T29] audit: type=1326 audit(1763489703.566:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 137.907972][ T29] audit: type=1326 audit(1763489703.616:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 137.931639][ T29] audit: type=1326 audit(1763489703.616:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 137.955292][ T29] audit: type=1326 audit(1763489703.616:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 137.978845][ T29] audit: type=1326 audit(1763489703.616:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 138.002400][ T29] audit: type=1326 audit(1763489703.616:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 138.025868][ T29] audit: type=1326 audit(1763489703.616:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 138.049443][ T29] audit: type=1326 audit(1763489703.616:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.5.3949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7e559f6c9 code=0x7ffc0000 [ 138.093255][T13247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13247 comm=syz.6.3939 [ 138.105901][T13247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13247 comm=syz.6.3939 [ 138.264756][T13257] loop5: detected capacity change from 0 to 512 [ 138.272576][T13257] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 138.281283][T13257] EXT4-fs (loop5): 1 truncate cleaned up [ 138.287250][T13257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.314362][T13260] loop6: detected capacity change from 0 to 512 [ 138.321461][ T4830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.345166][T13260] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 138.353775][T13260] FAT-fs (loop6): Filesystem has been set read-only [ 138.567386][T13291] loop7: detected capacity change from 0 to 512 [ 138.585690][T13291] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 138.602824][T13291] EXT4-fs (loop7): 1 truncate cleaned up [ 138.608973][T13291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.657352][T12437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.708168][T13311] loop7: detected capacity change from 0 to 2048 [ 138.716112][T13309] loop6: detected capacity change from 0 to 2048 [ 138.730310][T13311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.751363][T13309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 138.758637][T13313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.773008][T13313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.896597][T12437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.944346][T13338] $Hÿ: renamed from bond0 [ 138.953691][T13338] $Hÿ: entered promiscuous mode [ 138.958776][T13338] bond_slave_0: entered promiscuous mode [ 138.964618][T13338] bond_slave_1: entered promiscuous mode [ 139.018275][T13348] bridge0: entered promiscuous mode [ 139.024538][T13348] bridge0: left promiscuous mode [ 139.152931][T13366] smc: net device bond0 applied user defined pnetid SYZ0 [ 139.160684][T13366] smc: net device bond0 erased user defined pnetid SYZ0 [ 139.163646][T13370] sg_write: data in/out 2011/154 bytes for SCSI command 0x0-- guessing data in; [ 139.163646][T13370] program syz.0.3999 not setting count and/or reply_len properly [ 139.350046][T13380] Falling back ldisc for ttyS3. [ 139.469229][T13391] loop7: detected capacity change from 0 to 512 [ 139.483137][T13391] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4006: bg 0: block 248: padding at end of block bitmap is not set [ 139.498091][T13391] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4006: Failed to acquire dquot type 1 [ 139.510364][T13391] EXT4-fs (loop7): 1 truncate cleaned up [ 139.516593][T13391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.529588][T13391] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.554210][T11425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 139.565282][T12437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.807590][T13437] bridge0: entered promiscuous mode [ 139.818340][T13437] bridge0: left promiscuous mode [ 139.844423][T13436] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 139.985514][T13452] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4036'. [ 140.049092][T13466] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.4043'. [ 140.225468][T13478] netlink: 'syz.7.4045': attribute type 10 has an invalid length. [ 140.248347][T13478] dummy0: entered promiscuous mode [ 140.259782][T13478] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 140.436114][T13488] loop6: detected capacity change from 0 to 8192 [ 140.450990][T13488] syz.6.4052: attempt to access beyond end of device [ 140.450990][T13488] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 140.464436][T13488] Buffer I/O error on dev loop6, logical block 57847, async page read [ 140.519312][T13501] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.4057'. [ 140.554615][T13505] loop7: detected capacity change from 0 to 1024 [ 140.569133][T13484] IPv6: Can't replace route, no match found [ 140.577143][T13505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.621196][T13513] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4063'. [ 140.654386][T13505] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.4060: Allocating blocks 497-513 which overlap fs metadata [ 140.689103][T13514] EXT4-fs (loop7): pa ffff888107190930: logic 48, phys. 177, len 21 [ 140.697184][T13514] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 140.784492][T13517] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 140.862303][T12437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.898112][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4078'. [ 141.082399][T13535] loop5: detected capacity change from 0 to 8192 [ 141.102325][T13535] syz.5.4068: attempt to access beyond end of device [ 141.102325][T13535] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 141.115790][T13535] Buffer I/O error on dev loop5, logical block 57847, async page read [ 141.141134][T13541] atomic_op ffff888112377528 conn xmit_atomic 0000000000000000 [ 141.285026][T13560] loop6: detected capacity change from 0 to 1024 [ 141.300829][T13560] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.335213][T13568] program syz.7.4084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.364694][T13560] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4079: Allocating blocks 497-513 which overlap fs metadata [ 141.380315][T13573] EXT4-fs (loop6): pa ffff888107190930: logic 48, phys. 177, len 21 [ 141.388475][T13573] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 141.445393][T13580] A link change request failed with some changes committed already. Interface $Hÿ may have been left with an inconsistent configuration, please check. [ 141.488721][T11425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.544281][T13598] atomic_op ffff88811a0e4128 conn xmit_atomic 0000000000000000 [ 141.587969][T13604] netlink: 'syz.5.4101': attribute type 1 has an invalid length. [ 141.595814][T13604] netlink: 'syz.5.4101': attribute type 2 has an invalid length. [ 141.626657][T13607] loop5: detected capacity change from 0 to 1024 [ 141.636198][T13608] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.4104'. [ 141.650782][T13607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.667159][T13614] loop7: detected capacity change from 0 to 512 [ 141.682183][T13614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.731005][T13621] loop6: detected capacity change from 0 to 1024 [ 141.736555][T13607] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.4103: Allocating blocks 497-513 which overlap fs metadata [ 141.739894][T13621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.761079][T13621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.809527][T13622] EXT4-fs (loop5): pa ffff888107190930: logic 48, phys. 177, len 21 [ 141.817563][T13622] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 141.876189][T12437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.980070][ T4830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.074078][T11425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.112934][T13645] atomic_op ffff88811a0e5928 conn xmit_atomic 0000000000000000 [ 142.201808][T13661] program syz.0.4125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.258959][T13667] IPv6: Can't replace route, no match found [ 142.338987][T13676] sg_write: data in/out 2011/154 bytes for SCSI command 0x0-- guessing data in; [ 142.338987][T13676] program syz.6.4131 not setting count and/or reply_len properly [ 142.466675][T13686] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 142.466675][T13686] program syz.5.4135 not setting count and/or reply_len properly [ 142.644818][T13714] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 142.768329][T13706] netlink: 'syz.5.4144': attribute type 10 has an invalid length. [ 142.930200][T13743] SELinux: failed to load policy [ 143.000155][T13760] __nla_validate_parse: 4 callbacks suppressed [ 143.000193][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4182'. [ 143.019055][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4172'. [ 143.050222][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 143.050257][ T29] audit: type=1400 audit(1763489708.766:5533): avc: denied { mount } for pid=13765 comm="syz.3.4174" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 143.054312][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4182'. [ 143.157745][T13776] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4179'. [ 143.204829][T13784] sch_fq: defrate 4294967295 ignored. [ 143.212497][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4184'. [ 143.269317][ T29] audit: type=1400 audit(1763489708.976:5534): avc: denied { search } for pid=13765 comm="syz.3.4174" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.291783][ T29] audit: type=1400 audit(1763489708.976:5535): avc: denied { search } for pid=13765 comm="syz.3.4174" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.314258][ T29] audit: type=1400 audit(1763489708.976:5536): avc: denied { read open } for pid=13765 comm="syz.3.4174" path="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.386601][ T29] audit: type=1400 audit(1763489709.096:5537): avc: denied { mount } for pid=13804 comm="syz.7.4193" name="/" dev="autofs" ino=38690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 143.431136][T13812] loop7: detected capacity change from 0 to 256 [ 143.484141][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4197'. [ 143.510541][ T29] audit: type=1400 audit(1763489709.226:5538): avc: denied { append } for pid=13819 comm="syz.3.4199" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 143.616400][T13827] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 143.643638][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4205'. [ 143.671258][T13833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.695800][T13843] loop7: detected capacity change from 0 to 1024 [ 143.703080][T13843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.713817][ T29] audit: type=1400 audit(1763489709.426:5539): avc: denied { read } for pid=13844 comm="syz.3.4210" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.738817][T13843] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.937158][ T29] audit: type=1400 audit(1763489709.646:5540): avc: denied { remove_name } for pid=12437 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.960642][ T29] audit: type=1400 audit(1763489709.646:5541): avc: denied { rmdir } for pid=12437 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.030356][ T29] audit: type=1400 audit(1763489709.646:5542): avc: denied { unlink } for pid=12437 comm="syz-executor" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.076844][T13854] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.283980][ T8095] bridge_slave_1: left allmulticast mode [ 144.289752][ T8095] bridge_slave_1: left promiscuous mode [ 144.295393][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.304314][ T8095] bridge_slave_0: left allmulticast mode [ 144.310020][ T8095] bridge_slave_0: left promiscuous mode [ 144.315812][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.382283][ T8095] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.393234][ T8095] bond_slave_0: left promiscuous mode [ 144.405499][ T8095] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.441370][ T8095] bond_slave_1: left promiscuous mode [ 144.454380][ T8095] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 144.474597][ T8095] dummy0: left promiscuous mode [ 144.483837][ T8095] $Hÿ (unregistering): Released all slaves [ 144.483862][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4226'. [ 144.501425][ T8095] bond0 (unregistering): Released all slaves [ 144.550134][T13892] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4227'. [ 144.559453][T13869] lo speed is unknown, defaulting to 1000 [ 144.638319][ T8095] hsr_slave_0: left promiscuous mode [ 144.662203][T13906] loop6: detected capacity change from 0 to 512 [ 144.677803][ T8095] hsr_slave_1: left promiscuous mode [ 144.683829][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.692376][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.693767][T13908] SELinux: Context @ is not valid (left unmapped). [ 144.720495][T13906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.747402][T13906] ext4 filesystem being mounted at /144/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.770655][ T8095] team0 (unregistering): Port device team_slave_1 removed [ 144.780894][ T8095] team0 (unregistering): Port device team_slave_0 removed [ 144.858050][T11425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.887049][T13869] chnl_net:caif_netlink_parms(): no params data found [ 144.932994][T13869] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.940176][T13869] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.947476][T13869] bridge_slave_0: entered allmulticast mode [ 144.954285][T13869] bridge_slave_0: entered promiscuous mode [ 144.961165][T13869] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.968236][T13869] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.975635][T13869] bridge_slave_1: entered allmulticast mode [ 144.982412][T13869] bridge_slave_1: entered promiscuous mode [ 145.002016][T13869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.013385][T13869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.035916][T13869] team0: Port device team_slave_0 added [ 145.043386][T13869] team0: Port device team_slave_1 added [ 145.066587][T13869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.073644][T13869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.099665][T13869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.112001][T13869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.119024][T13869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.144999][T13869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.184563][T13869] hsr_slave_0: entered promiscuous mode [ 145.190620][T13869] hsr_slave_1: entered promiscuous mode [ 145.196711][T13869] debugfs: 'hsr0' already exists in 'hsr' [ 145.202461][T13869] Cannot create hsr debugfs directory [ 145.306130][T13869] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 145.314985][T13869] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 145.325905][T13869] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 145.335833][T13869] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 145.353519][T13869] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.360655][T13869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.367992][T13869] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.375049][T13869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.438943][T13869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.453602][T13869] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.468745][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.477005][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.491556][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.498744][ T8096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.509296][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.516377][ T8096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.591261][T13869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.643103][T13957] netlink: 'syz.0.4246': attribute type 1 has an invalid length. [ 145.650961][T13957] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4246'. [ 145.800901][T13869] veth0_vlan: entered promiscuous mode [ 145.811655][T13869] veth1_vlan: entered promiscuous mode [ 145.842090][T13869] veth0_macvtap: entered promiscuous mode [ 145.854517][T13869] veth1_macvtap: entered promiscuous mode [ 145.868827][T13869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.890995][T13869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.903073][ T8096] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.921315][ T8096] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.969827][ T8081] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.990853][ T8081] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.115309][T14012] SELinux: failed to load policy [ 146.845525][T14076] lo speed is unknown, defaulting to 1000 [ 146.859803][T14082] SELinux: failed to load policy [ 147.052427][T14097] loop6: detected capacity change from 0 to 164 [ 147.080317][T14097] syz.6.4306: attempt to access beyond end of device [ 147.080317][T14097] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 147.114958][T14097] syz.6.4306: attempt to access beyond end of device [ 147.114958][T14097] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.213794][T14103] loop6: detected capacity change from 0 to 1024 [ 147.225185][T14103] EXT4-fs: Ignoring removed orlov option [ 147.251079][T14103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.557499][T14128] lo speed is unknown, defaulting to 1000 [ 147.918778][T14103] ================================================================== [ 147.926894][T14103] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 147.934265][T14103] [ 147.936598][T14103] write to 0xffff888107233b04 of 4 bytes by interrupt on cpu 0: [ 147.944221][T14103] __xa_clear_mark+0x1c6/0x1e0 [ 147.948980][T14103] __folio_end_writeback+0xf7/0x3b0 [ 147.954178][T14103] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 147.960428][T14103] folio_end_writeback+0x1c/0x70 [ 147.965370][T14103] ext4_finish_bio+0x459/0x8c0 [ 147.970144][T14103] ext4_end_bio+0x298/0x3b0 [ 147.974652][T14103] bio_endio+0x37e/0x420 [ 147.978894][T14103] blk_update_request+0x336/0x730 [ 147.983924][T14103] blk_mq_end_request+0x26/0x50 [ 147.988778][T14103] lo_complete_rq+0x98/0x140 [ 147.993372][T14103] blk_done_softirq+0x77/0xb0 [ 147.998049][T14103] handle_softirqs+0xba/0x290 [ 148.002812][T14103] run_ksoftirqd+0x1c/0x30 [ 148.007234][T14103] smpboot_thread_fn+0x32b/0x530 [ 148.012167][T14103] kthread+0x489/0x510 [ 148.016246][T14103] ret_from_fork+0x122/0x1b0 [ 148.020837][T14103] ret_from_fork_asm+0x1a/0x30 [ 148.025607][T14103] [ 148.027936][T14103] read to 0xffff888107233b04 of 4 bytes by task 14103 on cpu 1: [ 148.035557][T14103] xas_find_marked+0x5dc/0x620 [ 148.040309][T14103] find_get_entry+0x5d/0x380 [ 148.044894][T14103] filemap_get_folios_tag+0x92/0x210 [ 148.050177][T14103] mpage_prepare_extent_to_map+0x320/0xc00 [ 148.055972][T14103] ext4_do_writepages+0x708/0x2750 [ 148.061071][T14103] ext4_writepages+0x176/0x300 [ 148.065821][T14103] do_writepages+0x1c6/0x310 [ 148.070403][T14103] file_write_and_wait_range+0x156/0x2c0 [ 148.076028][T14103] generic_buffers_fsync_noflush+0x45/0x120 [ 148.081917][T14103] ext4_sync_file+0x1ab/0x690 [ 148.086581][T14103] vfs_fsync_range+0x10d/0x130 [ 148.091337][T14103] ext4_buffered_write_iter+0x34f/0x3c0 [ 148.096977][T14103] ext4_file_write_iter+0x387/0xf60 [ 148.102160][T14103] iter_file_splice_write+0x666/0xa60 [ 148.107520][T14103] direct_splice_actor+0x156/0x2a0 [ 148.112619][T14103] splice_direct_to_actor+0x312/0x680 [ 148.117981][T14103] do_splice_direct+0xda/0x150 [ 148.122738][T14103] do_sendfile+0x380/0x650 [ 148.127156][T14103] __x64_sys_sendfile64+0x105/0x150 [ 148.132349][T14103] x64_sys_call+0x2bb4/0x3000 [ 148.137018][T14103] do_syscall_64+0xd2/0x200 [ 148.141513][T14103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.147394][T14103] [ 148.149702][T14103] value changed: 0x04000021 -> 0x02000021 [ 148.155398][T14103] [ 148.157703][T14103] Reported by Kernel Concurrency Sanitizer on: [ 148.163842][T14103] CPU: 1 UID: 0 PID: 14103 Comm: syz.6.4309 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.175210][T14103] Tainted: [W]=WARN [ 148.179005][T14103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.189055][T14103] ================================================================== [ 148.240558][T11425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.