last executing test programs: 6.592027114s ago: executing program 4 (id=2876): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 6.510399095s ago: executing program 2 (id=2878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x6}, {}, {0x0, 0x0, 0xfe}, {0xf792}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) io_setup(0x3, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r4, 0x7, 0x80000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}}, {{0x4e22, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, {[@eol]}}}}}}}, 0x0) 5.626090292s ago: executing program 2 (id=2883): gettid() r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000030000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'cpu'}, {0x2d, 'memory'}, {0x2d, 'rlimit'}, {0x2d, 'devices'}, {0x2b, 'devices'}, {0x2d, 'net_prio'}, {0x2b, 'perf_event'}, {0x2d, 'perf_event'}, {0x2b, 'cpuacct'}, {0x2b, 'rlimit'}]}, 0x5a) 5.150635532s ago: executing program 1 (id=2885): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/119, 0x20}], 0x1) madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4) 5.078327283s ago: executing program 1 (id=2886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) unshare(0x4000400) pwritev(r1, 0x0, 0x0, 0xfffffffd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f0000000040), 0x8) 4.744786669s ago: executing program 4 (id=2887): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r2 = syz_usb_connect(0x5, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e00"], 0x0) gettid() syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000080)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 4.663382161s ago: executing program 2 (id=2888): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@gettaction={0x2c, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x1d, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xaaff}}]}]}, 0x2c}}, 0x0) 4.381254906s ago: executing program 0 (id=2890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) unshare(0x64000600) 4.278536568s ago: executing program 3 (id=2891): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) utime(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) capset(0x0, &(0x7f0000000080)={0x0, 0x0, 0x40000000, 0x0, 0x0, 0xf7fffffd}) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 4.251555059s ago: executing program 3 (id=2892): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 4.20502267s ago: executing program 1 (id=2893): sched_setscheduler(0x0, 0x1, 0x0) getrlimit(0x3, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = dup(0xffffffffffffffff) read$FUSE(r3, &(0x7f0000002200)={0x2020}, 0x36a) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) unshare(0x2a020400) 3.642011061s ago: executing program 3 (id=2894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.404169305s ago: executing program 0 (id=2895): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000005c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 3.14426269s ago: executing program 4 (id=2896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x8, 0x10001, 0x80000000000006, 0x1000000006, 0x10007ffffe]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3e, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x280040, 0x0) 3.051802112s ago: executing program 2 (id=2897): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="686561702c657874656e745f63616368652c616c6c6f635f6d6f64653d64656661756c742c616374697665806c6f67733d362c6e6f626172726965722c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303032332c646973636172642c6d6f64653d61646170746976652c592a5477080ff99b64653d706f7369782c616c6c0a54e2da6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c00"], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r4, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) 3.050419832s ago: executing program 0 (id=2898): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/119, 0x20}], 0x1) madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4) 2.976206483s ago: executing program 0 (id=2899): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_clone(0x1180, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) 2.749027808s ago: executing program 3 (id=2900): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000bc0)=""/249) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) setgroups(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), 0x0}, 0x20) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 2.392070924s ago: executing program 1 (id=2901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.283350527s ago: executing program 3 (id=2902): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) readv(r2, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1.864743445s ago: executing program 0 (id=2903): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) socket(0xc1acd62b43d46ca9, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 1.805798136s ago: executing program 4 (id=2904): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x30) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x581, 0x400, 0x0, {0x0, 0x0, 0x0, r2, 0x48005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xffffff4d, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 1.763588616s ago: executing program 2 (id=2905): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x3f9a, 0x0, 0x10001}, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) 1.632614869s ago: executing program 4 (id=2906): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x1010000, &(0x7f0000000980)=ANY=[@ANYRES64=0x0], 0x3, 0x363, &(0x7f0000000280)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") 1.490626412s ago: executing program 1 (id=2907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xfffe, @rand_addr=0x64010100}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x7, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x99fe681834aac99b, 0x0, 0x0) 251.015646ms ago: executing program 0 (id=2908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, &(0x7f00000003c0)=0x5c) 245.165516ms ago: executing program 4 (id=2909): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_emit_ethernet(0x9a, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 231.478456ms ago: executing program 2 (id=2910): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 225.521466ms ago: executing program 3 (id=2911): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) write(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2912): r0 = syz_open_dev$evdev(0x0, 0x0, 0x802) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mknod$loop(0x0, 0x4, 0x1) ioprio_set$pid(0x3, r1, 0x0) r2 = timerfd_create(0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/166, 0xa6, 0x40, &(0x7f0000000280)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/43, 0x2b}], 0x1) write$uinput_user_dev(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") kernel console output (not intermixed with test programs): rror [ 126.949232][ T3645] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 126.961434][ T3645] EXT4-fs error (device loop3): ext4_punch_hole:4154: inode #12: comm syz.3.1119: mark_inode_dirty error [ 126.975905][ T3644] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #12: block 37: comm syz.3.1119: lblock 0 mapped to illegal pblock 37 (length 16) [ 126.995105][ T3644] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #12: block 20: comm syz.3.1119: lblock 16 mapped to illegal pblock 20 (length 15) [ 127.014526][ T3644] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #12: block 63: comm syz.3.1119: lblock 31 mapped to illegal pblock 63 (length 1) [ 127.037768][ T3644] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #12: block 37: comm syz.3.1119: lblock 0 mapped to illegal pblock 37 (length 4) [ 127.055709][ T3644] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #12: block 37: comm syz.3.1119: lblock 0 mapped to illegal pblock 37 (length 4) [ 127.094677][ T283] EXT4-fs (loop3): unmounting filesystem. [ 127.300030][ T3667] overlayfs: failed to clone upperpath [ 127.646935][ T3675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 127.692945][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.733544][ T3675] device veth1_macvtap left promiscuous mode [ 127.756121][ T3675] device veth1_macvtap entered promiscuous mode [ 127.797112][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.829419][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.863052][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.900128][ T571] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.908173][ T571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.938570][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.957500][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.968204][ T571] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.976669][ T571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.986600][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.997933][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 128.009643][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.021295][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 128.034856][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.046428][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.056590][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.067446][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.078314][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.089406][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.100419][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.110872][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.125605][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.149327][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.161869][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.174035][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.184796][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.196015][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.207197][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.218918][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.239114][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.258290][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.271124][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 128.288284][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 128.307817][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 128.334205][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 128.343914][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 128.355964][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 128.365295][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 128.375468][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 128.389313][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.463012][ T3675] syz.3.1126 (3675) used greatest stack depth: 20576 bytes left [ 128.471747][ T3689] loop1: detected capacity change from 0 to 4096 [ 128.518998][ T3689] EXT4-fs (loop1): Test dummy encryption mode enabled [ 128.551286][ T3689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.607052][ T28] audit: type=1400 audit(1756953572.392:915): avc: denied { setopt } for pid=3688 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.691214][ T284] EXT4-fs (loop1): unmounting filesystem. [ 128.772467][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 129.118473][ T3703] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 129.131505][ T3703] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 129.147998][ T3703] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.365830][ T1403] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.572449][ T1403] usb 4-1: Using ep0 maxpacket: 32 [ 129.580491][ T1403] usb 4-1: config 1 has an invalid interface number: 137 but max is 0 [ 129.590758][ T1403] usb 4-1: config 1 has no interface number 0 [ 129.598057][ T1403] usb 4-1: config 1 interface 137 has no altsetting 0 [ 129.610262][ T1403] usb 4-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 129.620740][ T1403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.632272][ T1403] usb 4-1: Product: syz [ 129.637126][ T1403] usb 4-1: Manufacturer: syz [ 129.643008][ T1403] usb 4-1: SerialNumber: syz [ 130.264533][ T1403] pl2303 4-1:1.137: required interrupt-in endpoint missing [ 130.280716][ T1403] usb 4-1: USB disconnect, device number 7 [ 130.674209][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 130.688279][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 130.704307][ T3726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1144'. [ 130.714964][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 130.746811][ T3731] tipc: Enabling of bearer rejected, failed to enable media [ 131.409977][ T3756] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 131.420544][ T3756] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 131.430404][ T3756] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.752814][ T3760] device batadv_slave_1 entered promiscuous mode [ 131.774822][ T3760] device batadv_slave_1 left promiscuous mode [ 133.504483][ T3780] loop1: detected capacity change from 0 to 512 [ 133.583531][ T3780] EXT4-fs: Ignoring removed nobh option [ 133.647673][ T3780] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1158: iget: bad i_size value: 38620345925642 [ 133.672456][ T3780] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1158: couldn't read orphan inode 15 (err -117) [ 133.690849][ T3780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.792976][ T3795] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1158: bg 0: block 5: invalid block bitmap [ 133.807812][ T3795] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1348 with error 28 [ 133.868658][ T3795] EXT4-fs (loop1): This should not happen!! Data will be lost [ 133.868658][ T3795] [ 133.890731][ T3798] overlayfs: failed to clone upperpath [ 133.927901][ T3795] EXT4-fs (loop1): Total free blocks count 0 [ 133.964311][ T3795] EXT4-fs (loop1): Free/Dirty block details [ 133.977049][ T3795] EXT4-fs (loop1): free_blocks=0 [ 133.993521][ T3795] EXT4-fs (loop1): dirty_blocks=1348 [ 134.005129][ T3795] EXT4-fs (loop1): Block reservation details [ 134.018687][ T3795] EXT4-fs (loop1): i_reserved_data_blocks=1348 [ 134.096160][ T284] EXT4-fs (loop1): unmounting filesystem. [ 134.763492][ T3808] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 134.773530][ T3808] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 134.782226][ T3808] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 135.408947][ T3823] syz.4.1178[3823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.409045][ T3823] syz.4.1178[3823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.135443][ T3842] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.092352][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 137.452378][ T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 137.515244][ T28] audit: type=1400 audit(1756953581.302:916): avc: denied { nlmsg_read } for pid=3879 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 137.646046][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.675461][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.708621][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 137.742444][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.767379][ T24] usb 4-1: SerialNumber: syz [ 137.792020][ T24] usb 4-1: 0:2 : does not exist [ 138.198935][ T334] usb 4-1: USB disconnect, device number 8 [ 138.513470][ T3897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1199'. [ 139.128510][ T3914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 139.153785][ T3914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1215'. [ 139.213467][ T3914] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1215'. [ 139.949560][ T3932] device veth1_macvtap left promiscuous mode [ 143.312227][ T334] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.507292][ T334] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 143.525575][ T3968] syz.4.1222 (3968) used greatest stack depth: 19584 bytes left [ 143.525845][ T334] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.578860][ T334] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.612299][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.675003][ T334] usb 2-1: SerialNumber: syz [ 143.772275][ T1403] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 143.914941][ T334] usb 2-1: 0:2 : does not exist [ 143.927459][ T334] usb 2-1: unit 5: unexpected type 0x0d [ 143.952023][ T334] usb 2-1: USB disconnect, device number 3 [ 143.978890][ T1403] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.993831][ T1403] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.010546][ T1403] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 144.028542][ T1403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.044826][ T1403] usb 4-1: SerialNumber: syz [ 144.058895][ T1403] usb 4-1: 0:2 : does not exist [ 144.193038][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.464909][ T1403] usb 4-1: USB disconnect, device number 9 [ 145.864331][ T4037] device wg2 entered promiscuous mode [ 146.057032][ T4031] loop1: detected capacity change from 0 to 40427 [ 146.090718][ T4031] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 146.127513][ T4031] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 146.187045][ T4031] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.307409][ T4031] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 146.332260][ T4031] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 146.847420][ T284] syz-executor: attempt to access beyond end of device [ 146.847420][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.423960][ T28] audit: type=1400 audit(1756953594.302:917): avc: denied { getopt } for pid=4099 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.570322][ T28] audit: type=1400 audit(1756953595.352:918): avc: denied { create } for pid=4117 comm="syz.3.1273" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 151.695773][ T28] audit: type=1400 audit(1756953595.472:919): avc: denied { mounton } for pid=4126 comm="syz.1.1275" path="/225/file0" dev="9p" ino=4294967298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.696065][ T4127] overlayfs: statfs failed on './file0' [ 152.394813][ T4133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1280'. [ 153.392593][ T28] audit: type=1400 audit(1756953597.182:920): avc: denied { ioctl } for pid=4163 comm="syz.2.1291" path="socket:[26157]" dev="sockfs" ino=26157 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.735867][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 154.093082][ T398] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.323467][ T398] usb 2-1: Using ep0 maxpacket: 8 [ 154.338601][ T398] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 154.354722][ T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.371315][ T398] usb 2-1: Product: syz [ 154.378470][ T398] usb 2-1: Manufacturer: syz [ 154.625416][ T398] usb 2-1: SerialNumber: syz [ 154.636995][ T398] usb 2-1: config 0 descriptor?? [ 154.876819][ T334] usb 2-1: USB disconnect, device number 4 [ 155.412564][ T4207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 155.871571][ T4221] loop3: detected capacity change from 0 to 128 [ 156.256152][ T4221] syz.3.1314: attempt to access beyond end of device [ 156.256152][ T4221] loop3: rw=2049, sector=145, nr_sectors = 480 limit=128 [ 157.775194][ T4261] overlayfs: failed to clone lowerpath [ 158.985478][ T4286] loop3: detected capacity change from 0 to 40427 [ 159.022319][ T4286] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 159.031045][ T4286] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 159.113213][ T4286] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.226023][ T4286] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 159.242279][ T4286] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.456158][ T28] audit: type=1400 audit(1756953603.242:921): avc: denied { wake_alarm } for pid=4290 comm="syz.0.1348" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.868650][ T4310] overlayfs: failed to clone lowerpath [ 159.880663][ T283] syz-executor: attempt to access beyond end of device [ 159.880663][ T283] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.076260][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.193268][ T4320] device veth0_vlan left promiscuous mode [ 160.224241][ T4320] device veth0_vlan entered promiscuous mode [ 160.283523][ T4320] device veth1_macvtap left promiscuous mode [ 160.334822][ T4320] device veth1_macvtap entered promiscuous mode [ 160.373115][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.390099][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.393929][ T334] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 160.426126][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.446487][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.463011][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.479715][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.493136][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 160.503339][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.515637][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 160.533643][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.553252][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.576122][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.593616][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.605858][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.617335][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.632227][ T28] audit: type=1400 audit(1756953604.412:922): avc: denied { watch watch_reads } for pid=4346 comm="syz.2.1353" path="/file1" dev="ramfs" ino=26391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 160.633168][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.671511][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.685119][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.707590][ T28] audit: type=1400 audit(1756953604.452:923): avc: denied { execute } for pid=4346 comm="syz.2.1353" name="file0" dev="ramfs" ino=26390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 160.710497][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.756806][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.771588][ T4351] fuse: Bad value for 'fd' [ 160.779406][ T334] kernel write not supported for file bpf-prog (pid: 334 comm: kworker/1:3) [ 160.795451][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.798330][ T28] audit: type=1400 audit(1756953604.452:924): avc: denied { execute_no_trans } for pid=4346 comm="syz.2.1353" path="/file0" dev="ramfs" ino=26390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 160.823521][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.861090][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.884786][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.908635][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.928370][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.942413][ T334] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 160.961323][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.979827][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 161.006468][ T4359] loop1: detected capacity change from 0 to 256 [ 161.009589][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.036511][ T4359] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.045894][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.077150][ T4359] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 161.077448][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.104711][ T4359] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 161.112863][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.132965][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 161.141921][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 161.155773][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 161.166140][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 161.176404][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 161.185040][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 161.239248][ T24] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 161.254319][ T24] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 161.514055][ T4367] loop3: detected capacity change from 0 to 256 [ 161.532637][ T4367] exfat: Unknown parameter '' [ 162.252645][ T2449] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 163.348074][ T4397] device pim6reg1 entered promiscuous mode [ 163.533133][ T4415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'. [ 163.602391][ T4415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'. [ 163.945423][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 163.983834][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'. [ 164.479890][ T4463] loop1: detected capacity change from 0 to 8192 [ 164.566981][ T4463] loop1: p1 < > p2 < p5 > p3 p4 [ 165.492761][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 165.853504][ T4463] loop1: p3 start 83890176 is beyond EOD, truncated [ 165.908908][ T4463] loop1: p4 size 16776960 extends beyond EOD, truncated [ 165.972876][ T4463] loop1: p5 size 16776960 extends beyond EOD, truncated [ 166.172882][ T4480] device pim6reg1 entered promiscuous mode [ 166.212839][ T284] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 166.224642][ T337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.300321][ T337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.320106][ T337] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.350298][ T337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.380104][ T337] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.392308][ T28] audit: type=1400 audit(1756953610.182:925): avc: denied { read } for pid=4486 comm="syz.3.1404" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 166.430290][ T337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.460122][ T337] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.472844][ T337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.480340][ T28] audit: type=1400 audit(1756953610.202:926): avc: denied { open } for pid=4486 comm="syz.3.1404" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 166.500170][ T337] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.571146][ T337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.594102][ T337] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.661235][ T779] udevd[779]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 166.674709][ T362] udevd[362]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 166.684862][ T363] udevd[363]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 166.687571][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 166.757287][ T779] udevd[779]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 166.771588][ T362] udevd[362]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 166.773678][ T363] udevd[363]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 166.810760][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 166.851722][ T779] udevd[779]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 166.852028][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 166.922142][ T28] audit: type=1400 audit(1756953610.702:927): avc: denied { watch_reads } for pid=4502 comm="syz.1.1408" path="/250" dev="tmpfs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 167.272241][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.463451][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 167.800320][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 167.814160][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 167.825704][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 167.836856][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.848604][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.859859][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 167.874988][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 167.893191][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.913035][ T24] usb 2-1: config 0 descriptor?? [ 168.006161][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 168.072111][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 168.127655][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 168.172841][ T24] usb 2-1: USB disconnect, device number 5 [ 168.193990][ T24] usblp0: removed [ 168.630584][ T4535] syz.2.1419[4535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.630673][ T4535] syz.2.1419[4535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.722216][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.973040][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 168.993966][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 169.012131][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 169.043260][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 169.062729][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.082389][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.094682][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.109683][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 169.154358][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.165889][ T24] usb 2-1: config 0 descriptor?? [ 169.245289][ T4551] netem: incorrect ge model size [ 169.253293][ T4551] netem: change failed [ 169.375804][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 169.499068][ T4576] bridge0: port 3(syz_tun) entered blocking state [ 169.511872][ T4576] bridge0: port 3(syz_tun) entered disabled state [ 169.534416][ T4576] device syz_tun entered promiscuous mode [ 169.549976][ T4576] bridge0: port 3(syz_tun) entered blocking state [ 169.557895][ T4576] bridge0: port 3(syz_tun) entered forwarding state [ 169.653136][ T28] audit: type=1400 audit(1756953613.442:928): avc: denied { read write } for pid=4505 comm="syz.1.1409" name="lp0" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 169.695056][ T4580] overlayfs: failed to clone upperpath [ 169.703083][ T398] usb 2-1: USB disconnect, device number 6 [ 169.713059][ T4580] overlayfs: failed to clone upperpath [ 169.732370][ T398] usblp0: removed [ 169.744963][ T28] audit: type=1400 audit(1756953613.442:929): avc: denied { open } for pid=4505 comm="syz.1.1409" path="/dev/usb/lp0" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 170.051852][ T4597] tipc: Failed to remove unknown binding: 66,1,1/4:2451297461/2451297463 [ 170.083029][ T4597] tipc: Failed to remove unknown binding: 66,1,1/4:2451297461/2451297463 [ 170.101750][ T4597] tipc: Failed to remove unknown binding: 66,1,1/4:2451297461/2451297463 [ 171.952317][ T4667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1461'. [ 172.995366][ T4689] syz.4.1469[4689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.995457][ T4689] syz.4.1469[4689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.031921][ T28] audit: type=1400 audit(1756953616.812:930): avc: denied { getopt } for pid=4690 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.103568][ T28] audit: type=1400 audit(1756953616.892:931): avc: denied { setopt } for pid=4693 comm="syz.4.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.224028][ T4704] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1475'. [ 173.247369][ T4707] ipt_REJECT: TCP_RESET invalid for non-tcp [ 173.268639][ T28] audit: type=1400 audit(1756953617.052:932): avc: denied { bind } for pid=4706 comm="syz.0.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.307472][ T4710] fuse: Bad value for 'fd' [ 173.546465][ T4724] syz.0.1483[4724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.546551][ T4724] syz.0.1483[4724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.568075][ T4726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4726 comm=syz.1.1482 [ 173.619779][ T4727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 173.825695][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 173.851646][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 173.881055][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 173.904932][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 173.921888][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 173.938590][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 173.959493][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 174.006814][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.072723][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.090867][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.112379][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.144205][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.157772][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.169888][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.184700][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 174.196318][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.210744][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 174.222899][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 174.245298][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.256662][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.271969][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.286755][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.296261][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.310871][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.321798][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.334181][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.346695][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.356269][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.365502][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.379105][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.449354][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.484715][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.497281][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.511438][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 174.554824][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 174.586974][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 174.638161][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 174.705078][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 174.741012][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 174.783707][ T28] audit: type=1326 audit(1756953618.572:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e4e985ba7 code=0x7ffc0000 [ 174.824111][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 174.837274][ T28] audit: type=1326 audit(1756953618.602:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e4e92adb9 code=0x7ffc0000 [ 174.884627][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 174.899471][ T28] audit: type=1326 audit(1756953618.602:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e4e985ba7 code=0x7ffc0000 [ 174.948630][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.975242][ T28] audit: type=1326 audit(1756953618.602:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e4e92adb9 code=0x7ffc0000 [ 175.040107][ T28] audit: type=1326 audit(1756953618.602:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4e98ebe9 code=0x7ffc0000 [ 175.075077][ T28] audit: type=1326 audit(1756953618.602:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4e98ebe9 code=0x7ffc0000 [ 175.219711][ T28] audit: type=1326 audit(1756953618.602:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.0.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4e98ebe9 code=0x7ffc0000 [ 176.496575][ T4820] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1516'. [ 178.223529][ T4853] loop1: detected capacity change from 0 to 512 [ 178.276240][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 178.288017][ T4853] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.315858][ T284] EXT4-fs (loop1): unmounting filesystem. [ 179.826773][ T4870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4870 comm=syz.4.1532 [ 179.992952][ T4870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1532'. [ 181.322476][ T4914] loop1: detected capacity change from 0 to 2048 [ 181.342603][ T4917] bridge0: port 1(veth0_to_team) entered blocking state [ 181.368581][ T4914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.396585][ T4917] bridge0: port 1(veth0_to_team) entered disabled state [ 181.417225][ T4917] device veth0_to_team entered promiscuous mode [ 181.448693][ T4927] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 181.451069][ T4917] bridge0: port 1(veth0_to_team) entered blocking state [ 181.476080][ T4917] bridge0: port 1(veth0_to_team) entered forwarding state [ 181.500381][ T4927] EXT4-fs (loop1): Remounting filesystem read-only [ 181.609863][ T284] EXT4-fs (loop1): unmounting filesystem. [ 182.261398][ T4951] 9pnet_fd: Insufficient options for proto=fd [ 182.646821][ T4961] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1559'. [ 183.276383][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 183.276404][ T28] audit: type=1400 audit(1756953627.062:1044): avc: denied { write } for pid=4980 comm="syz.4.1566" name="file0" dev="tmpfs" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 183.335304][ T28] audit: type=1400 audit(1756953627.062:1045): avc: denied { open } for pid=4980 comm="syz.4.1566" path="/370/file0" dev="tmpfs" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 183.426939][ T4989] loop3: detected capacity change from 0 to 2048 [ 183.461609][ T4989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 183.547683][ T4996] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 183.582712][ T4996] EXT4-fs (loop3): Remounting filesystem read-only [ 184.834964][ T283] EXT4-fs (loop3): unmounting filesystem. [ 185.061160][ T5016] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1578'. [ 185.074023][ T5016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1578'. [ 185.504489][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1580'. [ 185.546069][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.591387][ T5032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 185.855636][ T5045] loop3: detected capacity change from 0 to 512 [ 185.913331][ T5045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 185.935765][ T5045] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.107109][ T283] EXT4-fs (loop3): unmounting filesystem. [ 186.280475][ T5059] loop3: detected capacity change from 0 to 2048 [ 186.401307][ T5059] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.292755][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 189.205770][ T5067] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 189.352546][ T5067] EXT4-fs (loop3): Remounting filesystem read-only [ 189.618085][ T283] EXT4-fs (loop3): unmounting filesystem. [ 189.645404][ T5078] ------------[ cut here ]------------ [ 189.656471][ T5078] WARNING: CPU: 0 PID: 5078 at mm/page_alloc.c:5841 __alloc_pages+0x272/0x450 [ 189.669341][ T5078] Modules linked in: [ 189.673702][ T5078] CPU: 0 PID: 5078 Comm: syz.4.1602 Not tainted syzkaller #0 [ 189.686306][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.698243][ T5078] RIP: 0010:__alloc_pages+0x272/0x450 [ 189.705832][ T5078] Code: 0c 25 28 00 00 00 48 3b 8c 24 c0 00 00 00 0f 85 a3 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 02 8a bf 05 01 <0f> 0b eb a5 a9 00 00 08 00 48 8b 54 24 08 75 17 44 89 f6 81 e6 7f [ 189.727318][ T5078] RSP: 0018:ffffc900102ef900 EFLAGS: 00010246 [ 189.735012][ T5078] RAX: ffffc900102ef900 RBX: 000000000000000f RCX: 0000000000000000 [ 189.745003][ T5078] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc900102ef988 [ 189.753847][ T5078] RBP: ffffc900102efa08 R08: dffffc0000000000 R09: ffffc900102ef970 [ 189.763668][ T5078] R10: fffff5200205df31 R11: 1ffff9200205df2e R12: dffffc0000000000 [ 189.778757][ T5078] R13: 0000000000000000 R14: 0000000000040d40 R15: 1ffff9200205df24 [ 189.788694][ T5078] FS: 00007f710cad46c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 189.801957][ T5078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.812332][ T5078] CR2: 0000200000001000 CR3: 00000001120ed000 CR4: 00000000003506b0 [ 189.823626][ T5078] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.833570][ T5078] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.843047][ T5078] Call Trace: [ 189.847959][ T5078] [ 189.851516][ T5078] ? __cfi___alloc_pages+0x10/0x10 [ 189.857589][ T5078] __kmalloc_large_node+0xa1/0x1c0 [ 189.863866][ T5078] ? incfs_realloc_mount_info+0x99/0x440 [ 189.871527][ T5078] __kmalloc+0xe0/0x1e0 [ 189.876757][ T5078] incfs_realloc_mount_info+0x99/0x440 [ 189.883461][ T5078] incfs_alloc_mount_info+0x476/0x540 [ 189.889685][ T5078] incfs_mount_fs+0x3c6/0x880 [ 189.895188][ T5078] ? __cfi_incfs_mount_fs+0x10/0x10 [ 189.901981][ T5078] ? vfs_parse_fs_string+0xfe/0x160 [ 189.907935][ T5078] legacy_get_tree+0xfe/0x1a0 [ 189.913974][ T5078] ? __cfi_incfs_mount_fs+0x10/0x10 [ 189.920612][ T5078] vfs_get_tree+0x9a/0x270 [ 189.925801][ T5078] do_new_mount+0x25a/0xa20 [ 189.930720][ T5078] path_mount+0x675/0x1010 [ 189.936452][ T5078] ? user_path_at_empty+0x161/0x1c0 [ 189.942597][ T5078] __se_sys_mount+0x318/0x380 [ 189.948252][ T5078] ? __this_cpu_preempt_check+0x13/0x20 [ 189.954352][ T5078] ? __x64_sys_mount+0xd0/0xd0 [ 189.959909][ T5078] ? __kasan_check_write+0x14/0x20 [ 189.965923][ T5078] ? fpregs_restore_userregs+0x128/0x260 [ 189.972660][ T5078] __x64_sys_mount+0xbf/0xd0 [ 189.978357][ T5078] x64_sys_call+0x65d/0x9a0 [ 189.983286][ T5078] do_syscall_64+0x4c/0xa0 [ 189.988225][ T5078] ? clear_bhb_loop+0x30/0x80 [ 189.993710][ T5078] ? clear_bhb_loop+0x30/0x80 [ 190.003693][ T5078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.011306][ T5078] RIP: 0033:0x7f710bb8ebe9 [ 190.017352][ T5078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.047368][ T5078] RSP: 002b:00007f710cad4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 190.060879][ T5078] RAX: ffffffffffffffda RBX: 00007f710bdc5fa0 RCX: 00007f710bb8ebe9 [ 190.072114][ T5078] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000000 [ 190.088481][ T5078] RBP: 00007f710bc11e19 R08: 0000200000000200 R09: 0000000000000000 [ 190.102239][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.120697][ T5078] R13: 00007f710bdc6038 R14: 00007f710bdc5fa0 R15: 00007fff854885b8 [ 190.133637][ T5078] [ 190.136994][ T5078] ---[ end trace 0000000000000000 ]--- [ 190.149665][ T5078] incfs: Error allocating mount info. -12 [ 190.186837][ T5078] incfs: mount failed -12 [ 190.351732][ T5091] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.432314][ T288] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 190.568528][ T5105] device bridge_slave_0 entered promiscuous mode [ 191.352561][ T5127] loop1: detected capacity change from 0 to 8192 [ 191.383627][ T5127] loop1: p1 < > p3 < p5 > p4 [ 191.389153][ T5127] loop1: partition table partially beyond EOD, truncated [ 191.398466][ T5127] loop1: p1 start 4294967040 is beyond EOD, truncated [ 191.492634][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 192.325504][ T5132] bridge0: port 1(veth0_to_team) entered blocking state [ 192.376915][ T288] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 192.400771][ T5132] bridge0: port 1(veth0_to_team) entered disabled state [ 192.410759][ T5132] device veth0_to_team entered promiscuous mode [ 192.510626][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 192.510652][ T779] udevd[779]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 192.525207][ T4523] udevd[4523]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 192.711113][ T5154] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 192.775057][ T5154] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.100086][ T5177] loop1: detected capacity change from 0 to 128 [ 194.148770][ T5177] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 194.160815][ T5177] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.196462][ T5177] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 194.238474][ T5177] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)" [ 194.275465][ T5177] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 194.315396][ T5177] fscrypt: loop1: 4 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 16 [ 194.347382][ T28] audit: type=1400 audit(1756953638.132:1046): avc: denied { unlink } for pid=284 comm="syz-executor" name="memory.events" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 194.379927][ T284] EXT4-fs (loop1): unmounting filesystem. [ 194.620139][ T5194] syz.1.1637[5194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.620531][ T5194] syz.1.1637[5194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.676735][ T5194] loop1: detected capacity change from 0 to 256 [ 194.749476][ T5194] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 196.877130][ T5223] loop1: detected capacity change from 0 to 2048 [ 196.894995][ T5223] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.036763][ T5227] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 197.056792][ T5227] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1850 with error 28 [ 197.074411][ T5227] EXT4-fs (loop1): This should not happen!! Data will be lost [ 197.074411][ T5227] [ 197.085594][ T5227] EXT4-fs (loop1): Total free blocks count 0 [ 197.093300][ T5227] EXT4-fs (loop1): Free/Dirty block details [ 197.100885][ T5227] EXT4-fs (loop1): free_blocks=2415919104 [ 197.108457][ T5227] EXT4-fs (loop1): dirty_blocks=1856 [ 197.115115][ T5227] EXT4-fs (loop1): Block reservation details [ 197.124025][ T5227] EXT4-fs (loop1): i_reserved_data_blocks=116 [ 197.711811][ T455] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 198.589468][ T5253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 198.683249][ T5258] loop3: detected capacity change from 0 to 512 [ 198.767240][ T5258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.789170][ T5258] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.862710][ T283] EXT4-fs (loop3): unmounting filesystem. [ 199.494056][ T5278] loop3: detected capacity change from 0 to 8192 [ 199.555098][ T5278] loop3: p1 < > p3 < p5 > p4 [ 199.561203][ T5278] loop3: partition table partially beyond EOD, truncated [ 199.571168][ T5278] loop3: p1 start 4294967040 is beyond EOD, truncated [ 200.364332][ T102] loop3: p1 < > p3 < p5 > p4 [ 200.370446][ T102] loop3: partition table partially beyond EOD, truncated [ 200.379356][ T102] loop3: p1 start 4294967040 is beyond EOD, truncated [ 200.428246][ T337] udevd[337]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 200.440935][ T4523] udevd[4523]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 200.456195][ T779] udevd[779]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 200.493236][ T779] udevd[779]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 200.493273][ T337] udevd[337]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 200.509183][ T4523] udevd[4523]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 201.512091][ T5320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 202.712293][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 203.249085][ T5358] xt_TPROXY: Can be used only with -p tcp or -p udp [ 204.714857][ T5364] loop3: detected capacity change from 0 to 512 [ 204.929177][ T5364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 205.006256][ T5364] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.083159][ T5374] device wireguard0 entered promiscuous mode [ 205.111488][ T5364] EXT4-fs (loop3): unmounting filesystem. [ 205.788533][ T28] audit: type=1400 audit(1756953649.572:1047): avc: denied { write } for pid=5400 comm="syz.3.1702" path="socket:[30797]" dev="sockfs" ino=30797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.790015][ T5447] loop1: detected capacity change from 0 to 512 [ 208.901791][ T5447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 208.924395][ T5454] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1716'. [ 208.946501][ T5447] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.982301][ T5454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1716'. [ 209.002209][ T5454] tipc: MTU too low for tipc bearer [ 209.080317][ T284] EXT4-fs (loop1): unmounting filesystem. [ 209.192126][ T5466] loop1: detected capacity change from 0 to 512 [ 209.232043][ T5466] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.276662][ T5466] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.293034][ T5466] EXT4-fs (loop1): Test dummy encryption mode enabled [ 209.311400][ T5466] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 209.377618][ T5466] EXT4-fs (loop1): 1 truncate cleaned up [ 209.386120][ T5466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 209.417971][ T5463] fscrypt: AES-256-XTS using blk-crypto-fallback [ 209.505904][ T284] EXT4-fs (loop1): unmounting filesystem. [ 209.961248][ T28] audit: type=1400 audit(1756953653.742:1048): avc: denied { mounton } for pid=5484 comm="syz.0.1726" path="/file0" dev="rootfs" ino=30901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 210.172289][ T28] audit: type=1400 audit(1756953653.782:1049): avc: denied { associate } for pid=5487 comm="syz.0.1726" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 211.449795][ T28] audit: type=1326 audit(1756953655.232:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.3.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 211.498986][ T28] audit: type=1326 audit(1756953655.232:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.3.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 211.573198][ T28] audit: type=1326 audit(1756953655.262:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.3.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 211.662251][ T28] audit: type=1326 audit(1756953655.262:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.3.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 211.736171][ T28] audit: type=1326 audit(1756953655.262:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.3.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 211.825593][ T28] audit: type=1326 audit(1756953655.262:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.3.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 211.934215][ T28] audit: type=1326 audit(1756953655.262:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.3.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 211.993070][ T28] audit: type=1326 audit(1756953655.262:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.3.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 212.035546][ T28] audit: type=1326 audit(1756953655.262:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.3.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 212.072621][ T28] audit: type=1326 audit(1756953655.262:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.3.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 216.038050][ T5599] loop3: detected capacity change from 0 to 512 [ 216.060694][ T5599] EXT4-fs (loop3): Test dummy encryption mode enabled [ 216.069468][ T5601] device bridge_slave_0 entered promiscuous mode [ 216.078878][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.115293][ T5599] EXT4-fs error (device loop3): __ext4_iget:5079: inode #11: block 1: comm syz.3.1757: invalid block [ 216.152311][ T5599] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1757: couldn't read orphan inode 11 (err -117) [ 216.162020][ T5609] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1762'. [ 216.175953][ T5599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 216.239087][ T283] EXT4-fs (loop3): unmounting filesystem. [ 216.405315][ T5612] loop1: detected capacity change from 0 to 8192 [ 217.242672][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 217.303366][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.425041][ T5642] device veth1_macvtap left promiscuous mode [ 217.453271][ T5642] device veth1_macvtap entered promiscuous mode [ 217.485801][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'. [ 217.560452][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.570363][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.580884][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.591634][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.622673][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.633868][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.652844][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 217.668395][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.686294][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 217.703254][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.718469][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.738435][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.752599][ T582] bridge0: port 1(veth0_to_team) entered blocking state [ 217.760457][ T582] bridge0: port 1(veth0_to_team) entered forwarding state [ 217.772820][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.800305][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.821573][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.852621][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.870141][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.881537][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.892556][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.902580][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.911508][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.922086][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.932629][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.943430][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.958290][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.971408][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.981804][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.061897][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.184572][ T5665] syz.3.1779[5665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.184919][ T5665] syz.3.1779[5665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.242506][ T5665] loop3: detected capacity change from 0 to 256 [ 218.295510][ T5665] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 222.093534][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 222.257462][ T5731] loop3: detected capacity change from 0 to 256 [ 222.269601][ T5731] exfat: Deprecated parameter 'namecase' [ 222.277154][ T5731] exfat: Deprecated parameter 'utf8' [ 222.297449][ T5731] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 224.630560][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 224.630576][ T28] audit: type=1326 audit(1756953668.402:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 224.671267][ T28] audit: type=1326 audit(1756953668.412:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 224.702663][ T28] audit: type=1326 audit(1756953668.452:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 224.732408][ T28] audit: type=1326 audit(1756953668.452:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 224.772240][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 224.809390][ T28] audit: type=1326 audit(1756953668.452:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 224.838064][ T28] audit: type=1326 audit(1756953668.452:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a2e38d550 code=0x7ffc0000 [ 224.883341][ T28] audit: type=1326 audit(1756953668.452:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 224.951947][ T28] audit: type=1326 audit(1756953668.452:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x7ffc0000 [ 225.020559][ T28] audit: type=1326 audit(1756953668.452:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.3.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a2e38d550 code=0x7ffc0000 [ 225.116466][ T28] audit: type=1400 audit(1756953668.452:1165): avc: denied { write } for pid=5752 comm="syz.3.1804" name="netstat" dev="proc" ino=4026532320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 226.605553][ T5813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1825'. [ 228.145165][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 228.179365][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1830'. [ 228.474099][ T5848] netlink: 'syz.2.1837': attribute type 4 has an invalid length. [ 228.494266][ T5848] netlink: 'syz.2.1837': attribute type 4 has an invalid length. [ 228.516593][ T5850] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1836'. [ 229.249510][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 230.035118][ T5883] tipc: Cannot configure node identity twice [ 230.334783][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 230.334798][ T28] audit: type=1400 audit(1756953674.122:1174): avc: denied { unmount } for pid=5887 comm="syz.3.1853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 230.419832][ T28] audit: type=1400 audit(1756953674.202:1175): avc: denied { mounton } for pid=5894 comm="syz.3.1855" path="/346/file0" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 232.496258][ T28] audit: type=1326 audit(1756953676.282:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.1862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7fef8ebe9 code=0x0 [ 232.663590][ T5925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 233.934060][ T5957] syz.2.1872[5957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 233.934710][ T5957] syz.2.1872[5957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.646188][ T28] audit: type=1326 audit(1756953680.432:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.3.1876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a2e38ebe9 code=0x0 [ 236.858951][ T5978] loop3: detected capacity change from 0 to 8192 [ 237.043649][ T5997] bridge0: port 3(syz_tun) entered disabled state [ 237.107845][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.115763][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.597842][ T28] audit: type=1400 audit(1756953681.382:1178): avc: denied { read } for pid=6015 comm="syz.1.1887" path="socket:[32043]" dev="sockfs" ino=32043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.467125][ T6031] bridge: RTM_NEWNEIGH with invalid ether address [ 239.933092][ T28] audit: type=1326 audit(1756953683.712:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.0.1896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e4e98ebe9 code=0x0 [ 240.094813][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 241.701415][ T6071] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2923761004/2923761006 [ 241.895501][ T6084] device pim6reg1 entered promiscuous mode [ 242.025777][ T6099] loop3: detected capacity change from 0 to 128 [ 242.060371][ T6099] FAT-fs (loop3): Unrecognized mount option "s.Yhortna" or missing value [ 242.671554][ T6113] loop1: detected capacity change from 0 to 2048 [ 243.272809][ T6113] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 244.090119][ T6122] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 244.519085][ T6122] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 246 with error 28 [ 244.570880][ T6122] EXT4-fs (loop1): This should not happen!! Data will be lost [ 244.570880][ T6122] [ 244.584359][ T6122] EXT4-fs (loop1): Total free blocks count 0 [ 244.613375][ T6122] EXT4-fs (loop1): Free/Dirty block details [ 244.624073][ T6122] EXT4-fs (loop1): free_blocks=2415919104 [ 244.633890][ T6122] EXT4-fs (loop1): dirty_blocks=256 [ 244.640580][ T6122] EXT4-fs (loop1): Block reservation details [ 244.649245][ T6122] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 244.670149][ T284] EXT4-fs (loop1): unmounting filesystem. [ 245.394508][ T6145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1931'. [ 245.449589][ T6145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1931'. [ 245.525702][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 245.568138][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1934'. [ 246.112449][ T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 246.336204][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 246.388925][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.400870][ T6] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 246.411587][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.424507][ T6] usb 4-1: config 0 descriptor?? [ 246.794995][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 246.834683][ T6] hid-multitouch 0003:0EEF:72C4.0002: item fetching failed at offset 1/5 [ 246.846662][ T6] hid-multitouch: probe of 0003:0EEF:72C4.0002 failed with error -22 [ 247.053613][ T6] usb 4-1: USB disconnect, device number 10 [ 247.277380][ T6179] 9pnet: p9_errstr2errno: server reported unknown error [ 247.380233][ T28] audit: type=1400 audit(1756953691.162:1180): avc: denied { write } for pid=6183 comm="syz.1.1943" path="socket:[32856]" dev="sockfs" ino=32856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 247.654408][ T28] audit: type=1326 audit(1756953691.442:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 247.729437][ T28] audit: type=1326 audit(1756953691.472:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 247.845409][ T28] audit: type=1326 audit(1756953691.472:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 247.899296][ T6198] loop3: detected capacity change from 0 to 4096 [ 247.997309][ T6198] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.080351][ T28] audit: type=1326 audit(1756953691.472:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 248.117672][ T6198] EXT4-fs (loop3): Test dummy encryption mode enabled [ 248.497906][ T28] audit: type=1326 audit(1756953691.472:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 248.596499][ T6198] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 248.681368][ T28] audit: type=1326 audit(1756953691.472:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 248.713555][ T28] audit: type=1326 audit(1756953691.482:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 248.871624][ T28] audit: type=1326 audit(1756953691.482:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 249.012261][ T28] audit: type=1326 audit(1756953691.482:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 250.471732][ T283] EXT4-fs (loop3): unmounting filesystem. [ 251.659511][ T6271] overlayfs: failed to clone upperpath [ 251.691791][ T6273] incfs: Can't find or create .index dir in ./file0 [ 251.701712][ T6273] incfs: mount failed -14 [ 251.785214][ T6279] xt_bpf: check failed: parse error [ 251.902611][ T39] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 252.103618][ T39] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.123677][ T39] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 252.134777][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.153657][ T39] usb 4-1: config 0 descriptor?? [ 252.163323][ T39] usb 4-1: bad CDC descriptors [ 252.367220][ T6270] loop3: detected capacity change from 0 to 512 [ 252.387988][ T6270] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1969: invalid indirect mapped block 10 (level 1) [ 252.408440][ T6270] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1969: invalid indirect mapped block 8 (level 1) [ 252.427444][ T6270] EXT4-fs (loop3): 1 truncate cleaned up [ 252.434640][ T6270] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 252.440431][ T6285] incfs: Backing dir is not set, filesystem can't be mounted. [ 252.446719][ T6270] EXT4-fs (loop3): unmounting filesystem. [ 252.470916][ T6285] incfs: mount failed -2 [ 253.023443][ T6] usb 4-1: USB disconnect, device number 11 [ 253.697602][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 253.697618][ T28] audit: type=1400 audit(1756953697.482:1227): avc: denied { read write } for pid=6327 comm="syz.3.1990" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 253.734082][ T28] audit: type=1400 audit(1756953697.512:1228): avc: denied { open } for pid=6327 comm="syz.3.1990" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 253.885257][ T6334] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1991'. [ 254.331854][ T6350] loop1: detected capacity change from 0 to 512 [ 254.358262][ T6350] EXT4-fs: Ignoring removed nobh option [ 254.379070][ T6350] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.401541][ T6350] EXT4-fs (loop1): Test dummy encryption mode enabled [ 254.423263][ T6350] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1996: iget: bad i_size value: 38620345925642 [ 254.442504][ T6350] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1996: couldn't read orphan inode 15 (err -117) [ 254.470009][ T6350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 254.539654][ T284] EXT4-fs (loop1): unmounting filesystem. [ 254.852306][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.532985][ T6384] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2008'. [ 255.652702][ T6391] overlayfs: failed to clone upperpath [ 255.670624][ T6391] overlayfs: failed to clone upperpath [ 256.676965][ T28] audit: type=1400 audit(1756953700.462:1229): avc: denied { create } for pid=6413 comm="syz.4.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 257.159843][ T6424] loop3: detected capacity change from 0 to 256 [ 257.168116][ T6424] exfat: Deprecated parameter 'utf8' [ 257.176326][ T6424] exfat: Deprecated parameter 'namecase' [ 257.183063][ T6424] exfat: Deprecated parameter 'utf8' [ 257.189579][ T6424] exfat: Bad value for 'gid' [ 258.399179][ T6462] loop3: detected capacity change from 0 to 2048 [ 258.419483][ T6462] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 258.552668][ T6469] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 258.570667][ T6469] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2042 with error 28 [ 258.586161][ T6469] EXT4-fs (loop3): This should not happen!! Data will be lost [ 258.586161][ T6469] [ 258.598776][ T6469] EXT4-fs (loop3): Total free blocks count 0 [ 258.606235][ T6469] EXT4-fs (loop3): Free/Dirty block details [ 258.613599][ T6469] EXT4-fs (loop3): free_blocks=2415919104 [ 258.621685][ T6469] EXT4-fs (loop3): dirty_blocks=2048 [ 258.628678][ T6469] EXT4-fs (loop3): Block reservation details [ 258.635569][ T6469] EXT4-fs (loop3): i_reserved_data_blocks=128 [ 259.245200][ T1225] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 260.560750][ T6520] loop3: detected capacity change from 0 to 2048 [ 260.582240][ T39] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 260.609255][ T6520] EXT4-fs: Ignoring removed bh option [ 260.673487][ T6520] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 260.793539][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.808662][ T39] usb 2-1: not running at top speed; connect to a high speed hub [ 260.845945][ T6528] overlayfs: failed to clone upperpath [ 260.863405][ T39] usb 2-1: config 110 has an invalid interface number: 93 but max is 0 [ 260.883277][ T39] usb 2-1: config 110 has no interface number 0 [ 260.911717][ T39] usb 2-1: config 110 interface 93 has no altsetting 0 [ 260.925885][ T6520] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 260.930002][ T39] usb 2-1: New USB device found, idVendor=2040, idProduct=9580, bcdDevice=2f.08 [ 260.962180][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.972574][ T39] usb 2-1: Product: syz [ 260.977571][ T39] usb 2-1: Manufacturer: syz [ 260.983969][ T39] usb 2-1: SerialNumber: syz [ 260.993240][ T6526] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 261.030147][ T6520] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1072 with error 28 [ 261.063038][ T6526] EXT4-fs (loop3): This should not happen!! Data will be lost [ 261.063038][ T6526] [ 261.090320][ T6520] EXT4-fs (loop3): This should not happen!! Data will be lost [ 261.090320][ T6520] [ 261.122269][ T6526] EXT4-fs (loop3): Total free blocks count 0 [ 261.124416][ T6520] EXT4-fs (loop3): Total free blocks count 0 [ 261.144925][ T6526] EXT4-fs (loop3): Free/Dirty block details [ 261.163945][ T6520] EXT4-fs (loop3): Free/Dirty block details [ 261.168095][ T6526] EXT4-fs (loop3): free_blocks=2415919104 [ 262.160340][ T6553] netlink: 'syz.0.2061': attribute type 27 has an invalid length. [ 262.212915][ T6553] device wg2 left promiscuous mode [ 262.255264][ T6553] device macsec0 left promiscuous mode [ 262.433136][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.754558][ T6556] device veth0_vlan left promiscuous mode [ 262.780411][ T6556] device veth0_vlan entered promiscuous mode [ 262.805289][ T6556] device veth1_macvtap left promiscuous mode [ 262.826081][ T6556] device veth1_macvtap entered promiscuous mode [ 262.867226][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.877460][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.896420][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.920464][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.945313][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.968419][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.979303][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.990260][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 263.001579][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.011599][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 263.022048][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.033985][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.049840][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.068287][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.080121][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.090848][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.100612][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.110355][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.141999][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.152889][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.164540][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.175011][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.185291][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.198273][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.223808][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.235285][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.245364][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.256459][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.265733][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.275808][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.303750][ T39] usb 2-1: USB disconnect, device number 7 [ 263.311666][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.363042][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 263.375284][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 263.403352][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 263.413519][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 263.434988][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 263.505483][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 263.577748][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 263.587136][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 263.602395][ T19] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.313496][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 264.324044][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 264.346242][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 264.428710][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 264.482308][ T6570] device veth0_to_team left promiscuous mode [ 264.500157][ T6570] bridge0: port 1(veth0_to_team) entered disabled state [ 264.612266][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.702288][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 264.732327][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 264.892367][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 265.045283][ T6603] loop1: detected capacity change from 0 to 1024 [ 265.331931][ T6603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 265.388435][ T6603] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.491567][ T284] EXT4-fs (loop1): unmounting filesystem. [ 265.676508][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 265.822276][ T6625] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 266.616589][ T6631] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2648766293/2648766295 [ 267.394595][ T6631] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2648766293/2648766295 [ 267.415669][ T6631] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2648766293/2648766295 [ 267.661381][ T6645] loop1: detected capacity change from 0 to 1024 [ 267.700250][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2092'. [ 267.754314][ T6645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 267.765055][ T28] audit: type=1400 audit(1756953711.552:1230): avc: denied { map } for pid=6651 comm="syz.4.2094" path="socket:[34003]" dev="sockfs" ino=34003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.805804][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.197274][ T6682] netlink: 'syz.4.2105': attribute type 11 has an invalid length. [ 268.477761][ T284] EXT4-fs (loop1): unmounting filesystem. [ 268.622615][ T6] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 268.622636][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.639310][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 268.668224][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 268.698588][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 268.722407][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 268.772689][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 268.781743][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 268.822303][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 268.853688][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.883622][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.910710][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 268.940696][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 270.389191][ T6708] device syzkaller0 entered promiscuous mode [ 270.608020][ T6716] bridge: RTM_NEWNEIGH with invalid ether address [ 270.665797][ T6717] loop3: detected capacity change from 0 to 256 [ 270.701785][ T6717] FAT-fs (loop3): Directory bread(block 64) failed [ 270.729470][ T6717] FAT-fs (loop3): Directory bread(block 65) failed [ 270.743974][ T6717] FAT-fs (loop3): Directory bread(block 66) failed [ 270.781446][ T6717] FAT-fs (loop3): Directory bread(block 67) failed [ 270.809346][ T6717] FAT-fs (loop3): Directory bread(block 68) failed [ 270.822261][ T6717] FAT-fs (loop3): Directory bread(block 69) failed [ 270.848617][ T6717] FAT-fs (loop3): Directory bread(block 70) failed [ 270.856643][ T6717] FAT-fs (loop3): Directory bread(block 71) failed [ 270.864392][ T6717] FAT-fs (loop3): Directory bread(block 72) failed [ 270.882183][ T6717] FAT-fs (loop3): Directory bread(block 73) failed [ 271.004722][ T6727] loop1: detected capacity change from 0 to 512 [ 271.561195][ T28] audit: type=1400 audit(1756953715.342:1231): avc: denied { create } for pid=6751 comm="syz.4.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.506601][ T6764] loop1: detected capacity change from 0 to 1024 [ 272.595034][ T6764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 272.631103][ T28] audit: type=1400 audit(1756953716.412:1232): avc: denied { setattr } for pid=6763 comm="syz.1.2132" name="" dev="pipefs" ino=14597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 272.668432][ T284] EXT4-fs (loop1): unmounting filesystem. [ 273.008579][ T28] audit: type=1400 audit(1756953716.792:1233): avc: denied { read } for pid=6785 comm="syz.4.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 273.033518][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2139'. [ 273.394463][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2139'. [ 273.572730][ T6801] loop3: detected capacity change from 0 to 512 [ 273.612489][ T6801] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 273.624732][ T6801] EXT4-fs warning (device loop3): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 273.644797][ T6801] EXT4-fs (loop3): mount failed [ 273.791993][ T28] audit: type=1326 audit(1756953717.572:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 273.886231][ T28] audit: type=1326 audit(1756953717.602:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 273.992223][ T28] audit: type=1326 audit(1756953717.602:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 274.077072][ T28] audit: type=1326 audit(1756953717.602:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 274.129233][ T28] audit: type=1326 audit(1756953717.602:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 274.183609][ T28] audit: type=1326 audit(1756953717.602:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 274.248763][ T28] audit: type=1326 audit(1756953717.602:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 274.310703][ T28] audit: type=1326 audit(1756953717.602:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 275.332055][ T6843] loop1: detected capacity change from 0 to 512 [ 275.344307][ T6843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.424759][ T6843] EXT4-fs (loop1): orphan cleanup on readonly fs [ 275.435535][ T6843] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2155: bg 0: block 248: padding at end of block bitmap is not set [ 275.455822][ T6843] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.2155: Failed to acquire dquot type 1 [ 275.605513][ T6843] EXT4-fs (loop1): 1 truncate cleaned up [ 275.613591][ T6843] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 275.972210][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 275.980511][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 276.614298][ T284] EXT4-fs (loop1): unmounting filesystem. [ 277.363589][ T6861] loop1: detected capacity change from 0 to 4096 [ 277.564702][ T6861] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.963696][ T6861] EXT4-fs (loop1): Test dummy encryption mode enabled [ 278.201578][ T6861] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 278.669447][ T6888] syz.4.2169[6888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.669533][ T6888] syz.4.2169[6888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.469810][ T284] EXT4-fs (loop1): unmounting filesystem. [ 279.497051][ T6904] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 279.509577][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 279.509603][ T28] audit: type=1400 audit(1756953723.292:1251): avc: denied { ioctl } for pid=6903 comm="syz.3.2177" path="socket:[34239]" dev="sockfs" ino=34239 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.572360][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 279.584797][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2178'. [ 279.645069][ T6913] overlayfs: missing 'lowerdir' [ 279.666999][ T28] audit: type=1400 audit(1756953723.452:1252): avc: denied { create } for pid=6912 comm="syz.0.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 279.786548][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 279.800211][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 279.857788][ T6927] loop3: detected capacity change from 0 to 1024 [ 279.917231][ T6931] Invalid ELF header type: 3 != 1 [ 279.925491][ T28] audit: type=1400 audit(1756953723.702:1253): avc: denied { sys_module } for pid=6924 comm="syz.4.2185" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 279.962418][ T28] audit: type=1400 audit(1756953723.702:1254): avc: denied { module_load } for pid=6924 comm="syz.4.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 280.073231][ T6927] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 282.013834][ T283] EXT4-fs (loop3): unmounting filesystem. [ 282.224835][ T6947] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.551490][ T2446] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 282.559012][ T6949] loop3: detected capacity change from 0 to 512 [ 282.560487][ T2446] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 282.609140][ T6949] EXT4-fs: Ignoring removed i_version option [ 282.635476][ T6949] EXT4-fs: journaled quota format not specified [ 283.292433][ T28] audit: type=1400 audit(1756953727.082:1255): avc: denied { create } for pid=6966 comm="syz.3.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.422308][ T2446] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 283.649753][ T2446] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 285.121651][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2217'. [ 285.296105][ T7006] loop3: detected capacity change from 0 to 256 [ 285.339272][ T7006] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.358873][ T28] audit: type=1326 audit(1756953729.142:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.2.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 285.635217][ T28] audit: type=1326 audit(1756953729.172:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.2.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 285.714687][ T28] audit: type=1326 audit(1756953729.182:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.2.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 285.752961][ T28] audit: type=1326 audit(1756953729.192:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.2.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 285.802887][ T28] audit: type=1326 audit(1756953729.202:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.2.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 285.859748][ T28] audit: type=1326 audit(1756953729.202:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.2.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff7fef8d5fc code=0x7ffc0000 [ 285.912883][ T28] audit: type=1326 audit(1756953729.212:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.2.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 285.964053][ T28] audit: type=1326 audit(1756953729.212:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.2.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 286.018031][ T28] audit: type=1326 audit(1756953729.232:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.2.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 286.122297][ T28] audit: type=1326 audit(1756953729.232:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.2.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 286.731153][ T7047] loop3: detected capacity change from 0 to 1024 [ 286.814470][ T337] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.011402][ T7078] loop1: detected capacity change from 0 to 4096 [ 289.020272][ T7078] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.030685][ T7078] EXT4-fs (loop1): Test dummy encryption mode enabled [ 289.178702][ T7078] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 289.883809][ T284] EXT4-fs (loop1): unmounting filesystem. [ 290.052206][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 290.692473][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 291.332210][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 292.916947][ T7137] loop1: detected capacity change from 0 to 4096 [ 292.953612][ T7139] device veth0_vlan left promiscuous mode [ 292.961810][ T7137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 292.973907][ T7139] device veth0_vlan entered promiscuous mode [ 293.280910][ T7136] loop3: detected capacity change from 0 to 512 [ 293.383322][ T284] EXT4-fs (loop1): unmounting filesystem. [ 293.768146][ T7164] ipt_REJECT: ECHOREPLY no longer supported. [ 293.908495][ T7164] loop1: detected capacity change from 0 to 512 [ 293.927524][ T7164] EXT4-fs: dax option not supported [ 296.043557][ T7197] device veth0_vlan left promiscuous mode [ 296.934606][ T7197] device veth0_vlan entered promiscuous mode [ 297.306540][ T7201] loop3: detected capacity change from 0 to 4096 [ 297.383917][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 297.402995][ T7201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 297.438538][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 297.514835][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2274'. [ 297.676406][ T283] EXT4-fs (loop3): unmounting filesystem. [ 299.218343][ T28] kauditd_printk_skb: 3286 callbacks suppressed [ 299.218359][ T28] audit: type=1326 audit(1756953743.002:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 299.296056][ T28] audit: type=1326 audit(1756953743.002:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 299.362000][ T28] audit: type=1326 audit(1756953743.042:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 299.398266][ T28] audit: type=1326 audit(1756953743.052:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 299.481871][ T28] audit: type=1326 audit(1756953743.082:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 299.508317][ T28] audit: type=1326 audit(1756953743.082:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 299.565923][ T28] audit: type=1326 audit(1756953743.082:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 299.597044][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'. [ 299.612585][ T28] audit: type=1326 audit(1756953743.082:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f79fbf8ebe9 code=0x7ffc0000 [ 299.643040][ T28] audit: type=1326 audit(1756953743.082:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79fbf85ba7 code=0x7ffc0000 [ 299.679337][ T28] audit: type=1326 audit(1756953743.082:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f79fbf2adb9 code=0x7ffc0000 [ 299.714618][ T7257] loop3: detected capacity change from 0 to 1024 [ 299.738004][ T7257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 300.610096][ T283] EXT4-fs (loop3): unmounting filesystem. [ 300.785891][ T7273] loop3: detected capacity change from 0 to 128 [ 300.862819][ T7273] syz.3.2294: attempt to access beyond end of device [ 300.862819][ T7273] loop3: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 301.016699][ T7273] syz.3.2294: attempt to access beyond end of device [ 301.016699][ T7273] loop3: rw=2049, sector=241, nr_sectors = 432 limit=128 [ 301.225596][ T483] kworker/u4:30: attempt to access beyond end of device [ 301.225596][ T483] loop3: rw=1, sector=241, nr_sectors = 1 limit=128 [ 301.531399][ T7287] loop1: detected capacity change from 0 to 512 [ 301.604589][ T7287] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 301.614922][ T7287] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 301.624884][ T7287] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 301.740632][ T7287] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 301.749579][ T7287] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 301.758733][ T7287] EXT4-fs (loop1): orphan cleanup on readonly fs [ 301.766806][ T7287] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2297: bg 0: block 34: padding at end of block bitmap is not set [ 301.782568][ T7287] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.2297: Failed to acquire dquot type 1 [ 301.795344][ T7287] EXT4-fs (loop1): 1 truncate cleaned up [ 301.801328][ T7287] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 302.285990][ T284] EXT4-fs (loop1): unmounting filesystem. [ 303.201386][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2305'. [ 304.226449][ T28] kauditd_printk_skb: 5404 callbacks suppressed [ 304.226470][ T28] audit: type=1326 audit(1756953747.692:9964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7308 comm="syz.1.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fbf8ebe9 code=0x7fc00000 [ 304.332022][ T28] audit: type=1326 audit(1756953748.112:9965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 304.368068][ T28] audit: type=1326 audit(1756953748.152:9966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f710bb85ba7 code=0x7ffc0000 [ 304.406635][ T28] audit: type=1326 audit(1756953748.152:9967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f710bb2adb9 code=0x7ffc0000 [ 304.435365][ T28] audit: type=1326 audit(1756953748.152:9968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 304.461260][ T28] audit: type=1326 audit(1756953748.152:9969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f710bb85ba7 code=0x7ffc0000 [ 304.544789][ T28] audit: type=1326 audit(1756953748.152:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f710bb2adb9 code=0x7ffc0000 [ 304.572666][ T28] audit: type=1326 audit(1756953748.152:9971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 304.575566][ T7332] overlayfs: failed to clone upperpath [ 304.666713][ T28] audit: type=1326 audit(1756953748.152:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f710bb85ba7 code=0x7ffc0000 [ 304.818103][ T28] audit: type=1326 audit(1756953748.152:9973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.4.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f710bb2adb9 code=0x7ffc0000 [ 307.613436][ T7379] netlink: 'syz.1.2325': attribute type 3 has an invalid length. [ 309.508175][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2336'. [ 309.531212][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.582344][ T39] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 309.594568][ T39] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 310.053421][ T7418] loop3: detected capacity change from 0 to 1024 [ 310.072320][ T7418] EXT4-fs: Ignoring removed nobh option [ 310.090072][ T7418] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.2338: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 310.114838][ T7418] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2338: couldn't read orphan inode 11 (err -117) [ 310.129402][ T39] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 310.129577][ T7418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 310.613152][ T39] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 310.852167][ T7422] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 311.005724][ T283] EXT4-fs (loop3): unmounting filesystem. [ 311.448557][ T28] kauditd_printk_skb: 1469 callbacks suppressed [ 311.448588][ T28] audit: type=1400 audit(1756953755.232:11443): avc: denied { create } for pid=7439 comm="syz.3.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 312.151693][ T7447] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2345'. [ 312.169873][ T7447] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2345'. [ 312.179810][ T7447] netlink: 'syz.2.2345': attribute type 5 has an invalid length. [ 312.188691][ T7447] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2345'. [ 314.957646][ T19] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 315.153781][ T19] usb 4-1: unable to get BOS descriptor or descriptor too short [ 315.178185][ T19] usb 4-1: not running at top speed; connect to a high speed hub [ 315.203403][ T19] usb 4-1: config 110 has an invalid interface number: 93 but max is 0 [ 315.227464][ T19] usb 4-1: config 110 has no interface number 0 [ 315.240386][ T19] usb 4-1: config 110 interface 93 has no altsetting 0 [ 315.261900][ T19] usb 4-1: New USB device found, idVendor=2040, idProduct=9580, bcdDevice=2f.08 [ 315.288053][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.369807][ T19] usb 4-1: Product: syz [ 315.374176][ T19] usb 4-1: Manufacturer: syz [ 315.379548][ T19] usb 4-1: SerialNumber: syz [ 316.005798][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 316.034334][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 316.053394][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 316.071007][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 316.083135][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 316.099474][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 316.122297][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 316.141120][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 316.153077][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.164711][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.832245][ T19] usb 4-1: USB disconnect, device number 12 [ 318.832216][ T7548] netlink: 'syz.3.2373': attribute type 3 has an invalid length. [ 319.087140][ T7527] loop1: detected capacity change from 0 to 40427 [ 319.424762][ T7527] F2FS-fs (loop1): Found nat_bits in checkpoint [ 319.492209][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 320.772308][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 322.393704][ T7606] overlayfs: failed to clone upperpath [ 323.917599][ T7619] futex_wake_op: syz.0.2396 tries to shift op by -1; fix this program [ 327.553028][ T7685] syz.3.2416[7685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.553227][ T7685] syz.3.2416[7685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.572130][ T7685] loop3: detected capacity change from 0 to 256 [ 327.976059][ T7685] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 328.746866][ T7699] loop1: detected capacity change from 0 to 16 [ 328.756438][ T7699] erofs: Unknown parameter '0000000000000000000318446744073709551615' [ 329.087648][ T7701] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2431'. [ 329.099070][ T7701] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2431'. [ 329.109986][ T7701] netlink: 'syz.3.2431': attribute type 5 has an invalid length. [ 329.118386][ T7701] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2431'. [ 329.341019][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2424'. [ 329.387651][ T7710] loop3: detected capacity change from 0 to 512 [ 329.396607][ T7710] EXT4-fs: Ignoring removed i_version option [ 329.403478][ T7710] EXT4-fs: Ignoring removed bh option [ 329.493011][ T7710] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 329.603482][ T7710] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.853626][ T283] EXT4-fs (loop3): unmounting filesystem. [ 330.315802][ T7728] device wireguard0 entered promiscuous mode [ 330.353419][ T7731] overlayfs: statfs failed on './file0' [ 330.912437][ T7738] loop1: detected capacity change from 0 to 512 [ 330.943549][ T7738] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 331.267179][ T7738] EXT4-fs (loop1): 1 truncate cleaned up [ 331.272955][ T7738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 332.080984][ T284] EXT4-fs (loop1): unmounting filesystem. [ 332.087378][ T7744] 9pnet_fd: Insufficient options for proto=fd [ 334.774011][ T7773] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 335.081579][ T19] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 335.304379][ T19] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 335.642638][ T19] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 336.201438][ T19] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 336.688459][ T7791] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2445'. [ 336.716925][ T7791] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2445'. [ 336.752955][ T7791] netlink: 'syz.4.2445': attribute type 5 has an invalid length. [ 336.776616][ T7791] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2445'. [ 337.559985][ T7805] tipc: Enabling of bearer rejected, failed to enable media [ 337.895212][ T7805] tipc: Enabling of bearer rejected, failed to enable media [ 338.277305][ T7816] loop1: detected capacity change from 0 to 40427 [ 338.318633][ T7816] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 338.330115][ T7816] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 338.338498][ T7816] F2FS-fs (loop1): heap/no_heap options were deprecated [ 338.356247][ T7816] F2FS-fs (loop1): invalid crc value [ 338.372779][ T7816] F2FS-fs (loop1): Found nat_bits in checkpoint [ 338.431368][ T7816] F2FS-fs (loop1): Start checkpoint disabled! [ 338.442425][ T7816] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 338.450887][ T7816] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 339.033191][ T7816] syz.1.2455: attempt to access beyond end of device [ 339.033191][ T7816] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 339.502359][ T5547] kworker/u4:256: attempt to access beyond end of device [ 339.502359][ T5547] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 339.890721][ T7853] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2461'. [ 340.133441][ T7859] tipc: Enabled bearer , priority 1 [ 340.599390][ T7859] tipc: Enabling of bearer rejected, failed to enable media [ 340.619231][ T7867] loop1: detected capacity change from 0 to 128 [ 340.635859][ T7867] syz.1.2467: attempt to access beyond end of device [ 340.635859][ T7867] loop1: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 340.685137][ T7867] syz.1.2467: attempt to access beyond end of device [ 340.685137][ T7867] loop1: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 340.695391][ T7867] syz.1.2467: attempt to access beyond end of device [ 340.695391][ T7867] loop1: rw=0, sector=241, nr_sectors = 1 limit=128 [ 340.999145][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2472'. [ 341.047249][ T7885] sch_tbf: burst 511 is lower than device veth9 mtu (1514) ! [ 341.911249][ T7901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2479'. [ 341.939059][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2479'. [ 342.106640][ T28] audit: type=1400 audit(1756953785.892:11444): avc: denied { module_load } for pid=7904 comm="syz.3.2481" path="/sys/power/wakeup_count" dev="sysfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 345.361791][ T7961] kvm: pic: non byte write [ 345.436552][ T7968] loop1: detected capacity change from 0 to 2048 [ 345.474028][ T7968] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 346.514107][ T284] EXT4-fs (loop1): unmounting filesystem. [ 346.690445][ T7992] loop3: detected capacity change from 0 to 512 [ 346.852892][ T7992] EXT4-fs (loop3): Test dummy encryption mode enabled [ 346.882209][ T7992] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 346.938205][ T7992] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.2504: bad orphan inode 131083 [ 346.985500][ T7992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 347.014464][ T7992] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 347.152720][ T283] EXT4-fs (loop3): unmounting filesystem. [ 347.213954][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2507'. [ 347.493940][ T8019] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 347.766785][ T8017] loop3: detected capacity change from 0 to 40427 [ 347.774068][ T8017] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 347.781191][ T8017] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 347.789792][ T8017] F2FS-fs (loop3): heap/no_heap options were deprecated [ 347.797955][ T8017] F2FS-fs (loop3): invalid crc value [ 347.805015][ T8017] F2FS-fs (loop3): Found nat_bits in checkpoint [ 347.836778][ T8017] F2FS-fs (loop3): Start checkpoint disabled! [ 347.844264][ T8017] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 347.851539][ T8017] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 347.968971][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2512'. [ 350.203034][ T8017] syz.3.2510: attempt to access beyond end of device [ 350.203034][ T8017] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 350.296969][ T8062] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2526'. [ 350.465131][ T498] kworker/u4:45: attempt to access beyond end of device [ 350.465131][ T498] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 350.878021][ T28] audit: type=1400 audit(1756953794.662:11445): avc: denied { write } for pid=8066 comm="syz.4.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 350.918685][ T28] audit: type=1400 audit(1756953794.702:11446): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.951085][ T28] audit: type=1400 audit(1756953794.702:11447): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.977733][ T28] audit: type=1400 audit(1756953794.702:11448): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 351.032154][ T28] audit: type=1400 audit(1756953794.762:11449): avc: denied { bpf } for pid=8077 comm="syz.3.2529" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.064039][ T28] audit: type=1400 audit(1756953794.762:11450): avc: denied { map_create } for pid=8077 comm="syz.3.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.087893][ T28] audit: type=1400 audit(1756953794.762:11451): avc: denied { map_read map_write } for pid=8077 comm="syz.3.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.145221][ T28] audit: type=1400 audit(1756953794.792:11452): avc: denied { prog_load } for pid=8077 comm="syz.3.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 351.173392][ T28] audit: type=1400 audit(1756953794.792:11453): avc: denied { perfmon } for pid=8077 comm="syz.3.2529" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 351.197118][ T28] audit: type=1400 audit(1756953794.792:11454): avc: denied { prog_run } for pid=8077 comm="syz.3.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 353.283910][ T8104] loop1: detected capacity change from 0 to 16 [ 353.319082][ T8104] erofs: (device loop1): mounted with root inode @ nid 36. [ 355.409805][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2543'. [ 355.489669][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2543'. [ 356.482324][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 356.482343][ T28] audit: type=1400 audit(1756953800.212:11591): avc: denied { block_suspend } for pid=8138 comm="syz.2.2545" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 356.867821][ T28] audit: type=1400 audit(1756953800.652:11592): avc: denied { connect } for pid=8142 comm="syz.3.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.102713][ T8168] loop3: detected capacity change from 0 to 16 [ 358.113781][ T8168] erofs: (device loop3): mounted with root inode @ nid 36. [ 359.299570][ T8181] syz.1.2553[8181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.299772][ T8181] syz.1.2553[8181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.317990][ T8181] loop1: detected capacity change from 0 to 256 [ 360.708172][ T8181] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 360.748741][ T28] audit: type=1400 audit(1756953804.502:11593): avc: denied { mount } for pid=8171 comm="syz.1.2553" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 360.791945][ T28] audit: type=1400 audit(1756953804.562:11594): avc: denied { write } for pid=8171 comm="syz.1.2553" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.818509][ T28] audit: type=1400 audit(1756953804.562:11595): avc: denied { add_name } for pid=8171 comm="syz.1.2553" name="blkio.bfq.io_serviced_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.883260][ T28] audit: type=1400 audit(1756953804.562:11596): avc: denied { create } for pid=8171 comm="syz.1.2553" name="blkio.bfq.io_serviced_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 360.907804][ T28] audit: type=1400 audit(1756953804.562:11597): avc: denied { associate } for pid=8171 comm="syz.1.2553" name="blkio.bfq.io_serviced_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 361.011969][ T28] audit: type=1400 audit(1756953804.562:11598): avc: denied { read append open } for pid=8171 comm="syz.1.2553" path="/447/file1/blkio.bfq.io_serviced_recursive" dev="loop1" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.114298][ T8194] tipc: Enabling of bearer rejected, already enabled [ 361.131980][ T8190] bridge: RTM_NEWNEIGH with invalid ether address [ 361.132926][ T28] audit: type=1400 audit(1756953804.782:11599): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 361.159665][ T28] audit: type=1400 audit(1756953804.892:11600): avc: denied { execute } for pid=8177 comm="syz.4.2558" path="/569/file1" dev="tmpfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 361.248105][ T8200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.257817][ T8200] device veth0_to_team left promiscuous mode [ 361.264222][ T8200] bridge0: port 1(veth0_to_team) entered disabled state [ 361.303068][ T6007] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 361.762237][ T6007] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 361.821902][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 361.821927][ T28] audit: type=1400 audit(1756953805.602:11605): avc: denied { watch } for pid=8206 comm="syz.4.2566" path="/571/control" dev="tmpfs" ino=3095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 362.572015][ T28] audit: type=1400 audit(1756953806.352:11606): avc: denied { bind } for pid=8215 comm="syz.3.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 362.603681][ T28] audit: type=1400 audit(1756953806.392:11607): avc: denied { write } for pid=8215 comm="syz.3.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 362.630486][ T8222] tipc: Failed to remove unknown binding: 66,1,1/0:1080958540/1080958542 [ 362.648084][ T28] audit: type=1400 audit(1756953806.412:11608): avc: denied { bind } for pid=8220 comm="syz.1.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 362.705602][ T28] audit: type=1400 audit(1756953806.412:11609): avc: denied { setopt } for pid=8220 comm="syz.1.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.123129][ T28] audit: type=1400 audit(1756953808.912:11610): avc: denied { write } for pid=8243 comm="syz.3.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 365.184568][ T28] audit: type=1400 audit(1756953808.912:11611): avc: denied { nlmsg_write } for pid=8243 comm="syz.3.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 365.227370][ T28] audit: type=1400 audit(1756953809.012:11612): avc: denied { create } for pid=8248 comm="syz.1.2579" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 365.282185][ T28] audit: type=1400 audit(1756953809.012:11613): avc: denied { ioctl } for pid=8248 comm="syz.1.2579" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37973 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 365.329397][ T28] audit: type=1400 audit(1756953809.042:11614): avc: denied { mount } for pid=8250 comm="syz.3.2580" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 365.444023][ T8259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2583'. [ 365.562217][ T6007] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 365.645137][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2588'. [ 365.654377][ T8268] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2588'. [ 366.092220][ T6007] usb 4-1: Using ep0 maxpacket: 32 [ 366.104844][ T6007] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 366.114304][ T6007] usb 4-1: config 0 has no interface number 0 [ 366.120824][ T6007] usb 4-1: config 0 interface 184 has no altsetting 0 [ 366.129924][ T6007] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 366.140373][ T6007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.148677][ T6007] usb 4-1: Product: syz [ 366.153095][ T6007] usb 4-1: Manufacturer: syz [ 366.157910][ T6007] usb 4-1: SerialNumber: syz [ 366.169068][ T6007] usb 4-1: config 0 descriptor?? [ 366.176792][ T6007] smsc75xx v1.0.0 [ 366.724985][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 366.735262][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 366.795980][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.803694][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.834482][ T8288] device wg2 left promiscuous mode [ 366.908788][ T8288] device veth1_macvtap left promiscuous mode [ 366.921993][ T8288] device veth1_macvtap entered promiscuous mode [ 366.937681][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.961654][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.987464][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.998620][ T6007] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 367.009595][ T6007] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 367.015878][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 367.028327][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.037519][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 367.046603][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 367.063147][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 367.075557][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 367.090642][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 367.105876][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 367.122585][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 367.132802][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 367.141813][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 367.151015][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.160521][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.170223][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.179641][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.188864][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.197971][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.207425][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.216405][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.225747][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.235366][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.244958][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.254688][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.265890][ T1520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 367.346069][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 367.346085][ T28] audit: type=1400 audit(1756953811.132:11626): avc: denied { create } for pid=8292 comm="syz.1.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.376085][ T8293] loop1: detected capacity change from 0 to 16 [ 367.388822][ T8293] erofs: Unknown parameter 'vΡe1' [ 367.395237][ T1135] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 367.403310][ T1135] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 367.411166][ T28] audit: type=1400 audit(1756953811.162:11627): avc: denied { connect } for pid=8292 comm="syz.1.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.440230][ T1135] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 367.456327][ T337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.804728][ T8305] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 368.292220][ T1135] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 368.305016][ T1135] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 368.345363][ T28] audit: type=1400 audit(1756953812.132:11628): avc: denied { write } for pid=8309 comm="syz.0.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 368.397032][ T28] audit: type=1400 audit(1756953812.182:11629): avc: denied { create } for pid=8309 comm="syz.0.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 368.437469][ T6007] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 368.465031][ T6007] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 368.504397][ T6007] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 368.538060][ T6007] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 368.569544][ T6007] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 368.616998][ T6007] usb 4-1: USB disconnect, device number 13 [ 368.766279][ T8321] loop1: detected capacity change from 0 to 1024 [ 368.787820][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 368.794496][ T8321] EXT4-fs: Ignoring removed orlov option [ 368.849730][ T28] audit: type=1326 audit(1756953812.632:11630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 368.877881][ T28] audit: type=1326 audit(1756953812.662:11631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7fef85ba7 code=0x7ffc0000 [ 368.903936][ T28] audit: type=1326 audit(1756953812.662:11632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7fef2adb9 code=0x7ffc0000 [ 368.919152][ T8321] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 368.929402][ T28] audit: type=1326 audit(1756953812.662:11633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 368.989679][ T28] audit: type=1326 audit(1756953812.662:11634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7fef8ebe9 code=0x7ffc0000 [ 369.015772][ T28] audit: type=1326 audit(1756953812.662:11635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.2.2603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7fef85ba7 code=0x7ffc0000 [ 369.061945][ T284] EXT4-fs (loop1): unmounting filesystem. [ 369.835674][ T8346] syz.0.2617[8346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.836353][ T8346] syz.0.2617[8346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.252307][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 372.434496][ T28] kauditd_printk_skb: 241 callbacks suppressed [ 372.434512][ T28] audit: type=1400 audit(1756953816.222:11877): avc: denied { create } for pid=8358 comm="syz.0.2614" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 372.485407][ T28] audit: type=1400 audit(1756953816.252:11878): avc: denied { mounton } for pid=8358 comm="syz.0.2614" path="/542/file0" dev="tmpfs" ino=2929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 372.519316][ T28] audit: type=1400 audit(1756953816.252:11879): avc: denied { mount } for pid=8358 comm="syz.0.2614" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 372.612560][ T28] audit: type=1400 audit(1756953816.262:11880): avc: denied { map } for pid=8358 comm="syz.0.2614" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 372.673372][ T28] audit: type=1400 audit(1756953816.262:11881): avc: denied { read write } for pid=8358 comm="syz.0.2614" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 372.699790][ T28] audit: type=1400 audit(1756953816.272:11882): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=2929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 374.469565][ T8390] loop1: detected capacity change from 0 to 512 [ 374.505618][ T8390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 374.560189][ T8390] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 374.575434][ T8390] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.621222][ T28] audit: type=1400 audit(1756953818.402:11883): avc: denied { write } for pid=8389 comm="syz.1.2620" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.727754][ T28] audit: type=1400 audit(1756953818.472:11884): avc: denied { add_name } for pid=8389 comm="syz.1.2620" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.753295][ T28] audit: type=1400 audit(1756953818.472:11885): avc: denied { append } for pid=8389 comm="syz.1.2620" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.797287][ T28] audit: type=1400 audit(1756953818.472:11886): avc: denied { open } for pid=8389 comm="syz.1.2620" path="/461/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 375.443546][ T284] EXT4-fs (loop1): unmounting filesystem. [ 375.570788][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 375.968119][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 377.023942][ T8455] netlink: 'syz.0.2640': attribute type 5 has an invalid length. [ 378.265972][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2648'. [ 378.302512][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2648'. [ 379.012204][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 380.998745][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 380.998771][ T28] audit: type=1400 audit(1756953824.782:11891): avc: denied { write } for pid=8519 comm="syz.2.2659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 382.187024][ T28] audit: type=1400 audit(1756953825.972:11892): avc: denied { ioctl } for pid=8537 comm="syz.2.2664" path="socket:[39004]" dev="sockfs" ino=39004 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.338012][ T28] audit: type=1400 audit(1756953826.072:11893): avc: denied { connect } for pid=8534 comm="syz.1.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 382.567203][ T28] audit: type=1400 audit(1756953826.072:11894): avc: denied { write } for pid=8534 comm="syz.1.2665" laddr=127.0.0.1 lport=7 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 382.852542][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.860350][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 383.217439][ T8564] device macsec0 entered promiscuous mode [ 383.288223][ T8566] loop3: detected capacity change from 0 to 2048 [ 383.334729][ T8566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 383.348814][ T8566] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.386270][ T28] audit: type=1400 audit(1756953827.172:11895): avc: denied { read write open } for pid=8565 comm="syz.3.2673" path=2F3530382F66696C65302FC001 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 383.446971][ T8566] overlayfs: failed to set xattr on upper [ 383.449842][ T28] audit: type=1400 audit(1756953827.212:11896): avc: denied { append } for pid=8565 comm="syz.3.2673" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 383.476731][ T28] audit: type=1400 audit(1756953827.212:11897): avc: denied { map } for pid=8565 comm="syz.3.2673" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 383.501469][ T28] audit: type=1400 audit(1756953827.222:11898): avc: denied { create } for pid=8565 comm="syz.3.2673" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 383.514110][ T283] EXT4-fs (loop3): unmounting filesystem. [ 383.541491][ T28] audit: type=1400 audit(1756953827.232:11899): avc: denied { mounton } for pid=8565 comm="syz.3.2673" path="/508/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 383.577286][ T28] audit: type=1400 audit(1756953827.232:11900): avc: denied { write } for pid=8565 comm="syz.3.2673" name="bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 383.877373][ T6007] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 384.640837][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2679'. [ 385.101416][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2679'. [ 385.123757][ T6007] usb 4-1: unable to get BOS descriptor or descriptor too short [ 385.253061][ T6007] usb 4-1: not running at top speed; connect to a high speed hub [ 385.272958][ T6007] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.283128][ T6007] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 385.603024][ T6007] usb 4-1: config 1 has no interface number 1 [ 385.609277][ T6007] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 385.622161][ T6007] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 385.651687][ T6007] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.674877][ T6007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.683801][ T6007] usb 4-1: Product: syz [ 385.688139][ T6007] usb 4-1: Manufacturer: syz [ 385.692873][ T6007] usb 4-1: SerialNumber: syz [ 385.918971][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.159269][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.187116][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 386.187132][ T28] audit: type=1400 audit(1756953829.972:11914): avc: denied { read } for pid=8690 comm="syz.2.2687" path="socket:[38534]" dev="sockfs" ino=38534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 386.189362][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.228004][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.245290][ T6007] hub 4-1:1.0: Invalid hub with more than one config or interface [ 386.253276][ T6007] hub: probe of 4-1:1.0 failed with error -22 [ 386.260985][ T6007] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 386.294662][ T6007] usb 4-1: USB disconnect, device number 14 [ 387.425551][ T28] audit: type=1326 audit(1756953831.212:11915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 387.462989][ T28] audit: type=1326 audit(1756953831.252:11916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 387.487303][ T28] audit: type=1326 audit(1756953831.252:11917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 387.511545][ T28] audit: type=1326 audit(1756953831.252:11918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 387.581099][ T28] audit: type=1326 audit(1756953831.272:11919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 387.604867][ T28] audit: type=1326 audit(1756953831.272:11920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 387.628778][ T28] audit: type=1326 audit(1756953831.272:11921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f710bb8d550 code=0x7ffc0000 [ 387.652485][ T28] audit: type=1326 audit(1756953831.272:11922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb8ebe9 code=0x7ffc0000 [ 387.676317][ T28] audit: type=1326 audit(1756953831.272:11923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8720 comm="syz.4.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f710bb8d84a code=0x7ffc0000 [ 391.012893][ T8757] loop3: detected capacity change from 0 to 512 [ 391.041406][ T8757] EXT4-fs: Ignoring removed nobh option [ 391.065590][ T8757] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2707: iget: bad i_size value: 38620345925642 [ 391.088779][ T8757] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2707: couldn't read orphan inode 15 (err -117) [ 391.111288][ T8757] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 391.249096][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 391.249112][ T28] audit: type=1400 audit(1756953835.032:11930): avc: denied { read write } for pid=8756 comm="syz.3.2707" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 391.278806][ T8760] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2707: bg 0: block 5: invalid block bitmap [ 391.453504][ T2589] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 391.479378][ T2589] EXT4-fs (loop3): This should not happen!! Data will be lost [ 391.479378][ T2589] [ 391.499026][ T2589] EXT4-fs (loop3): Total free blocks count 0 [ 391.723623][ T2589] EXT4-fs (loop3): Free/Dirty block details [ 391.731379][ T2589] EXT4-fs (loop3): free_blocks=0 [ 391.737462][ T2589] EXT4-fs (loop3): dirty_blocks=2932 [ 391.743355][ T2589] EXT4-fs (loop3): Block reservation details [ 391.749458][ T2589] EXT4-fs (loop3): i_reserved_data_blocks=2932 [ 391.767453][ T2589] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 880 with error 28 [ 391.814650][ T28] audit: type=1400 audit(1756953835.602:11931): avc: denied { mount } for pid=8769 comm="syz.1.2710" name="/" dev="ramfs" ino=39182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 391.851235][ T28] audit: type=1400 audit(1756953835.632:11932): avc: denied { execute } for pid=8769 comm="syz.1.2710" path="/file1" dev="ramfs" ino=39183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 391.886975][ T8774] device syz_tun left promiscuous mode [ 391.900829][ T8774] bridge0: port 3(syz_tun) entered disabled state [ 391.927660][ T8774] device bridge_slave_1 left promiscuous mode [ 391.935031][ T8774] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.943455][ T8774] device bridge_slave_0 left promiscuous mode [ 391.949872][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.192112][ T1135] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 392.412130][ T1135] usb 2-1: Using ep0 maxpacket: 8 [ 392.418381][ T1135] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 392.432164][ T1135] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.537030][ T1135] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.571780][ T1135] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.604671][ T1135] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.643701][ T1135] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 392.671846][ T1135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.729452][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2713'. [ 393.752193][ T8778] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2713'. [ 394.288835][ T28] audit: type=1400 audit(1756953838.062:11933): avc: denied { execute_no_trans } for pid=8805 comm="syz.3.2722" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 395.140142][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 395.155320][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 395.664302][ T6007] usb 2-1: USB disconnect, device number 8 [ 397.281201][ T8837] loop3: detected capacity change from 0 to 128 [ 397.322111][ T28] audit: type=1400 audit(1756953841.102:11934): avc: denied { mount } for pid=8836 comm="syz.3.2732" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 397.424312][ T28] audit: type=1400 audit(1756953841.202:11935): avc: denied { getopt } for pid=8840 comm="syz.0.2733" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 397.690484][ T8848] syz.3.2732: attempt to access beyond end of device [ 397.690484][ T8848] loop3: rw=2049, sector=145, nr_sectors = 216 limit=128 [ 397.708632][ T8846] syz.0.2735[8846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.710630][ T8846] syz.0.2735[8846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.634926][ T8837] syz.3.2732: attempt to access beyond end of device [ 398.634926][ T8837] loop3: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 398.682302][ T8837] syz.3.2732: attempt to access beyond end of device [ 398.682302][ T8837] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 398.695709][ T8837] syz.3.2732: attempt to access beyond end of device [ 398.695709][ T8837] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 398.709022][ T8837] syz.3.2732: attempt to access beyond end of device [ 398.709022][ T8837] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 398.725803][ T8837] syz.3.2732: attempt to access beyond end of device [ 398.725803][ T8837] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 398.742392][ T8837] syz.3.2732: attempt to access beyond end of device [ 398.742392][ T8837] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 398.775751][ T8848] syz.3.2732: attempt to access beyond end of device [ 398.775751][ T8848] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 399.778272][ T8848] syz.3.2732: attempt to access beyond end of device [ 399.778272][ T8848] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 399.791869][ T8848] syz.3.2732: attempt to access beyond end of device [ 399.791869][ T8848] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 400.983583][ T8866] overlayfs: conflicting options: nfs_export=on,index=off [ 401.393788][ T28] audit: type=1400 audit(1756953845.182:11936): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 401.497475][ T28] audit: type=1400 audit(1756953845.222:11937): avc: denied { name_bind } for pid=8869 comm="syz.3.2741" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 401.528297][ T28] audit: type=1400 audit(1756953845.222:11938): avc: denied { node_bind } for pid=8869 comm="syz.3.2741" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 401.618144][ T8883] tipc: Started in network mode [ 401.628903][ T8883] tipc: Node identity 4, cluster identity 4711 [ 401.648350][ T8883] tipc: Node number set to 4 [ 403.222121][ T28] audit: type=1400 audit(1756953846.992:11939): avc: denied { write } for pid=8905 comm="syz.3.2754" name="ip6_tables_targets" dev="proc" ino=4026532355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 403.337939][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2751'. [ 403.505244][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 403.515762][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 403.527052][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 403.534622][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 403.543412][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 403.550823][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 403.559332][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 403.566946][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 403.575675][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 403.583377][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 403.592085][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 403.599750][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 403.608479][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 403.616379][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 403.625279][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.632603][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.641315][ T8913] device bridge_slave_0 left promiscuous mode [ 403.647558][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.655741][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.138206][ T873] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 404.149065][ T873] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 404.164814][ T873] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 404.241097][ T8928] tipc: Cannot configure node identity twice [ 404.283663][ T28] audit: type=1400 audit(1756953848.072:11940): avc: denied { lock } for pid=8930 comm="syz.3.2761" path="socket:[39401]" dev="sockfs" ino=39401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 404.336565][ T8933] device bond_slave_1 entered promiscuous mode [ 404.351686][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 404.374277][ T8933] device bond_slave_1 left promiscuous mode [ 404.516416][ T873] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 404.932212][ T873] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 404.993941][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2766'. [ 405.127894][ T28] audit: type=1326 audit(1756953848.912:11941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8949 comm="syz.3.2767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a2e38ebe9 code=0x0 [ 405.208830][ T28] audit: type=1400 audit(1756953848.992:11942): avc: denied { getopt } for pid=8953 comm="syz.4.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 405.228547][ T28] audit: type=1400 audit(1756953848.992:11943): avc: denied { setopt } for pid=8953 comm="syz.4.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 405.527883][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.535761][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.660485][ T1135] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 405.668406][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 405.678629][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 405.697029][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 405.717100][ T2589] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 406.619441][ T1135] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 406.627979][ T1135] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 406.643325][ T1135] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 406.652930][ T8983] bridge: RTM_NEWNEIGH with invalid ether address [ 406.729359][ T28] audit: type=1400 audit(1756953850.512:11944): avc: denied { read write } for pid=8987 comm="syz.1.2780" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.770326][ T28] audit: type=1400 audit(1756953850.542:11945): avc: denied { open } for pid=8987 comm="syz.1.2780" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.855380][ T8989] loop1: detected capacity change from 0 to 1024 [ 406.884093][ T28] audit: type=1400 audit(1756953850.552:11946): avc: denied { ioctl } for pid=8987 comm="syz.1.2780" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 407.261364][ T337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 407.309279][ T28] audit: type=1400 audit(1756953851.092:11947): avc: denied { listen } for pid=8992 comm="syz.3.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 407.332280][ T1135] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 407.332942][ T28] audit: type=1400 audit(1756953851.122:11948): avc: denied { accept } for pid=8992 comm="syz.3.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.609857][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 408.609872][ T28] audit: type=1400 audit(1756953852.392:11954): avc: denied { mount } for pid=9034 comm="syz.2.2795" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 408.661237][ T28] audit: type=1400 audit(1756953852.432:11955): avc: denied { ioctl } for pid=9032 comm="syz.0.2794" path="socket:[40085]" dev="sockfs" ino=40085 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.779208][ T9045] loop3: detected capacity change from 0 to 512 [ 408.790300][ T9045] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 409.841126][ T9045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 409.849268][ T9045] System zones: 1-12 [ 409.902560][ T9045] EXT4-fs (loop3): orphan cleanup on readonly fs [ 409.921861][ T9045] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2798: bg 0: block 361: padding at end of block bitmap is not set [ 409.938769][ T9045] EXT4-fs (loop3): Remounting filesystem read-only [ 409.945565][ T9045] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 409.956376][ T9045] EXT4-fs (loop3): Remounting filesystem read-only [ 409.963190][ T9045] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2798: invalid indirect mapped block 12 (level 1) [ 409.979116][ T9045] EXT4-fs (loop3): Remounting filesystem read-only [ 409.985976][ T9045] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2798: invalid indirect mapped block 2 (level 2) [ 410.001396][ T9045] EXT4-fs (loop3): Remounting filesystem read-only [ 410.008548][ T9045] EXT4-fs (loop3): 1 truncate cleaned up [ 410.014482][ T9045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 410.263074][ T283] EXT4-fs (loop3): unmounting filesystem. [ 410.371974][ T9058] netlink: 'syz.4.2801': attribute type 4 has an invalid length. [ 410.379940][ T9058] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2801'. [ 410.794210][ T28] audit: type=1400 audit(1756953854.582:11956): avc: denied { append } for pid=9060 comm="syz.2.2803" name="file0" dev="tmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 410.820162][ T9064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2802'. [ 410.820775][ T28] audit: type=1400 audit(1756953854.582:11957): avc: denied { open } for pid=9060 comm="syz.2.2803" path="/571/file0" dev="tmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 410.859289][ T9064] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9064 comm=syz.3.2802 [ 411.012395][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 411.012415][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 412.415920][ T9088] overlayfs: conflicting options: nfs_export=on,index=off [ 414.151450][ T9099] xt_hashlimit: size too large, truncated to 1048576 [ 414.158678][ T9099] xt_hashlimit: max too large, truncated to 1048576 [ 414.222571][ T28] audit: type=1400 audit(1756953858.012:11958): avc: denied { create } for pid=9103 comm="syz.2.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 414.273895][ T9104] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2815'. [ 414.302146][ T28] audit: type=1400 audit(1756953858.032:11959): avc: denied { connect } for pid=9103 comm="syz.2.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 414.323959][ T9104] .70: renamed from veth0_macvtap [ 414.345491][ T9104] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 414.390194][ T28] audit: type=1400 audit(1756953858.032:11960): avc: denied { write } for pid=9103 comm="syz.2.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 414.481068][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2813'. [ 414.652112][ T1135] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 414.700685][ T28] audit: type=1326 audit(1756953858.482:11961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4e98ebe9 code=0x7ffc0000 [ 414.760008][ T28] audit: type=1326 audit(1756953858.482:11962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e4e98ebe9 code=0x7ffc0000 [ 414.825138][ T28] audit: type=1326 audit(1756953858.482:11963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4e98ebe9 code=0x7ffc0000 [ 414.850232][ T1135] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.863745][ T1135] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 414.879439][ T1135] usb 2-1: New USB device found, idVendor=056a, idProduct=0019, bcdDevice= 0.00 [ 414.895191][ T1135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.903451][ T28] audit: type=1326 audit(1756953858.482:11964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e4e98ebe9 code=0x7ffc0000 [ 414.937662][ T1135] usb 2-1: config 0 descriptor?? [ 414.957804][ T28] audit: type=1326 audit(1756953858.482:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4e98ebe9 code=0x7ffc0000 [ 414.986012][ T28] audit: type=1326 audit(1756953858.492:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5e4e98ebe9 code=0x7ffc0000 [ 415.009824][ T28] audit: type=1326 audit(1756953858.492:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.0.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e4e98ebe9 code=0x7ffc0000 [ 416.345602][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2824'. [ 416.358985][ T9133] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2824'. [ 417.412492][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 417.693614][ T6] usb 2-1: USB disconnect, device number 9 [ 418.037615][ T9150] loop1: detected capacity change from 0 to 128 [ 418.059650][ T9150] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777=d̞ YS38`" or missing value [ 418.154722][ T337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.564161][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2831'. [ 418.791554][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.011907][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 419.029108][ T873] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.061456][ T9169] syz.2.2833[9169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.062236][ T9169] syz.2.2833[9169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.246029][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 419.246056][ T28] audit: type=1400 audit(1756953863.032:11996): avc: denied { ioctl } for pid=9149 comm="syz.1.2830" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 419.296126][ T560] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 419.337599][ T9150] input: syz0 as /devices/virtual/input/input6 [ 419.372309][ T1135] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 419.875573][ T1135] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 419.977176][ T28] audit: type=1400 audit(1756953863.732:11997): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1077 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.057671][ T28] audit: type=1400 audit(1756953863.732:11998): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1077 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.081363][ T28] audit: type=1400 audit(1756953863.732:11999): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1077 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.111237][ T9178] netlink: 'syz.3.2836': attribute type 1 has an invalid length. [ 420.295273][ T9186] loop3: detected capacity change from 0 to 1024 [ 420.318075][ T9186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.345094][ T9186] EXT4-fs: dax option not supported [ 420.393939][ T28] audit: type=1400 audit(1756953864.182:12000): avc: denied { unmount } for pid=9185 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 420.612165][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 420.932422][ T1135] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 421.107095][ T9199] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2844'. [ 421.477466][ T9204] loop1: detected capacity change from 0 to 40427 [ 421.493408][ T9204] F2FS-fs (loop1): heap/no_heap options were deprecated [ 421.500899][ T9204] F2FS-fs (loop1): Unrecognized mount option "activelogs=6" or missing value [ 422.023578][ T9222] syz.3.2850[9222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.024012][ T9222] syz.3.2850[9222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.203857][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 424.046974][ T9244] incfs: Backing dir is not set, filesystem can't be mounted. [ 424.054749][ T9244] incfs: mount failed -2 [ 427.110056][ T9284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2870'. [ 427.119316][ T9284] device lo entered promiscuous mode [ 427.125813][ T9284] device tunl0 entered promiscuous mode [ 427.132356][ T9284] device gre0 entered promiscuous mode [ 427.139432][ T9284] device gretap0 entered promiscuous mode [ 427.146402][ T9284] device erspan0 entered promiscuous mode [ 427.153324][ T9284] device ip_vti0 entered promiscuous mode [ 427.159924][ T9284] device ip6_vti0 entered promiscuous mode [ 427.166951][ T9284] device sit0 entered promiscuous mode [ 427.174635][ T9284] device ip6tnl0 entered promiscuous mode [ 427.181470][ T9284] device ip6gre0 entered promiscuous mode [ 427.188434][ T9284] device ip6gretap0 entered promiscuous mode [ 427.195601][ T9284] device vcan0 entered promiscuous mode [ 427.201724][ T9284] device dummy0 entered promiscuous mode [ 427.208710][ T9284] device veth0 entered promiscuous mode [ 427.216582][ T9284] device veth1 entered promiscuous mode [ 427.223518][ T9284] device wg0 entered promiscuous mode [ 427.229851][ T9284] device wg1 entered promiscuous mode [ 427.236693][ T9284] device wg2 entered promiscuous mode [ 427.247689][ T9284] device veth0_to_bridge entered promiscuous mode [ 427.256754][ T9284] device veth1_to_bridge entered promiscuous mode [ 427.264234][ T9284] device bridge_slave_1 entered promiscuous mode [ 427.271650][ T9284] device veth0_to_bond entered promiscuous mode [ 427.279337][ T9284] device bond_slave_0 entered promiscuous mode [ 427.286637][ T9284] device veth1_to_bond entered promiscuous mode [ 427.294014][ T9284] device bond_slave_1 entered promiscuous mode [ 427.301237][ T9284] device veth0_to_team entered promiscuous mode [ 427.308676][ T9284] device team_slave_0 entered promiscuous mode [ 427.315763][ T9284] device veth1_to_team entered promiscuous mode [ 427.322969][ T9284] device team_slave_1 entered promiscuous mode [ 427.330104][ T9284] device veth0_to_batadv entered promiscuous mode [ 427.337953][ T9284] device batadv_slave_0 entered promiscuous mode [ 427.345660][ T9284] device veth1_to_batadv entered promiscuous mode [ 427.353082][ T9284] device batadv_slave_1 entered promiscuous mode [ 427.360378][ T9284] device xfrm0 entered promiscuous mode [ 427.367667][ T9284] device veth0_to_hsr entered promiscuous mode [ 427.374817][ T9284] device hsr_slave_0 entered promiscuous mode [ 427.381808][ T9284] device veth1_to_hsr entered promiscuous mode [ 427.389008][ T9284] device hsr_slave_1 entered promiscuous mode [ 427.395982][ T9284] device veth1_virt_wifi entered promiscuous mode [ 427.403368][ T9284] device veth0_virt_wifi entered promiscuous mode [ 427.411500][ T9284] device veth0_macvtap entered promiscuous mode [ 427.418779][ T9284] device macsec0 entered promiscuous mode [ 427.425650][ T9284] device syztnl1 entered promiscuous mode [ 427.432219][ T9284] device gre1 entered promiscuous mode [ 427.438490][ T9284] device syztnl0 entered promiscuous mode [ 427.445677][ T9284] device bridge1 entered promiscuous mode [ 427.452253][ T9284] device veth2 entered promiscuous mode [ 427.458690][ T9284] device veth3 entered promiscuous mode [ 427.465206][ T9284] device veth4 entered promiscuous mode [ 427.471677][ T9284] device veth5 entered promiscuous mode [ 427.478085][ T9284] device gre2 entered promiscuous mode [ 427.484423][ T9284] device ip6erspan0 entered promiscuous mode [ 427.491225][ T9284] device bridge2 entered promiscuous mode [ 427.497798][ T9284] device veth6 entered promiscuous mode [ 427.504170][ T9284] device veth7 entered promiscuous mode [ 427.510494][ T9284] device bridge3 entered promiscuous mode [ 427.517149][ T9284] device bridge4 entered promiscuous mode [ 427.523642][ T9284] device bridge5 entered promiscuous mode [ 427.530199][ T9284] device ip6tnl1 entered promiscuous mode [ 427.536736][ T9284] device bridge6 entered promiscuous mode [ 427.543677][ T9284] device veth8 entered promiscuous mode [ 427.550017][ T9284] device veth9 entered promiscuous mode [ 427.556466][ T9284] device veth10 entered promiscuous mode [ 427.562936][ T9284] device veth11 entered promiscuous mode [ 427.569360][ T9284] device bridge0 entered promiscuous mode [ 427.575783][ T9284] device bridge7 entered promiscuous mode [ 429.890144][ T28] audit: type=1400 audit(1756953873.672:12001): avc: denied { read } for pid=9317 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 193) OK Stopping crond: stopped /usr/sbin/crond (pid 186) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 140) [ 430.873618][ T28] audit: type=1400 audit(1756953874.662:12002): avc: denied { search } for pid=9348 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 431.143873][ T28] audit: type=1400 audit(1756953874.932:12003): avc: denied { write } for pid=141 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.213225][ T28] audit: type=1400 audit(1756953874.932:12004): avc: denied { remove_name } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.278352][ T28] audit: type=1400 audit(1756953874.932:12005): avc: denied { unlink } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK [ 431.308510][ T28] audit: type=1400 audit(1756953874.962:12006): avc: denied { read write } for pid=9358 comm="ip" path="/dev/console" dev="rootfs" ino=2106 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 Stopping iptables: [ 431.351799][ T28] audit: type=1400 audit(1756953874.962:12007): avc: denied { unlink } for pid=141 comm="dhcpcd" name="pid" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK [ 431.382605][ T28] audit: type=1400 audit(1756953875.132:12008): avc: denied { read write } for pid=9367 comm="iptables" path="/dev/console" dev="rootfs" ino=2106 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 Stopping system message bus: [ 431.452910][ T28] audit: type=1400 audit(1756953875.162:12009): avc: denied { search } for pid=9367 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.480208][ T28] audit: type=1400 audit(1756953875.162:12010): avc: denied { write } for pid=9367 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 done [ 432.084368][ T9389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2888'. [ 432.114310][ T9389] tc_dump_action: action bad kind [ 432.743518][ T9401] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 killall: can't kill pid 362: No such process killall: can't kill pid 363: No such process killall: can't kill pid 779: No such process killall: can't kill pi[ 432.861752][ T102] printk: udevd: 2 output lines suppressed due to ratelimiting d 4523: No such process Stopping klogd: OK Stopping acpid: OK [ 434.068940][ T9442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9442 comm=syz.4.2904 [ 434.132201][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. Stopping syslogd: stopped /sbin/syslogd (pid 84) OK [ 434.702175][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! umount: can't remount debugfs read-only [ 436.053548][ T9480] loop1: detected capacity change from 0 to 512 umount: sysfs bu[ 436.070646][ T9480] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled sy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 436.109474][ T9480] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 436.142193][ T28] kauditd_printk_skb: 42 callbacks suppressed Connection to 10.128.0.54 closed by remote host. [ 436.142214][ T28] audit: type=1400 audit(1756953879.922:12053): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[14238]" dev="pipefs" ino=14238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 436.323626][ T560] tipc: Left network mode [ 436.904378][ T560] device veth1_macvtap left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 437.444194][ T560] tipc: Left network mode [ 437.448670][ T560] tipc: Disabling bearer [ 437.453847][ T560] tipc: Disabling bearer [ 437.459293][ T560] tipc: Left network mode [ 437.463972][ T560] tipc: Left network mode [ 437.468610][ T560] tipc: Left network mode [ 438.236588][ T9482] kvm: exiting hardware virtualization [ 438.244272][ T9482] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 438.251284][ T9482] ACPI: PM: Preparing to enter system sleep state S5 [ 438.258305][ T9482] reboot: Power down serialport: VM disconnected.