last executing test programs: 2.54818698s ago: executing program 4 (id=741): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltaction={0x44, 0x31, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) syz_usbip_server_init(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) socket(0x10, 0x803, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 2.231983114s ago: executing program 2 (id=743): r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.107971499s ago: executing program 2 (id=744): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 2.08355554s ago: executing program 2 (id=745): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x1e9a21, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r2, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.060985531s ago: executing program 2 (id=757): socket$netlink(0x10, 0x3, 0xf) r0 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x24008854) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xa4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x548}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c000}, 0x8001) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000009c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 1.955034236s ago: executing program 1 (id=748): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000011, &(0x7f0000000180), 0x0, 0x617, &(0x7f0000001100)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x8000000000}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") 1.766963294s ago: executing program 2 (id=750): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) 1.567263382s ago: executing program 0 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioperm(0x4, 0x1, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x12) 1.528749474s ago: executing program 0 (id=754): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) close(r6) 1.458714747s ago: executing program 0 (id=766): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = openat$random(0xffffffffffffff9c, 0x0, 0x101c00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x1, 0x0) ioctl$RNDADDENTROPY(r4, 0x40045201, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1.412235939s ago: executing program 1 (id=756): mmap$usbmon(&(0x7f0000244000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) io_setup(0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) 1.294114454s ago: executing program 3 (id=758): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x10009d3, @private1, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}, @sadb_address={0x5, 0x5, 0xff, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}]}, 0x70}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000180)=[0x7], 0x0, 0x7f, 0x1}}, 0x40) 1.261305735s ago: executing program 4 (id=759): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x1e9a21, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r2, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.201866388s ago: executing program 4 (id=760): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) recvmmsg(r1, &(0x7f000000e280), 0x58a, 0x42, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 1.201350538s ago: executing program 1 (id=761): socket$netlink(0x10, 0x3, 0xf) r0 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x24008854) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xa4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x548}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c000}, 0x8001) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000009c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 1.201134648s ago: executing program 3 (id=762): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40) 1.084257103s ago: executing program 0 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x5) write$cgroup_subtree(r5, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 1.056490424s ago: executing program 1 (id=764): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) close(0x4) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4040840}, 0x240000c0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 959.282188ms ago: executing program 3 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioperm(0x4, 0x1, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x12) 958.412298ms ago: executing program 4 (id=767): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4600}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="9a91a5a3a592bafb94ffece9d27c1c575d6c718de75e6815e3362fad71091ef0b4d831be0f31d33cfd5786a337da031adcc6aabcf77d403c9704c4024b72ff31e30211aeab913360da7d845e34350b569a0487e4f670be55ed44400835754aeddfc79546890cab813647b69c8ce61d428fcdad9face3c716afb3ffb974efa9736f21d7195ec28d"], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) lsetxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000700)) recvfrom$llc(r4, &(0x7f00000004c0)=""/85, 0x55, 0x20, 0x0, 0x0) 840.287213ms ago: executing program 3 (id=768): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 191.636571ms ago: executing program 0 (id=769): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000011, &(0x7f0000000180), 0x0, 0x617, &(0x7f0000001100)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x8000000000}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") 191.455711ms ago: executing program 1 (id=770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000400)=0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f00000001c0)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cd, &(0x7f0000001180)="$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") 191.291631ms ago: executing program 2 (id=771): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r0, r1) 191.142981ms ago: executing program 3 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) truncate(0x0, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(0x0, 0x0) r1 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) 190.990661ms ago: executing program 4 (id=773): mmap$usbmon(&(0x7f0000244000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) io_setup(0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) 21.800599ms ago: executing program 3 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x3, 0x635e, 0x5, 0xfffdfffd, 0x40006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040004) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x61}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.887739ms ago: executing program 0 (id=775): perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x100f58, 0x3, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) poll(0x0, 0x0, 0x7f) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) sched_getscheduler(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 776.119µs ago: executing program 4 (id=776): socket$netlink(0x10, 0x3, 0xf) r0 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x24008854) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xa4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x548}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c000}, 0x8001) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000009c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 0s ago: executing program 1 (id=786): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000011, &(0x7f0000000180), 0x0, 0x617, &(0x7f0000001100)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x8000000000}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") kernel console output (not intermixed with test programs): rupted xattr block 6: invalid header [ 38.605888][ T4069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 38.616085][ T4069] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.111: corrupted xattr block 6: invalid header [ 38.629401][ T4069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 38.638486][ T4069] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.111: corrupted xattr block 6: invalid header [ 38.687031][ T4069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 38.708748][ T4069] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.111: corrupted xattr block 6: invalid header [ 38.730400][ T4069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 38.757464][ T4069] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.111: corrupted xattr block 6: invalid header [ 38.934766][ T4108] loop3: detected capacity change from 0 to 512 [ 38.970070][ T4108] EXT4-fs: Ignoring removed bh option [ 38.975539][ T4108] ext3: Unknown parameter 'audit' [ 39.259599][ T4139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.522086][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.570379][ T4182] netlink: 'syz.4.118': attribute type 16 has an invalid length. [ 39.578242][ T4182] netlink: 'syz.4.118': attribute type 17 has an invalid length. [ 39.612914][ T4182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.697475][ T4193] tipc: Started in network mode [ 39.702472][ T4193] tipc: Node identity ac14140f, cluster identity 4711 [ 39.710957][ T4193] tipc: New replicast peer: 255.255.255.83 [ 39.716813][ T4193] tipc: Enabled bearer , priority 10 [ 39.725305][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 39.734208][ T4195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.741714][ T4195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.749410][ T4195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.756822][ T4195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.804918][ T4204] syz.4.128 uses obsolete (PF_INET,SOCK_PACKET) [ 39.987681][ T4220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 40.125336][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 40.151223][ T3402] usb usb8-port1: unable to enumerate USB device [ 40.179325][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 40.222776][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 40.222791][ T29] audit: type=1400 audit(1764466529.563:441): avc: denied { create } for pid=4223 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.314856][ T29] audit: type=1400 audit(1764466529.623:442): avc: denied { unmount } for pid=4223 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.356714][ T29] audit: type=1400 audit(1764466529.693:443): avc: denied { create } for pid=4225 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.377024][ T29] audit: type=1400 audit(1764466529.713:444): avc: denied { ioctl } for pid=4225 comm="syz.2.137" path="socket:[6662]" dev="sockfs" ino=6662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.401387][ T29] audit: type=1400 audit(1764466529.713:445): avc: denied { write } for pid=4225 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.426943][ T29] audit: type=1400 audit(1764466529.763:446): avc: denied { mount } for pid=4227 comm="syz.0.138" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 40.459308][ T29] audit: type=1400 audit(1764466529.793:447): avc: denied { execmem } for pid=4227 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.601360][ T4240] loop0: detected capacity change from 0 to 128 [ 40.619454][ T29] audit: type=1400 audit(1764466529.953:448): avc: denied { mount } for pid=4238 comm="syz.0.142" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.647477][ T29] audit: type=1400 audit(1764466529.983:449): avc: denied { setopt } for pid=4234 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.647894][ T4235] netlink: 'syz.2.141': attribute type 10 has an invalid length. [ 40.679305][ T4235] team0: Port device dummy0 added [ 40.705946][ T4235] netlink: 'syz.2.141': attribute type 10 has an invalid length. [ 40.716722][ T4235] team0: Port device dummy0 removed [ 40.725002][ T4239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 40.740359][ T4239] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 40.797691][ T29] audit: type=1400 audit(1764466530.133:450): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.827984][ T4245] loop1: detected capacity change from 0 to 1024 [ 40.839903][ T3409] tipc: Node number set to 2886997007 [ 40.846119][ T4242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 40.934554][ T4245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.949329][ T4259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 40.959045][ T4248] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 41.027358][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.036747][ T4259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 41.082026][ T4270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 41.128936][ T4278] loop4: detected capacity change from 0 to 1024 [ 41.146127][ T4280] netlink: 'syz.3.155': attribute type 4 has an invalid length. [ 41.165461][ T4280] netlink: 'syz.3.155': attribute type 4 has an invalid length. [ 41.168058][ T4278] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.184227][ T4278] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.195120][ T4278] JBD2: no valid journal superblock found [ 41.200886][ T4278] EXT4-fs (loop4): Could not load journal inode [ 41.253192][ T4285] syzkaller0: entered promiscuous mode [ 41.258682][ T4285] syzkaller0: entered allmulticast mode [ 41.323187][ T4293] loop4: detected capacity change from 0 to 512 [ 41.335328][ T4293] EXT4-fs: Ignoring removed oldalloc option [ 41.355546][ T4293] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.374401][ T4293] EXT4-fs (loop4): 1 truncate cleaned up [ 41.382335][ T4293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.513411][ T4307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4307 comm=syz.3.163 [ 41.541454][ T4310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.164'. [ 41.558919][ T4310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 41.822369][ T4314] loop3: detected capacity change from 0 to 512 [ 41.856786][ T4314] EXT4-fs: Ignoring removed bh option [ 41.932329][ T4314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.945581][ T4314] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.972210][ T4314] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #18: comm syz.3.166: corrupted inode contents [ 41.989054][ T4314] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #18: comm syz.3.166: mark_inode_dirty error [ 42.000955][ T4314] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #18: comm syz.3.166: corrupted inode contents [ 42.003834][ T4320] ip6t_srh: unknown srh match flags 4000 [ 42.014321][ T4314] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #18: comm syz.3.166: mark_inode_dirty error [ 42.030957][ T4314] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #18: comm syz.3.166: mark inode dirty (error -117) [ 42.043952][ T4314] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 42.074719][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.202573][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.216522][ T4331] 0ŞXą¦Ŕ: renamed from caif0 [ 42.228355][ T4331] 0ŞXą¦Ŕ: entered allmulticast mode [ 42.233755][ T4331] A link change request failed with some changes committed already. Interface 60ŞXą¦Ŕ may have been left with an inconsistent configuration, please check. [ 42.297478][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.304661][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.329213][ T4338] 0ŞXą¦Ŕ: left allmulticast mode [ 42.352093][ T4341] loop4: detected capacity change from 0 to 512 [ 42.381721][ T4341] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.415065][ T4341] EXT4-fs (loop4): 1 truncate cleaned up [ 42.443301][ T3757] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.452388][ T3757] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.462980][ T4344] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 42.470318][ T4344] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 42.491545][ T4346] wg1 speed is unknown, defaulting to 1000 [ 42.517541][ T4341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.537355][ T4346] wg1 speed is unknown, defaulting to 1000 [ 42.544163][ T4346] wg1 speed is unknown, defaulting to 1000 [ 42.553908][ T3757] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.562861][ T3757] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.580401][ T4346] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.597193][ T4346] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 42.608220][ T4341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.628209][ T4346] wg1 speed is unknown, defaulting to 1000 [ 42.628221][ T3757] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.628248][ T3757] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.628335][ T3757] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.660723][ T3757] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.670096][ T4346] wg1 speed is unknown, defaulting to 1000 [ 42.676466][ T4346] wg1 speed is unknown, defaulting to 1000 [ 42.682799][ T4346] wg1 speed is unknown, defaulting to 1000 [ 42.688928][ T4346] wg1 speed is unknown, defaulting to 1000 [ 42.712625][ T4341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.752543][ T4341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.792705][ T4341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.849892][ T3757] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.864164][ T3758] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.875474][ T3758] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.886693][ T3758] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.921107][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.741323][ T4378] netlink: 'syz.4.189': attribute type 1 has an invalid length. [ 43.780794][ T4378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.789164][ T4383] netlink: '': attribute type 4 has an invalid length. [ 43.822757][ T4386] macvlan2: entered promiscuous mode [ 43.828134][ T4386] macvlan2: entered allmulticast mode [ 43.858065][ T4386] bond1: entered promiscuous mode [ 43.931924][ T4386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 44.237856][ T4386] team0: Port device macvlan2 added [ 44.259255][ T4392] wg1 speed is unknown, defaulting to 1000 [ 44.323648][ T4378] bond1: (slave ip6gretap0): making interface the new active one [ 44.331483][ T4378] ip6gretap0: entered promiscuous mode [ 44.338069][ T4378] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 44.397744][ T4395] tipc: Enabling of bearer rejected, failed to enable media [ 44.998557][ T4409] team0: Port device team_slave_1 removed [ 45.070980][ T44] Bluetooth: hci0: sending frame failed (-49) [ 45.084274][ T3560] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 45.106727][ T4416] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 45.113245][ T4416] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.120658][ T4416] vhci_hcd vhci_hcd.0: Device attached [ 45.135974][ T4420] loop3: detected capacity change from 0 to 512 [ 45.162097][ T4420] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.181293][ T4420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.210280][ T4420] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.236198][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 45.236209][ T29] audit: type=1400 audit(1764466534.573:881): avc: denied { read append open } for pid=4419 comm="syz.3.202" path="/35/bus/blkio.bfq.io_merged" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.314648][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.329025][ T29] audit: type=1400 audit(1764466534.613:882): avc: denied { map } for pid=4419 comm="syz.3.202" path="/35/bus/blkio.bfq.io_merged" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.352466][ T29] audit: type=1400 audit(1764466534.613:883): avc: denied { write } for pid=4419 comm="syz.3.202" name="blkio.bfq.io_merged" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.375381][ T29] audit: type=1400 audit(1764466534.613:884): avc: denied { write } for pid=4415 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 45.394524][ T29] audit: type=1400 audit(1764466534.613:885): avc: denied { append } for pid=4419 comm="syz.3.202" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.416589][ T3429] vhci_hcd: vhci_device speed not set [ 45.480275][ T3429] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 45.546955][ T29] audit: type=1400 audit(1764466534.883:886): avc: denied { wake_alarm } for pid=4424 comm="syz.2.204" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.609468][ T4427] netlink: 'syz.2.206': attribute type 4 has an invalid length. [ 45.657556][ T29] audit: type=1326 audit(1764466534.993:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 45.680878][ T29] audit: type=1326 audit(1764466534.993:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 45.707507][ T29] audit: type=1326 audit(1764466535.043:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 45.730774][ T29] audit: type=1326 audit(1764466535.043:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 45.834717][ T4443] netlink: 'syz.0.214': attribute type 27 has an invalid length. [ 45.862012][ T4440] loop4: detected capacity change from 0 to 128 [ 45.874328][ T4440] FAT-fs (loop4): error, clusters badly computed (2 != 0) [ 45.875372][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.881473][ T4440] FAT-fs (loop4): Filesystem has been set read-only [ 45.888628][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.910855][ T4440] FAT-fs (loop4): error, clusters badly computed (3 != 1) [ 45.918887][ T4440] FAT-fs (loop4): error, clusters badly computed (4 != 2) [ 45.927961][ T4417] vhci_hcd: connection reset by peer [ 45.933903][ T3744] vhci_hcd: stop threads [ 45.938201][ T3744] vhci_hcd: release socket [ 45.942627][ T3744] vhci_hcd: disconnect device [ 46.023846][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.038980][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.094956][ T4455] loop3: detected capacity change from 0 to 512 [ 46.121698][ T4447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.129353][ T4447] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.139007][ T4455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.159200][ T4447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.180241][ T4455] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.191712][ T3757] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.219253][ T3757] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.233227][ T3757] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.245365][ T3757] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.248096][ T4463] __nla_validate_parse: 5 callbacks suppressed [ 46.248109][ T4463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.220'. [ 46.270094][ T4455] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.217: corrupted xattr block 6: invalid header [ 46.290704][ T4455] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 46.300166][ T4455] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.217: corrupted xattr block 6: invalid header [ 46.313337][ T4455] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 46.322738][ T4455] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.217: corrupted xattr block 6: invalid header [ 46.330428][ T4466] syzkaller1: entered promiscuous mode [ 46.336574][ T4455] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 46.341150][ T4466] syzkaller1: entered allmulticast mode [ 46.350172][ T4455] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.217: corrupted xattr block 6: invalid header [ 46.371581][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 46.376245][ T4466] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 46.392300][ T4466] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 46.402991][ T4455] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 46.412043][ T4455] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.217: corrupted xattr block 6: invalid header [ 46.425266][ T4455] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 46.434890][ T4455] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.217: corrupted xattr block 6: invalid header [ 46.493935][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.651152][ T4484] 9pnet_virtio: no channels available for device 127.0.0.1 [ 46.673777][ T4483] xt_hashlimit: max too large, truncated to 1048576 [ 46.753544][ T4489] tipc: Started in network mode [ 46.758439][ T4489] tipc: Node identity fe79b57f961a, cluster identity 4711 [ 46.765607][ T4489] tipc: Enabled bearer , priority 0 [ 46.775716][ T4489] syzkaller0: entered promiscuous mode [ 46.781287][ T4489] syzkaller0: entered allmulticast mode [ 46.793454][ T4489] tipc: Resetting bearer [ 46.850290][ T4488] tipc: Resetting bearer [ 46.858017][ T4488] tipc: Disabling bearer [ 46.962581][ T4491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'. [ 46.993518][ T4491] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64) [ 47.002759][ T4491] SELinux: failed to load policy [ 47.069653][ T4502] 9pnet: Unknown protocol version 9 [ 47.085596][ T4502] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.235'. [ 47.095409][ T4502] netlink: zone id is out of range [ 47.100788][ T4502] netlink: zone id is out of range [ 47.106513][ T4502] netlink: zone id is out of range [ 47.112256][ T4502] netlink: zone id is out of range [ 47.117724][ T4502] netlink: zone id is out of range [ 47.123098][ T4502] netlink: zone id is out of range [ 47.129467][ T4502] netlink: zone id is out of range [ 47.135036][ T4502] netlink: zone id is out of range [ 47.140394][ T4502] netlink: zone id is out of range [ 47.222372][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.229588][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.261773][ T4506] netlink: 'syz.4.237': attribute type 4 has an invalid length. [ 47.269428][ T4506] netlink: 152 bytes leftover after parsing attributes in process `syz.4.237'. [ 47.272606][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.288168][ T4504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.345466][ T4506] .`: renamed from bond0 (while UP) [ 47.355524][ T3749] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.376124][ T3749] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.403323][ T3749] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.425165][ T3749] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.442900][ T4510] loop4: detected capacity change from 0 to 512 [ 47.461762][ T4510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.474468][ T4510] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.493925][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.557350][ T4516] netlink: 'syz.1.238': attribute type 4 has an invalid length. [ 47.886156][ T4520] loop4: detected capacity change from 0 to 512 [ 47.917555][ T4520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.040601][ T4520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.151593][ T4520] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.417986][ T4528] loop0: detected capacity change from 0 to 512 [ 48.446720][ T4528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.501209][ T4528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.551827][ T4528] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.656677][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.747884][ T4532] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 48.787463][ T4532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.839246][ T4532] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 49.083632][ T4556] loop0: detected capacity change from 0 to 128 [ 49.091091][ T4553] loop1: detected capacity change from 0 to 1024 [ 49.100872][ T4553] EXT4-fs: Ignoring removed orlov option [ 49.138264][ T4553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.401344][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.410670][ T4571] wg1 speed is unknown, defaulting to 1000 [ 49.421965][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.442594][ T4575] pim6reg1: entered promiscuous mode [ 49.447900][ T4575] pim6reg1: entered allmulticast mode [ 49.458937][ T4580] loop3: detected capacity change from 0 to 512 [ 49.563156][ T4580] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.574660][ T4580] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 49.584779][ T4580] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.265: Corrupt directory, running e2fsck is recommended [ 49.618671][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 49.633144][ T4580] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 49.641672][ T4580] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.265: corrupted in-inode xattr: invalid ea_ino [ 49.667600][ T4580] EXT4-fs (loop3): Remounting filesystem read-only [ 49.674860][ T4580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.713285][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 49.758004][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.906868][ T4591] loop3: detected capacity change from 0 to 512 [ 50.031040][ T4591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.031247][ T4591] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.180747][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.330621][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 50.330633][ T29] audit: type=1400 audit(1764466539.673:1069): avc: denied { connect } for pid=4609 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.479462][ T4620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 50.494451][ T4620] team1: entered promiscuous mode [ 50.499498][ T4620] team1: entered allmulticast mode [ 50.539894][ T3429] usb 3-1: enqueue for inactive port 0 [ 50.545441][ T3429] usb 3-1: enqueue for inactive port 0 [ 50.605395][ T4624] syzkaller0: entered promiscuous mode [ 50.610919][ T4624] syzkaller0: entered allmulticast mode [ 50.669778][ T3429] vhci_hcd: vhci_device speed not set [ 50.729437][ T29] audit: type=1400 audit(1764466540.063:1070): avc: denied { name_bind } for pid=4635 comm="syz.2.284" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 50.799372][ T4639] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4639 comm=syz.2.285 [ 50.808419][ T4643] loop4: detected capacity change from 0 to 128 [ 50.830827][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 50.840565][ T3409] IPVS: starting estimator thread 0... [ 50.930241][ T4644] IPVS: using max 2784 ests per chain, 139200 per kthread [ 51.159881][ T4654] bridge_slave_0: left allmulticast mode [ 51.165601][ T4654] bridge_slave_0: left promiscuous mode [ 51.171331][ T4654] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.179042][ T4654] bridge_slave_1: left allmulticast mode [ 51.184713][ T4654] bridge_slave_1: left promiscuous mode [ 51.190410][ T4654] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.212328][ T4654] bond0: (slave bond_slave_0): Releasing backup interface [ 51.227261][ T29] audit: type=1326 audit(1764466540.563:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 51.230218][ T4659] process 'syz.0.293' launched '/dev/fd/4' with NULL argv: empty string added [ 51.250639][ T29] audit: type=1326 audit(1764466540.563:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 51.283177][ T4654] bond0: (slave bond_slave_1): Releasing backup interface [ 51.292238][ T4654] team0: Port device team_slave_0 removed [ 51.298284][ T29] audit: type=1326 audit(1764466540.563:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 51.321651][ T29] audit: type=1326 audit(1764466540.563:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 51.344998][ T29] audit: type=1326 audit(1764466540.563:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 51.368288][ T29] audit: type=1326 audit(1764466540.563:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 51.391579][ T29] audit: type=1326 audit(1764466540.563:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 51.414887][ T29] audit: type=1326 audit(1764466540.563:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.0.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 51.438746][ T4654] team0: Port device team_slave_1 removed [ 51.444723][ T4654] net_ratelimit: 3 callbacks suppressed [ 51.444731][ T4654] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 51.468225][ T4657] team0: Mode changed to "loadbalance" [ 51.577631][ T4671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 52.295728][ T4699] Set syz1 is full, maxelem 65536 reached [ 52.439352][ T4706] loop0: detected capacity change from 0 to 512 [ 52.492859][ T4706] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.307: error while reading EA inode 32 err=-116 [ 52.506480][ T4706] EXT4-fs (loop0): Remounting filesystem read-only [ 52.513109][ T4706] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 52.523279][ T4706] EXT4-fs (loop0): 1 orphan inode deleted [ 52.529824][ T4706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.776964][ T4715] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.834022][ T4719] tipc: Started in network mode [ 52.838924][ T4719] tipc: Node identity d2af79bdb64f, cluster identity 4711 [ 52.846227][ T4719] tipc: Enabled bearer , priority 0 [ 52.863965][ T4719] tipc: Disabling bearer [ 52.901858][ T4715] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.939016][ T4721] cgroup: fork rejected by pids controller in /syz3 [ 53.035595][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.063092][ T4715] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.153470][ T4715] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.294379][ T3757] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.338497][ T3757] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.357882][ T3757] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.373325][ T3757] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.391815][ T3757] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 53.674451][ T9796] wg1 speed is unknown, defaulting to 1000 [ 53.761805][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 53.780254][T10449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.887165][T10462] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 53.895821][T10462] ref_ctr increment failed for inode: 0x168 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811c032280 [ 53.907441][T10462] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 53.916127][T10462] ref_ctr decrement failed for inode: 0x168 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811c032280 [ 53.927090][T10462] uprobe: syz.4.323:10462 failed to unregister, leaking uprobe [ 54.114684][T10467] wg1 speed is unknown, defaulting to 1000 [ 54.171841][T10472] loop3: detected capacity change from 0 to 164 [ 54.172483][T10470] syzkaller0: entered promiscuous mode [ 54.183675][T10470] syzkaller0: entered allmulticast mode [ 54.194749][T10472] ISOFS: unable to read i-node block [ 54.200498][T10472] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 54.240660][T10479] loop3: detected capacity change from 0 to 128 [ 54.367158][T10483] wg1 speed is unknown, defaulting to 1000 [ 54.477256][ T3757] kworker/u8:26: attempt to access beyond end of device [ 54.477256][ T3757] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 54.539554][ T3757] kworker/u8:26: attempt to access beyond end of device [ 54.539554][ T3757] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 54.570813][T10485] loop0: detected capacity change from 0 to 512 [ 54.606828][ T3757] kworker/u8:26: attempt to access beyond end of device [ 54.606828][ T3757] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 54.631089][T10485] EXT4-fs (loop0): failed to initialize system zone (-117) [ 54.651418][T10485] EXT4-fs (loop0): mount failed [ 54.674319][ T3757] kworker/u8:26: attempt to access beyond end of device [ 54.674319][ T3757] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 54.715130][ T3757] kworker/u8:26: attempt to access beyond end of device [ 54.715130][ T3757] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 54.759830][ T3757] kworker/u8:26: attempt to access beyond end of device [ 54.759830][ T3757] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 54.830524][ T3757] kworker/u8:26: attempt to access beyond end of device [ 54.830524][ T3757] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 54.925098][ T3757] kworker/u8:26: attempt to access beyond end of device [ 54.925098][ T3757] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 54.977482][ T3757] kworker/u8:26: attempt to access beyond end of device [ 54.977482][ T3757] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 55.012674][T10495] pim6reg: entered allmulticast mode [ 55.033351][T10495] pim6reg: left allmulticast mode [ 55.042135][ T3757] kworker/u8:26: attempt to access beyond end of device [ 55.042135][ T3757] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 55.437962][T10501] debugfs: 'ttyS3' already exists in 'caif_serial' [ 55.568434][ T3429] Process accounting resumed [ 55.604542][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 55.604553][ T29] audit: type=1400 audit(1764466544.943:1591): avc: denied { read write } for pid=10505 comm="syz.3.339" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.634977][ T29] audit: type=1400 audit(1764466544.943:1592): avc: denied { open } for pid=10505 comm="syz.3.339" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.778137][T10511] loop3: detected capacity change from 0 to 512 [ 55.852583][T10515] netlink: 'syz.0.343': attribute type 39 has an invalid length. [ 55.874478][ T29] audit: type=1400 audit(1764466545.093:1593): avc: denied { cmd } for pid=10508 comm="syz.0.340" path="socket:[8482]" dev="sockfs" ino=8482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.900375][T10511] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.3.341: corrupted xattr block 95: invalid header [ 55.914857][T10511] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.341: bg 0: block 7: invalid block bitmap [ 55.927215][T10511] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 55.936229][T10511] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #11: comm syz.3.341: corrupted xattr block 95: invalid header [ 55.951823][T10511] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 55.961218][ T29] audit: type=1326 audit(1764466545.293:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10513 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 55.961320][T10511] EXT4-fs (loop3): 1 orphan inode deleted [ 55.984702][ T29] audit: type=1326 audit(1764466545.293:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10513 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 55.984723][ T29] audit: type=1326 audit(1764466545.303:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10513 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 55.984754][ T29] audit: type=1326 audit(1764466545.303:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10513 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 55.991330][T10511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.064291][ T29] audit: type=1326 audit(1764466545.303:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10513 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 56.114457][ T29] audit: type=1326 audit(1764466545.413:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10513 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 56.137939][ T29] audit: type=1326 audit(1764466545.413:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10513 comm="syz.0.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 56.216662][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 56.247391][T10519] veth2: entered promiscuous mode [ 56.252512][T10519] veth2: entered allmulticast mode [ 56.529498][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.665393][T10527] loop3: detected capacity change from 0 to 1024 [ 56.770604][T10527] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 56.780340][T10527] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.801995][T10527] EXT4-fs (loop3): invalid journal inode [ 56.955238][T10527] loop3: detected capacity change from 0 to 512 [ 56.973388][T10527] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.985426][T10529] netlink: 204 bytes leftover after parsing attributes in process `syz.1.347'. [ 57.010617][T10527] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 57.027781][T10533] netlink: 'syz.1.348': attribute type 12 has an invalid length. [ 57.062228][T10527] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.346: bg 0: block 248: padding at end of block bitmap is not set [ 57.084964][T10535] tipc: Enabling of bearer <&b:v> rejected, media not registered [ 57.096577][T10527] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.346: Failed to acquire dquot type 1 [ 57.116939][T10527] EXT4-fs (loop3): 1 truncate cleaned up [ 57.133898][T10527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 57.165138][T10527] syz.3.346 (10527) used greatest stack depth: 8904 bytes left [ 57.174553][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 57.182889][T10539] 9pnet: Could not find request transport: fd0x0000000000000005 [ 57.212396][T10544] loop3: detected capacity change from 0 to 128 [ 57.220385][T10544] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.233495][T10544] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.383001][T10555] loop0: detected capacity change from 0 to 256 [ 57.427272][T10558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.356'. [ 57.441318][T10558] IPVS: Error connecting to the multicast addr [ 57.897305][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 57.906728][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 58.073131][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.111565][T10586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.153204][T10592] loop1: detected capacity change from 0 to 512 [ 58.160629][T10592] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.223747][T10597] tipc: New replicast peer: 255.255.255.255 [ 58.229834][T10597] tipc: Enabled bearer , priority 10 [ 58.384353][T10604] loop0: detected capacity change from 0 to 512 [ 58.391717][T10604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.413097][T10604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.432198][T10604] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.483879][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.512979][T10614] netlink: 'syz.2.376': attribute type 12 has an invalid length. [ 58.564902][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 58.612480][T10624] loop4: detected capacity change from 0 to 1024 [ 58.630267][T10624] EXT4-fs: Ignoring removed bh option [ 58.648842][T10629] tipc: Enabling of bearer rejected, failed to enable media [ 58.668569][T10624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.693939][T10630] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.383'. [ 58.703321][T10624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.380'. [ 58.703341][T10624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.380'. [ 58.703381][T10624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.380'. [ 58.708086][T10636] netlink: 'syz.2.384': attribute type 4 has an invalid length. [ 58.759791][T10630] netlink: zone id is out of range [ 58.765144][T10630] netlink: zone id is out of range [ 58.767782][T10624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.380'. [ 58.790131][T10630] netlink: zone id is out of range [ 58.795986][T10630] netlink: zone id is out of range [ 58.801776][T10630] netlink: zone id is out of range [ 58.810001][T10630] netlink: zone id is out of range [ 58.820970][T10630] netlink: zone id is out of range [ 58.826180][T10630] netlink: zone id is out of range [ 58.831479][T10630] netlink: zone id is out of range [ 58.836780][T10630] netlink: zone id is out of range [ 58.842990][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.877650][T10645] tipc: Enabled bearer , priority 0 [ 58.892150][T10645] syzkaller0: entered promiscuous mode [ 58.897698][T10645] syzkaller0: entered allmulticast mode [ 58.931965][T10645] tipc: Resetting bearer [ 58.938328][T10647] loop0: detected capacity change from 0 to 512 [ 58.953607][T10644] tipc: Resetting bearer [ 58.963514][T10647] EXT4-fs: Ignoring removed nobh option [ 58.972943][T10644] tipc: Disabling bearer [ 58.990766][T10647] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.388: iget: bad i_size value: 38620345925642 [ 59.015095][T10647] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.388: couldn't read orphan inode 15 (err -117) [ 59.029920][T10647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.133470][T10651] loop4: detected capacity change from 0 to 512 [ 59.147344][T10652] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.388: bg 0: block 5: invalid block bitmap [ 59.170730][T10651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.190431][T10652] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1308 with error 28 [ 59.202984][T10652] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.202984][T10652] [ 59.212711][T10652] EXT4-fs (loop0): Total free blocks count 0 [ 59.218709][T10652] EXT4-fs (loop0): Free/Dirty block details [ 59.224608][T10652] EXT4-fs (loop0): free_blocks=0 [ 59.229528][T10652] EXT4-fs (loop0): dirty_blocks=1351 [ 59.234814][T10652] EXT4-fs (loop0): Block reservation details [ 59.240812][T10652] EXT4-fs (loop0): i_reserved_data_blocks=1351 [ 59.251892][T10654] loop3: detected capacity change from 0 to 512 [ 59.262615][T10651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.285612][T10651] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.296715][T10654] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 59.306618][ T3786] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 1308 with max blocks 40 with error 28 [ 59.310093][T10654] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.336279][T10654] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.391: corrupted inode contents [ 59.340160][ T3429] tipc: Node number set to 1751364991 [ 59.371905][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.387941][T10654] EXT4-fs (loop3): Remounting filesystem read-only [ 59.395416][T10654] EXT4-fs (loop3): 1 truncate cleaned up [ 59.405043][ T3744] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.415636][ T3744] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.444595][T10668] atomic_op ffff88810bf40128 conn xmit_atomic 0000000000000000 [ 59.452210][ T3744] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 59.454706][T10664] 9pnet: Could not find request transport: 01777777777777777777777 [ 59.463770][ T3429] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 59.477848][ T3429] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 59.488340][ T3429] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 59.491198][T10654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.498278][T10669] bridge_slave_1: left allmulticast mode [ 59.514011][T10669] bridge_slave_1: left promiscuous mode [ 59.519700][T10669] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.527826][ T3429] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 59.548505][T10669] bridge_slave_0: left allmulticast mode [ 59.554186][T10669] bridge_slave_0: left promiscuous mode [ 59.559909][T10669] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.611403][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.701984][T10674] loop1: detected capacity change from 0 to 8192 [ 59.743652][T10681] loop4: detected capacity change from 0 to 512 [ 59.766489][T10681] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 59.967382][T10643] syz.2.386 (10643) used greatest stack depth: 7240 bytes left [ 60.227044][T10698] unsupported nla_type 52263 [ 60.392479][T10693] SELinux: failed to load policy [ 60.421992][T10704] wg1 speed is unknown, defaulting to 1000 [ 60.482688][T10706] SELinux: ebitmap: truncated map [ 60.504985][T10707] macvtap0: entered promiscuous mode [ 60.511198][T10707] macvtap0: left promiscuous mode [ 60.516852][T10706] SELinux: failed to load policy [ 60.523051][T10709] IPv6: Can't replace route, no match found [ 61.176665][ T29] kauditd_printk_skb: 773 callbacks suppressed [ 61.176681][ T29] audit: type=1326 audit(1764466550.513:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7e97f749 code=0x7ffc0000 [ 61.238912][ T29] audit: type=1326 audit(1764466550.543:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7e97f749 code=0x7ffc0000 [ 61.240567][T10795] loop1: detected capacity change from 0 to 164 [ 61.262406][ T29] audit: type=1326 audit(1764466550.543:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7e97f749 code=0x7ffc0000 [ 61.291970][ T29] audit: type=1326 audit(1764466550.543:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7e97f749 code=0x7ffc0000 [ 61.292443][T10795] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.315478][ T29] audit: type=1326 audit(1764466550.543:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7e97f749 code=0x7ffc0000 [ 61.346885][ T29] audit: type=1326 audit(1764466550.543:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf7e97f749 code=0x7ffc0000 [ 61.370337][ T29] audit: type=1326 audit(1764466550.543:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7e97f749 code=0x7ffc0000 [ 61.393696][ T29] audit: type=1326 audit(1764466550.543:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fdf7e97f749 code=0x7ffc0000 [ 61.417134][ T29] audit: type=1326 audit(1764466550.543:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7e97f749 code=0x7ffc0000 [ 61.440561][ T29] audit: type=1326 audit(1764466550.543:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10782 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7e97f749 code=0x7ffc0000 [ 61.508531][T10800] wg1 speed is unknown, defaulting to 1000 [ 61.539960][T10798] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.578914][T10798] rock: directory entry would overflow storage [ 61.585147][T10798] rock: sig=0x4f50, size=4, remaining=3 [ 61.590710][T10798] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 61.860327][T10802] wg1 speed is unknown, defaulting to 1000 [ 62.058222][T10810] loop4: detected capacity change from 0 to 1024 [ 62.086080][T10810] EXT4-fs: Ignoring removed orlov option [ 62.128977][T10810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.398911][T10879] __nla_validate_parse: 8 callbacks suppressed [ 62.398938][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 62.414814][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 62.487681][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.524257][T10887] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10887 comm=syz.2.425 [ 62.554220][T10892] ip6tnl0: entered promiscuous mode [ 62.555262][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 62.559465][T10892] ip6tnl0: entered allmulticast mode [ 62.593324][T10894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.605019][T10891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.612437][T10891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.620158][T10891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.627540][T10891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.654486][T10894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.724434][T10894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.759648][T10903] tipc: Enabling of bearer rejected, failed to enable media [ 62.788247][T10894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.846206][T10905] loop3: detected capacity change from 0 to 512 [ 62.879067][ T3782] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.887580][T10905] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.900947][ T3782] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.912431][T10911] wg1 speed is unknown, defaulting to 1000 [ 62.912749][ T3782] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.937864][ T3782] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.956233][T10905] EXT4-fs (loop3): 1 truncate cleaned up [ 62.972149][T10905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.013757][T10919] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.041638][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.107753][T10919] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.201471][T10919] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.281116][T10919] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.339894][T10936] netlink: 'syz.0.441': attribute type 39 has an invalid length. [ 63.728685][T10943] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.081169][T10955] loop3: detected capacity change from 0 to 512 [ 64.087953][T10955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.101310][T10955] EXT4-fs (loop3): 1 truncate cleaned up [ 64.107239][T10955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.133822][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.374862][T10972] wg1 speed is unknown, defaulting to 1000 [ 64.420955][T10972] bridge0: port 1(gretap0) entered blocking state [ 64.427418][T10972] bridge0: port 1(gretap0) entered disabled state [ 64.434261][T10972] gretap0: entered allmulticast mode [ 64.440298][T10972] gretap0: entered promiscuous mode [ 64.451997][T10972] gretap0: left allmulticast mode [ 64.457059][T10972] gretap0: left promiscuous mode [ 64.462107][T10972] bridge0: port 1(gretap0) entered disabled state [ 64.493705][T10978] wg1 speed is unknown, defaulting to 1000 [ 64.541633][T10983] tipc: Enabling of bearer rejected, failed to enable media [ 64.587017][T10989] netlink: 'syz.2.460': attribute type 4 has an invalid length. [ 64.606761][T10991] loop4: detected capacity change from 0 to 512 [ 64.613654][T10991] EXT4-fs: Ignoring removed i_version option [ 64.619654][T10991] EXT4-fs: Ignoring removed bh option [ 64.633321][T10991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.648186][T10991] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.698409][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.738208][T11000] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.811744][T11000] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.931130][T11000] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.013392][T11000] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.038712][T11013] netlink: 176 bytes leftover after parsing attributes in process `syz.2.469'. [ 65.087321][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 65.118008][ T3744] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.131151][ T3744] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.145399][ T3744] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.153886][ T3744] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.220804][T11021] loop3: detected capacity change from 0 to 1024 [ 65.227766][T11021] EXT4-fs: Ignoring removed orlov option [ 65.229563][T11023] rdma_op ffff888103111d80 conn xmit_rdma 0000000000000000 [ 65.236054][T11021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.279162][T11027] loop4: detected capacity change from 0 to 512 [ 65.432160][T11027] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.490506][T11027] EXT4-fs (loop4): mount failed [ 65.726377][T11027] .`: (slave bond_slave_0): Releasing backup interface [ 65.736839][T11027] .`: (slave bond_slave_1): Releasing backup interface [ 65.737160][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 65.758066][T11027] team0: Port device team_slave_0 removed [ 65.768911][T11027] team0: Port device team_slave_1 removed [ 65.785662][T11027] net_ratelimit: 4 callbacks suppressed [ 65.785674][T11027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.824033][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.859496][T11044] loop3: detected capacity change from 0 to 4096 [ 65.866049][T11044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.875173][T11044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.020067][T11056] loop4: detected capacity change from 0 to 128 [ 66.041691][T11056] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.078042][T11056] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.122416][ T3744] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.141507][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.164394][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.485'. [ 66.174876][T11061] loop4: detected capacity change from 0 to 512 [ 66.182603][T11061] EXT4-fs: Ignoring removed oldalloc option [ 66.190699][T11061] EXT4-fs (loop4): 1 truncate cleaned up [ 66.196788][T11061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.278444][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 66.308734][T11061] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 66.557813][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.787492][T11074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.487'. [ 66.831479][T11070] sch_fq: defrate 6 ignored. [ 67.037148][T11082] wg1 speed is unknown, defaulting to 1000 [ 67.419206][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 67.419220][ T29] audit: type=1400 audit(1764466556.753:2792): avc: denied { read write } for pid=11085 comm="syz.3.490" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 67.470137][ T29] audit: type=1400 audit(1764466556.753:2793): avc: denied { open } for pid=11085 comm="syz.3.490" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 67.472866][T11084] wg1 speed is unknown, defaulting to 1000 [ 67.722171][ T29] audit: type=1326 audit(1764466557.043:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 67.745764][ T29] audit: type=1326 audit(1764466557.043:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 67.769288][ T29] audit: type=1326 audit(1764466557.043:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 67.792895][ T29] audit: type=1400 audit(1764466557.043:2797): avc: denied { kexec_image_load } for pid=11095 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 67.794496][T11103] syzkaller0: entered promiscuous mode [ 67.812950][ T29] audit: type=1326 audit(1764466557.043:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 67.813041][ T29] audit: type=1326 audit(1764466557.043:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 67.813064][ T29] audit: type=1326 audit(1764466557.043:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 67.813086][ T29] audit: type=1326 audit(1764466557.053:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11095 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 67.916684][T11103] syzkaller0: entered allmulticast mode [ 67.937184][T11103] tipc: Enabled bearer , priority 0 [ 67.945436][T11102] tipc: Resetting bearer [ 67.952232][T11102] tipc: Disabling bearer [ 68.945460][ T3782] failed while handling packet from 1:16384 [ 68.945479][ T3782] failed while handling packet from 1:16384 [ 68.954359][ T3782] failed while handling packet from 1:16384 [ 68.969589][ T3782] failed while handling packet from 1:16384 [ 68.975638][ T3782] failed while handling packet from 1:16384 [ 69.003651][ T3782] failed while handling packet from 1:16384 [ 69.009549][ T3782] failed while handling packet from 1:16384 [ 69.021734][ T3782] failed while handling packet from 1:16384 [ 69.027631][ T3782] failed while handling packet from 1:16384 [ 69.033756][ T3782] failed while handling packet from 1:16384 [ 69.039830][ T3782] failed while handling packet from 1:16384 [ 69.045717][ T3782] failed while handling packet from 1:16384 [ 69.051618][ T3782] failed while handling packet from 1:16384 [ 69.057505][ T3782] failed while handling packet from 1:16384 [ 69.063484][ T3782] failed while handling packet from 1:16384 [ 69.069465][ T3782] failed while handling packet from 1:16384 [ 69.075798][ T3782] failed while handling packet from 1:16384 [ 69.081773][ T3782] failed while handling packet from 1:16384 [ 69.087654][ T3782] failed while handling packet from 1:16384 [ 69.105067][ T3782] failed while handling packet from 1:16384 [ 69.111115][ T3782] failed while handling packet from 1:16384 [ 69.119320][ T3782] failed while handling packet from 1:16384 [ 69.119522][ T3744] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.125283][ T3782] failed while handling packet from 1:16384 [ 69.149788][ T3782] failed while handling packet from 1:16384 [ 69.156338][ T3782] failed while handling packet from 1:16384 [ 69.163506][ T3782] failed while handling packet from 1:16384 [ 69.169407][ T3782] failed while handling packet from 1:16384 [ 69.175381][ T3782] failed while handling packet from 1:16384 [ 69.181451][ T3782] failed while handling packet from 1:16384 [ 69.187363][ T3782] failed while handling packet from 1:16384 [ 69.219918][T11115] wg1 speed is unknown, defaulting to 1000 [ 69.297453][ T3782] failed while handling packet from 1:16384 [ 69.297491][ T3782] failed while handling packet from 1:16384 [ 69.341603][T11119] wg1 speed is unknown, defaulting to 1000 [ 69.372098][ T3782] failed while handling packet from 1:16384 [ 69.372163][ T3782] failed while handling packet from 1:16384 [ 69.403740][ T3782] failed while handling packet from 1:16384 [ 69.417544][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 69.467429][ T3782] failed while handling packet from 1:16384 [ 69.467457][ T3782] failed while handling packet from 1:16384 [ 69.524322][ T3782] failed while handling packet from 1:16384 [ 69.543748][ T3782] failed while handling packet from 1:16384 [ 69.549782][ T3782] failed while handling packet from 1:16384 [ 69.555876][ T3782] failed while handling packet from 1:16384 [ 69.561970][ T3782] failed while handling packet from 1:16384 [ 69.569494][ T3782] failed while handling packet from 1:16384 [ 69.575585][ T3782] failed while handling packet from 1:16384 [ 69.581523][ T3782] failed while handling packet from 1:16384 [ 69.587432][ T3782] failed while handling packet from 1:16384 [ 69.591894][ T3757] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.593403][ T3782] failed while handling packet from 1:16384 [ 69.607398][ T3757] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.607581][ T3782] failed while handling packet from 1:16384 [ 69.621702][ T3757] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.636170][ T3782] failed while handling packet from 1:16384 [ 69.636186][ T3782] failed while handling packet from 1:16384 [ 69.642648][ T3782] failed while handling packet from 1:16384 [ 69.651346][ T3782] failed while handling packet from 1:16384 [ 69.662987][ T3782] failed while handling packet from 1:16384 [ 69.670875][T11136] loop3: detected capacity change from 0 to 164 [ 69.676999][T11138] loop4: detected capacity change from 0 to 512 [ 69.683835][ T3782] failed while handling packet from 1:16384 [ 69.689430][ T3782] failed while handling packet from 1:16384 [ 69.695976][ T3782] failed while handling packet from 1:16384 [ 69.700996][T11136] bio_check_eod: 102 callbacks suppressed [ 69.701010][T11136] syz.3.506: attempt to access beyond end of device [ 69.701010][T11136] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 69.718603][ T3782] failed while handling packet from 1:16384 [ 69.727500][ T3782] failed while handling packet from 1:16384 [ 69.729043][T11136] syz.3.506: attempt to access beyond end of device [ 69.729043][T11136] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 69.753158][ T3782] failed while handling packet from 1:16384 [ 69.753178][ T3782] failed while handling packet from 1:16384 [ 69.761281][ T3782] failed while handling packet from 1:16384 [ 69.768654][T11143] sch_fq: defrate 4294967295 ignored. [ 69.770423][T11138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.798395][ T3782] failed while handling packet from 1:16384 [ 69.798413][ T3782] failed while handling packet from 1:16384 [ 69.804903][ T3782] failed while handling packet from 1:16384 [ 69.827390][ T3782] failed while handling packet from 1:16384 [ 69.830812][T11140] vhci_hcd: invalid port number 96 [ 69.833392][T11138] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.839179][T11140] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 69.914659][ T3782] failed while handling packet from 1:16384 [ 69.914679][ T3782] failed while handling packet from 1:16384 [ 69.929761][ T3782] failed while handling packet from 1:16384 [ 69.939745][ T3782] failed while handling packet from 1:16384 [ 69.945644][ T3782] failed while handling packet from 1:16384 [ 69.977380][ T3782] failed while handling packet from 1:16384 [ 69.981713][T11151] loop1: detected capacity change from 0 to 8192 [ 69.989702][ T3782] failed while handling packet from 1:16384 [ 70.008552][ T3782] failed while handling packet from 1:16384 [ 70.023461][ T3782] failed while handling packet from 1:16384 [ 70.059755][ T3782] failed while handling packet from 1:16384 [ 70.065760][ T3782] failed while handling packet from 1:16384 [ 70.084724][ T3782] failed while handling packet from 1:16384 [ 70.099306][ T3782] failed while handling packet from 1:16384 [ 70.105472][T11151] loop1: p1 p2 p3 p4 [ 70.130520][ T3782] failed while handling packet from 1:16384 [ 70.130536][ T3782] failed while handling packet from 1:16384 [ 70.136458][ T3782] failed while handling packet from 1:16384 [ 70.142408][ T3782] failed while handling packet from 1:16384 [ 70.148460][ T3782] failed while handling packet from 1:16384 [ 70.148839][T11151] loop1: p1 size 3523149824 extends beyond EOD, [ 70.154395][ T3782] failed while handling packet from 1:16384 [ 70.160249][T11151] truncated [ 70.166548][ T3782] failed while handling packet from 1:16384 [ 70.175552][ T3782] failed while handling packet from 1:16384 [ 70.187455][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.189887][ T3782] failed while handling packet from 1:16384 [ 70.207881][T11170] netlink: 'syz.2.516': attribute type 4 has an invalid length. [ 70.210218][ T3782] failed while handling packet from 1:16384 [ 70.213808][T11170] netlink: 17 bytes leftover after parsing attributes in process `syz.2.516'. [ 70.236223][ T3782] failed while handling packet from 1:16384 [ 70.236314][ T3782] failed while handling packet from 1:16384 [ 70.242339][T11151] loop1: p2 start 4293394688 is beyond EOD, truncated [ 70.254992][T11151] loop1: p3 start 150994944 is beyond EOD, truncated [ 70.261680][T11151] loop1: p4 size 50331648 extends beyond EOD, truncated [ 70.269060][ T3782] failed while handling packet from 1:16384 [ 70.269127][ T3782] failed while handling packet from 1:16384 [ 70.275056][ T3782] failed while handling packet from 1:16384 [ 70.281033][ T3782] failed while handling packet from 1:16384 [ 70.286965][ T3782] failed while handling packet from 1:16384 [ 70.292912][ T3782] failed while handling packet from 1:16384 [ 70.298795][ T3782] failed while handling packet from 1:16384 [ 70.304814][ T3782] failed while handling packet from 1:16384 [ 70.314847][ T3782] failed while handling packet from 1:16384 [ 70.320798][ T3782] failed while handling packet from 1:16384 [ 70.326711][ T3782] failed while handling packet from 1:16384 [ 70.359164][ T3782] failed while handling packet from 1:16384 [ 70.365162][ T3782] failed while handling packet from 1:16384 [ 70.371106][ T3782] failed while handling packet from 1:16384 [ 70.390721][ T3782] failed while handling packet from 1:16384 [ 70.397310][ T3782] failed while handling packet from 1:16384 [ 70.403466][ T3782] failed while handling packet from 1:16384 [ 70.407872][T11180] IPv6: Can't replace route, no match found [ 70.409622][ T3782] failed while handling packet from 1:16384 [ 70.421368][ T3782] failed while handling packet from 1:16384 [ 70.427248][ T3782] failed while handling packet from 1:16384 [ 70.433231][ T3782] failed while handling packet from 1:16384 [ 70.439119][ T3782] failed while handling packet from 1:16384 [ 70.445165][ T3782] failed while handling packet from 1:16384 [ 70.452636][ T3782] failed while handling packet from 1:16384 [ 70.458736][T11183] ref_ctr increment failed for inode: 0x19c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811c032280 [ 70.475964][ T3782] failed while handling packet from 1:16384 [ 70.537961][T11186] wg1 speed is unknown, defaulting to 1000 [ 70.574597][T11148] loop3: detected capacity change from 0 to 2048 [ 70.602604][T11148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.643268][T11148] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.777841][T11188] loop0: detected capacity change from 0 to 512 [ 70.798732][T11188] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.802272][T11197] loop4: detected capacity change from 0 to 1024 [ 70.813535][T11197] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.523: bad orphan inode 134217728 [ 70.824960][T11197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.825246][T11188] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.522: ea_inode with extended attributes [ 70.900152][ T3757] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:26: bg 0: block 345: padding at end of block bitmap is not set [ 70.901081][T11188] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.522: error while reading EA inode 11 err=-117 [ 70.927776][T11188] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.944121][ T3757] EXT4-fs (loop3): Remounting filesystem read-only [ 70.945061][T11188] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.522: ea_inode with extended attributes [ 70.951917][T11202] xt_connbytes: Forcing CT accounting to be enabled [ 70.964631][T11188] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.522: error while reading EA inode 11 err=-117 [ 70.970220][ T3786] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 70.970931][T11202] set match dimension is over the limit! [ 71.006552][T11188] EXT4-fs (loop0): 1 orphan inode deleted [ 71.072799][T11188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.093420][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.151440][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.220979][T11188] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.239905][T11206] loop4: detected capacity change from 0 to 8192 [ 71.319887][T11206] loop4: p1 < > p2 < > p3 p4 < > [ 71.324934][T11206] loop4: partition table partially beyond EOD, truncated [ 71.339305][T11206] loop4: p1 start 67108864 is beyond EOD, truncated [ 71.345937][T11206] loop4: p2 start 4278190080 is beyond EOD, truncated [ 71.352826][T11206] loop4: p3 start 100859904 is beyond EOD, truncated [ 71.364868][T11219] syzkaller0: entered promiscuous mode [ 71.370384][T11219] syzkaller0: entered allmulticast mode [ 71.530025][T11222] wg1 speed is unknown, defaulting to 1000 [ 71.602324][T11230] loop0: detected capacity change from 0 to 128 [ 71.610716][T11230] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.624789][T11230] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.653073][T11230] tipc: Started in network mode [ 71.657941][T11230] tipc: Node identity ac14140f, cluster identity 4711 [ 71.664935][T11230] tipc: New replicast peer: 255.255.255.255 [ 71.671004][T11230] tipc: Enabled bearer , priority 10 [ 71.678672][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 71.687607][T11230] tipc: Disabling bearer [ 71.703873][ T3320] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.744294][T11234] loop0: detected capacity change from 0 to 512 [ 71.759927][T11234] EXT4-fs: Ignoring removed i_version option [ 71.765892][T11234] EXT4-fs: Ignoring removed bh option [ 71.831039][T11234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.900328][T11234] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.964729][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.075492][T11243] wg1 speed is unknown, defaulting to 1000 [ 72.206310][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 72.447271][T11249] netlink: 'syz.0.537': attribute type 6 has an invalid length. [ 72.763241][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 72.763255][ T29] audit: type=1326 audit(1764466562.103:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 72.798907][T11260] SELinux: Context  is not valid (left unmapped). [ 72.806847][ T29] audit: type=1326 audit(1764466562.133:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 72.830249][ T29] audit: type=1326 audit(1764466562.133:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf3c17f783 code=0x7ffc0000 [ 72.853459][ T29] audit: type=1326 audit(1764466562.133:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbf3c17e1ff code=0x7ffc0000 [ 72.876670][ T29] audit: type=1326 audit(1764466562.133:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbf3c17f7d7 code=0x7ffc0000 [ 72.899974][ T29] audit: type=1326 audit(1764466562.133:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf3c17df90 code=0x7ffc0000 [ 72.923438][ T29] audit: type=1326 audit(1764466562.133:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbf3c17e3aa code=0x7ffc0000 [ 72.946859][ T29] audit: type=1326 audit(1764466562.133:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 72.970348][ T29] audit: type=1326 audit(1764466562.133:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 72.993752][ T29] audit: type=1326 audit(1764466562.133:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 73.200121][T11271] loop4: detected capacity change from 0 to 164 [ 73.219003][T11271] syz.4.545: attempt to access beyond end of device [ 73.219003][T11271] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 73.290697][T11271] syz.4.545: attempt to access beyond end of device [ 73.290697][T11271] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.198313][T11305] tipc: Enabled bearer , priority 0 [ 74.205294][T11305] syzkaller0: entered promiscuous mode [ 74.211008][T11305] syzkaller0: entered allmulticast mode [ 74.219264][T11305] tipc: Resetting bearer [ 74.244752][T11307] loop0: detected capacity change from 0 to 1024 [ 74.256953][T11307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.328094][T11310] bridge2: entered promiscuous mode [ 74.333344][T11310] bridge2: entered allmulticast mode [ 74.449386][T11310] team0: Port device bridge2 added [ 74.455511][T11307] bridge0: port 3(team0) entered blocking state [ 74.461793][T11307] bridge0: port 3(team0) entered disabled state [ 74.470149][T11307] team0: entered allmulticast mode [ 74.475271][T11307] team_slave_0: entered allmulticast mode [ 74.481008][T11307] team_slave_1: entered allmulticast mode [ 74.488414][T11307] team0: entered promiscuous mode [ 74.493482][T11307] team_slave_0: entered promiscuous mode [ 74.499234][T11307] team_slave_1: entered promiscuous mode [ 74.518952][T11313] syz.1.559 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.542148][T11316] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 74.589310][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.746890][T11322] wg1 speed is unknown, defaulting to 1000 [ 74.760090][T11325] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 74.771630][T11328] loop3: detected capacity change from 0 to 512 [ 74.814889][T11328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.840105][T11328] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.864857][T11325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.909848][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 75.050706][T11333] bond1 (unregistering): Released all slaves [ 75.148710][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.208005][T11339] tipc: Enabling of bearer rejected, already enabled [ 75.219772][ T3414] tipc: Node number set to 2886997007 [ 75.248700][T11341] tipc: Enabled bearer , priority 0 [ 75.259502][T11341] syzkaller0: entered promiscuous mode [ 75.265079][T11341] syzkaller0: entered allmulticast mode [ 75.280592][T11342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.567'. [ 75.343554][T11341] tipc: Resetting bearer [ 75.354303][T11340] tipc: Resetting bearer [ 75.369892][T11340] tipc: Disabling bearer [ 75.583693][T11349] syz_tun: entered allmulticast mode [ 75.975729][T11362] syzkaller0: entered promiscuous mode [ 75.981245][T11362] syzkaller0: entered allmulticast mode [ 76.017783][T11364] tipc: Enabling of bearer rejected, already enabled [ 76.346317][T11370] tipc: Enabling of bearer rejected, already enabled [ 76.395655][T11348] syz_tun: left allmulticast mode [ 76.522875][T11378] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 77.298823][T11392] wg1 speed is unknown, defaulting to 1000 [ 77.642623][T11408] loop1: detected capacity change from 0 to 1024 [ 77.649235][T11408] EXT4-fs: inline encryption not supported [ 77.655184][T11408] EXT4-fs: Ignoring removed i_version option [ 77.700268][T11408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.718736][T11417] capability: warning: `syz.2.595' uses deprecated v2 capabilities in a way that may be insecure [ 77.761361][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.782323][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 77.782334][ T29] audit: type=1326 audit(1764466567.123:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 77.812397][ T29] audit: type=1326 audit(1764466567.123:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 77.835812][ T29] audit: type=1326 audit(1764466567.123:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 77.859276][ T29] audit: type=1326 audit(1764466567.123:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 77.882657][ T29] audit: type=1326 audit(1764466567.123:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 77.906082][ T29] audit: type=1326 audit(1764466567.123:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 77.929525][ T29] audit: type=1326 audit(1764466567.123:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 77.952086][T11434] tipc: Enabling of bearer rejected, failed to enable media [ 77.953018][ T29] audit: type=1326 audit(1764466567.123:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 77.985013][ T29] audit: type=1326 audit(1764466567.123:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 77.997125][T11437] wg1 speed is unknown, defaulting to 1000 [ 78.008449][ T29] audit: type=1326 audit(1764466567.123:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11426 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 78.075340][T11441] wg1 speed is unknown, defaulting to 1000 [ 78.115680][T11442] tipc: Enabling of bearer rejected, failed to enable media [ 78.173368][T11445] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.604'. [ 78.190394][T11441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'. [ 78.207510][T11445] netlink: zone id is out of range [ 78.212673][T11445] netlink: zone id is out of range [ 78.218157][T11445] netlink: zone id is out of range [ 78.223624][T11445] netlink: del zone limit has 8 unknown bytes [ 78.268807][T11452] loop4: detected capacity change from 0 to 1024 [ 78.285827][T11452] EXT4-fs: Ignoring removed bh option [ 78.297935][T11452] EXT4-fs: inline encryption not supported [ 78.311523][T11452] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.323794][T11452] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 78.332774][T11452] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.605: lblock 2 mapped to illegal pblock 2 (length 1) [ 78.346956][T11452] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.605: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.381307][T11452] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.605: Failed to acquire dquot type 0 [ 78.397713][T11452] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 78.416915][T11452] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.605: mark_inode_dirty error [ 78.448871][T11452] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 78.463942][T11452] EXT4-fs (loop4): 1 orphan inode deleted [ 78.470157][T11452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.658694][ T3782] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:51: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.695540][ T3782] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:51: Failed to release dquot type 0 [ 79.424211][T11472] wg1 speed is unknown, defaulting to 1000 [ 79.666903][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.676100][ T3314] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 79.690761][ T3314] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 79.701252][ T3314] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 79.992422][T11493] loop4: detected capacity change from 0 to 128 [ 80.039709][T11493] syz.4.608: attempt to access beyond end of device [ 80.039709][T11493] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 80.059203][T11493] syz.4.608: attempt to access beyond end of device [ 80.059203][T11493] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 80.072540][T11493] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 80.644552][T11504] wg1 speed is unknown, defaulting to 1000 [ 80.794705][T11508] netlink: 'syz.2.624': attribute type 1 has an invalid length. [ 80.802472][T11508] netlink: 'syz.2.624': attribute type 4 has an invalid length. [ 80.810122][T11508] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.624'. [ 80.849869][T11508] netlink: 'syz.2.624': attribute type 1 has an invalid length. [ 80.857596][T11508] netlink: 'syz.2.624': attribute type 4 has an invalid length. [ 80.865289][T11508] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.624'. [ 80.918480][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'. [ 80.920046][T11519] netlink: 'syz.4.628': attribute type 27 has an invalid length. [ 80.929946][T11514] vhci_hcd: invalid port number 96 [ 80.940179][T11514] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 81.023921][T11519] bond1: left promiscuous mode [ 81.028724][T11519] ip6gretap0: left promiscuous mode [ 81.036598][T11519] macvlan2: left promiscuous mode [ 81.041863][T11519] macvlan2: left allmulticast mode [ 81.067172][T11521] 8021q: adding VLAN 0 to HW filter on device .` [ 81.075242][T11521] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.076046][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 81.091025][T11521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.110134][ T3757] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.119936][ T3757] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.128282][ T3757] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.141589][ T3757] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.253796][T11526] netlink: 'syz.2.629': attribute type 4 has an invalid length. [ 81.261564][T11526] netlink: 152 bytes leftover after parsing attributes in process `syz.2.629'. [ 81.273526][T11526] .`: renamed from bond0 [ 81.304493][T11528] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.631'. [ 81.314236][T11528] netlink: zone id is out of range [ 81.319391][T11528] netlink: zone id is out of range [ 81.325117][T11528] netlink: zone id is out of range [ 81.330879][T11528] netlink: zone id is out of range [ 81.336135][T11528] netlink: zone id is out of range [ 81.661986][T11542] loop0: detected capacity change from 0 to 512 [ 81.798401][T11542] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.825642][T11542] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 81.827781][T11551] netlink: 'syz.2.640': attribute type 27 has an invalid length. [ 81.842596][T11551] ip6tnl0: left promiscuous mode [ 81.847544][T11551] ip6tnl0: left allmulticast mode [ 81.857278][T11551] team1: left promiscuous mode [ 81.862232][T11551] team1: left allmulticast mode [ 81.895274][T11552] loop1: detected capacity change from 0 to 128 [ 81.908506][T11552] syz.1.637: attempt to access beyond end of device [ 81.908506][T11552] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 81.929050][T11552] syz.1.637: attempt to access beyond end of device [ 81.929050][T11552] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 81.942417][T11552] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 81.997504][T11551] 8021q: adding VLAN 0 to HW filter on device .` [ 82.006724][T11551] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.028326][T11553] loop4: detected capacity change from 0 to 512 [ 82.124438][T11556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11556 comm=syz.0.641 [ 82.138148][T11553] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 82.156442][T11553] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.178644][T11556] SELinux: failed to load policy [ 82.210171][T11553] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.639: corrupted inode contents [ 82.227103][T11553] EXT4-fs (loop4): Remounting filesystem read-only [ 82.233336][T11561] netlink: 'syz.0.642': attribute type 4 has an invalid length. [ 82.233902][T11553] EXT4-fs (loop4): 1 truncate cleaned up [ 82.241377][T11561] netlink: 152 bytes leftover after parsing attributes in process `syz.0.642'. [ 82.256096][ T3757] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.260406][T11561] .`: renamed from bond0 (while UP) [ 82.266632][ T3757] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 82.315423][ T3757] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 82.327363][T11553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.343983][T11567] tipc: Enabling of bearer rejected, already enabled [ 82.353450][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 82.368020][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 82.410486][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.646'. [ 82.529552][T11577] wg1 speed is unknown, defaulting to 1000 [ 82.693366][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.865515][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 82.865529][ T29] audit: type=1400 audit(1764466572.203:3422): avc: denied { bind } for pid=11585 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.955426][T11588] wg1 speed is unknown, defaulting to 1000 [ 83.143239][T11590] netlink: 'syz.2.652': attribute type 4 has an invalid length. [ 83.610279][T11594] tipc: Enabling of bearer rejected, failed to enable media [ 83.621364][T11592] netlink: 'syz.1.653': attribute type 27 has an invalid length. [ 83.772645][T11592] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.779867][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.839043][T11592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.850602][T11592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.861782][ T29] audit: type=1400 audit(1764466573.203:3423): avc: denied { ioctl } for pid=11608 comm="syz.0.656" path="socket:[11802]" dev="sockfs" ino=11802 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.888440][ T29] audit: type=1400 audit(1764466573.223:3424): avc: denied { nlmsg_read } for pid=11608 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.049628][T11595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.062531][T11595] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.151705][T11595] net_ratelimit: 11 callbacks suppressed [ 84.151714][T11595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.178806][ T3744] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.187672][ T3744] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.196455][ T3374] wg1 speed is unknown, defaulting to 1000 [ 84.202362][ T3374] syz0: Port: 1 Link DOWN [ 84.208595][ T3744] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.217047][ T3744] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.269812][ T29] audit: type=1400 audit(1764466573.613:3425): avc: denied { getopt } for pid=11622 comm="syz.0.661" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.146931][T11642] tmpfs: Unknown parameter 'contextů' [ 85.279725][ T29] audit: type=1400 audit(1764466574.613:3426): avc: denied { connect } for pid=11643 comm="syz.2.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.299583][T11642] bridge0: entered promiscuous mode [ 85.326992][T11642] macsec1: entered promiscuous mode [ 85.350591][T11642] bridge0: port 3(macsec1) entered blocking state [ 85.357053][T11642] bridge0: port 3(macsec1) entered disabled state [ 85.379886][T11642] macsec1: entered allmulticast mode [ 85.385201][T11642] bridge0: entered allmulticast mode [ 85.407053][T11642] macsec1: left allmulticast mode [ 85.412141][T11642] bridge0: left allmulticast mode [ 85.420398][T11642] bridge0: left promiscuous mode [ 85.470595][ T29] audit: type=1400 audit(1764466574.813:3427): avc: denied { create } for pid=11649 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.494606][T11647] xt_hashlimit: max too large, truncated to 1048576 [ 85.512849][ T29] audit: type=1400 audit(1764466574.853:3428): avc: denied { bind } for pid=11649 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.573966][T11661] loop3: detected capacity change from 0 to 2048 [ 85.576144][T11658] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64) [ 85.650610][T11669] wg1 speed is unknown, defaulting to 1000 [ 85.696380][T11658] SELinux: failed to load policy [ 85.774206][ T29] audit: type=1400 audit(1764466575.113:3429): avc: denied { read } for pid=11671 comm="syz.2.677" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.775845][T11672] team0: Failed to send options change via netlink (err -105) [ 85.801841][T11672] team0: Port device dummy0 added [ 85.864000][T11672] validate_nla: 1 callbacks suppressed [ 85.864012][T11672] netlink: 'syz.2.677': attribute type 10 has an invalid length. [ 85.880663][T11672] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.891534][T11672] team0: Failed to send options change via netlink (err -105) [ 85.899110][T11672] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 85.908184][T11672] team0: Port device dummy0 removed [ 85.916796][T11672] .`: (slave dummy0): Enslaving as an active interface with an up link [ 86.528700][ T10] IPVS: starting estimator thread 0... [ 86.546188][ T29] audit: type=1400 audit(1764466575.883:3430): avc: denied { write } for pid=11684 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.586095][T11692] __nla_validate_parse: 7 callbacks suppressed [ 86.586109][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 86.649748][T11683] IPVS: using max 2736 ests per chain, 136800 per kthread [ 86.716472][T11701] wg1 speed is unknown, defaulting to 1000 [ 86.938425][T11704] loop0: detected capacity change from 0 to 128 [ 86.951499][T11704] syz.0.680: attempt to access beyond end of device [ 86.951499][T11704] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 86.970103][T11704] syz.0.680: attempt to access beyond end of device [ 86.970103][T11704] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 86.983415][T11704] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 87.612087][ T29] audit: type=1326 audit(1764466576.953:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 87.697962][T11715] wg1 speed is unknown, defaulting to 1000 [ 87.821154][T11711] loop0: detected capacity change from 0 to 512 [ 87.913634][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 87.913735][ T29] audit: type=1326 audit(1764466576.973:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 87.943197][ T29] audit: type=1400 audit(1764466576.973:3434): avc: denied { read write } for pid=11710 comm="syz.0.687" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.966802][ T29] audit: type=1400 audit(1764466576.973:3435): avc: denied { open } for pid=11710 comm="syz.0.687" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.990244][ T29] audit: type=1326 audit(1764466576.973:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 88.013719][ T29] audit: type=1326 audit(1764466576.973:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 88.037366][ T29] audit: type=1326 audit(1764466576.983:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f693fccf749 code=0x7ffc0000 [ 88.060809][ T29] audit: type=1326 audit(1764466576.983:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f693fccf783 code=0x7ffc0000 [ 88.084008][ T29] audit: type=1326 audit(1764466577.153:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f693fcce1ff code=0x7ffc0000 [ 88.107225][ T29] audit: type=1326 audit(1764466577.163:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f693fccf7d7 code=0x7ffc0000 [ 88.130608][ T29] audit: type=1326 audit(1764466577.163:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f693fccdf90 code=0x7ffc0000 [ 88.194246][T11711] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.205797][T11711] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 88.215968][T11711] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.687: Corrupt directory, running e2fsck is recommended [ 88.244485][T11711] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 88.253372][T11711] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.687: corrupted in-inode xattr: invalid ea_ino [ 88.267081][T11711] EXT4-fs (loop0): Remounting filesystem read-only [ 88.274214][T11711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.372344][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.316934][T11751] SELinux: Context ›Y is not valid (left unmapped). [ 89.439260][T11757] loop1: detected capacity change from 0 to 512 [ 89.458686][T11757] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.470254][T11757] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 89.480327][T11757] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.714: Corrupt directory, running e2fsck is recommended [ 89.519141][T11757] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 89.527450][T11757] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.714: corrupted in-inode xattr: invalid ea_ino [ 89.578288][T11757] EXT4-fs (loop1): Remounting filesystem read-only [ 89.586852][T11757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.740978][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.786560][T11756] team0: Port device netdevsim1 removed [ 90.052182][T11753] Set syz1 is full, maxelem 65536 reached [ 91.003199][T11765] wg1 speed is unknown, defaulting to 1000 [ 91.028862][T11781] loop4: detected capacity change from 0 to 128 [ 91.096648][T11785] loop4: detected capacity change from 0 to 1024 [ 91.114863][T11785] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 91.133924][T11785] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 91.145235][T11785] EXT4-fs (loop4): invalid journal inode [ 91.202528][T11785] loop4: detected capacity change from 0 to 512 [ 91.235297][T11785] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.314792][T11785] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 91.407637][T11785] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.712: bg 0: block 248: padding at end of block bitmap is not set [ 91.460690][T11785] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.712: Failed to acquire dquot type 1 [ 91.507748][T11785] EXT4-fs (loop4): 1 truncate cleaned up [ 91.532369][T11785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 91.556366][T11804] loop1: detected capacity change from 0 to 164 [ 91.571798][T11804] ISOFS: unable to read i-node block [ 91.598785][T11804] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.608510][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 91.745252][T11794] wg1 speed is unknown, defaulting to 1000 [ 91.853567][T11814] wg1 speed is unknown, defaulting to 1000 [ 91.868189][T11816] loop4: detected capacity change from 0 to 512 [ 91.930734][T11816] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.731: error while reading EA inode 32 err=-116 [ 91.956665][T11816] EXT4-fs (loop4): Remounting filesystem read-only [ 91.963262][T11816] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.976207][T11816] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 91.986310][T11816] EXT4-fs (loop4): 1 orphan inode deleted [ 91.992961][T11816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.299112][T11825] loop1: detected capacity change from 0 to 128 [ 92.310630][T11827] netlink: 'syz.3.723': attribute type 27 has an invalid length. [ 92.337780][T11827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.347038][T11827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.357088][T11827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.438174][T11829] loop1: detected capacity change from 0 to 512 [ 92.455496][T11829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.471733][T11829] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.553896][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.650258][T11843] wg1 speed is unknown, defaulting to 1000 [ 92.928508][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 93.064264][T11848] wg1 speed is unknown, defaulting to 1000 [ 93.081476][T11849] tipc: Enabling of bearer rejected, failed to enable media [ 93.093084][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.180706][T11864] pim6reg: entered allmulticast mode [ 93.189299][T11864] pim6reg: left allmulticast mode [ 93.318890][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 93.318905][ T29] audit: type=1326 audit(1764466582.653:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 93.335736][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 93.384067][T11875] netlink: 'syz.0.742': attribute type 27 has an invalid length. [ 93.388408][ T29] audit: type=1326 audit(1764466582.653:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 93.392570][T11868] netlink: 'syz.3.738': attribute type 10 has an invalid length. [ 93.415221][ T29] audit: type=1326 audit(1764466582.653:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 93.446373][ T29] audit: type=1326 audit(1764466582.653:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 93.447259][T11879] netlink: 'syz.3.738': attribute type 10 has an invalid length. [ 93.469745][ T29] audit: type=1326 audit(1764466582.653:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 93.469772][ T29] audit: type=1326 audit(1764466582.653:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 93.524263][ T29] audit: type=1326 audit(1764466582.653:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 93.547643][ T29] audit: type=1326 audit(1764466582.653:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 93.571084][ T29] audit: type=1326 audit(1764466582.653:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 93.594477][ T29] audit: type=1326 audit(1764466582.653:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbf3c17f749 code=0x7ffc0000 [ 93.620553][T11873] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 93.627133][T11873] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 93.634576][T11873] vhci_hcd vhci_hcd.0: Device attached [ 93.648978][T11875] veth2: left promiscuous mode [ 93.653817][T11875] veth2: left allmulticast mode [ 93.659056][T11875] tipc: Resetting bearer [ 93.665066][T11875] syzkaller0: left promiscuous mode [ 93.670337][T11875] syzkaller0: left allmulticast mode [ 93.704445][T11882] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 93.713304][T11882] ref_ctr increment failed for inode: 0x430 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811c035080 [ 93.724644][T11878] 8021q: adding VLAN 0 to HW filter on device .` [ 93.732753][T11878] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.740343][T11882] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 93.749072][T11882] ref_ctr decrement failed for inode: 0x430 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811c035080 [ 93.762627][T11882] uprobe: syz.2.743:11882 failed to unregister, leaking uprobe [ 93.770654][T11878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.976177][T11895] loop1: detected capacity change from 0 to 1024 [ 93.997783][T11893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.749'. [ 94.012641][T11895] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 94.019733][T11893] IPVS: Unknown mcast interface: ipvlan1 [ 94.059853][T11895] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.080270][T11895] EXT4-fs (loop1): invalid journal inode [ 94.125122][T11876] vhci_hcd: connection closed [ 94.153703][ T3782] vhci_hcd: stop threads [ 94.162644][ T3782] vhci_hcd: release socket [ 94.162952][T11898] loop3: detected capacity change from 0 to 1024 [ 94.167052][ T3782] vhci_hcd: disconnect device [ 94.184057][T11898] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.751: bad orphan inode 134217728 [ 94.195131][T11898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.245536][T11895] loop1: detected capacity change from 0 to 512 [ 94.325925][T11903] xt_connbytes: Forcing CT accounting to be enabled [ 94.333060][T11903] Cannot find set identified by id 0 to match [ 94.363266][T11895] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.399469][T11895] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 94.420538][T11895] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.748: bg 0: block 248: padding at end of block bitmap is not set [ 94.438319][T11895] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.748: Failed to acquire dquot type 1 [ 94.452641][T11895] EXT4-fs (loop1): 1 truncate cleaned up [ 94.460207][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.464203][T11895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 94.472702][T11914] team0: left allmulticast mode [ 94.486500][T11914] team_slave_0: left allmulticast mode [ 94.492006][T11914] team_slave_1: left allmulticast mode [ 94.497460][T11914] bridge2: left allmulticast mode [ 94.502516][T11914] team0: left promiscuous mode [ 94.507278][T11914] team_slave_0: left promiscuous mode [ 94.512828][T11914] team_slave_1: left promiscuous mode [ 94.518295][T11914] bridge2: left promiscuous mode [ 94.523446][T11914] bridge0: port 3(team0) entered disabled state [ 94.530785][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 94.550982][T11914] .`: (slave batadv0): Releasing backup interface [ 94.559830][T11914] bridge_slave_0: left allmulticast mode [ 94.564190][T11919] loop3: detected capacity change from 0 to 512 [ 94.565482][T11914] bridge_slave_0: left promiscuous mode [ 94.573407][T11919] EXT4-fs (loop3): failed to initialize system zone (-117) [ 94.577436][T11914] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.584894][T11919] EXT4-fs (loop3): mount failed [ 94.597079][T11914] bridge_slave_1: left allmulticast mode [ 94.602751][T11914] bridge_slave_1: left promiscuous mode [ 94.608386][T11914] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.631874][T11604] Process accounting resumed [ 94.649873][T11914] .`: (slave bond_slave_0): Releasing backup interface [ 94.658922][T11914] .`: (slave bond_slave_1): Releasing backup interface [ 94.669089][T11914] team0: Port device team_slave_0 removed [ 94.676273][T11914] team0: Port device team_slave_1 removed [ 94.682568][T11914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.690487][T11914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.700007][T11914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.720272][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 94.732913][T11929] loop1: detected capacity change from 0 to 128 [ 94.741436][T11915] team0: No ports can be present during mode change [ 94.756426][T11926] netlink: 'syz.4.760': attribute type 10 has an invalid length. [ 94.765813][T11926] team0: Port device dummy0 added [ 94.773654][T11926] netlink: 'syz.4.760': attribute type 10 has an invalid length. [ 94.781823][T11926] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 94.806488][T11926] team0: Failed to send options change via netlink (err -105) [ 94.814169][T11926] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 94.834028][T11926] team0: Port device dummy0 removed [ 94.843824][T11926] .`: (slave dummy0): Enslaving as an active interface with an up link [ 94.865257][T11930] veth2: entered promiscuous mode [ 94.870329][T11930] veth2: entered allmulticast mode [ 94.890118][ T3773] kworker/u8:42: attempt to access beyond end of device [ 94.890118][ T3773] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 94.905801][ T3773] kworker/u8:42: attempt to access beyond end of device [ 94.905801][ T3773] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 94.934057][ T3773] kworker/u8:42: attempt to access beyond end of device [ 94.934057][ T3773] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 94.947615][ T3773] kworker/u8:42: attempt to access beyond end of device [ 94.947615][ T3773] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 94.961020][ T3773] kworker/u8:42: attempt to access beyond end of device [ 94.961020][ T3773] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 94.975738][ T3773] kworker/u8:42: attempt to access beyond end of device [ 94.975738][ T3773] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 94.989243][ T3773] kworker/u8:42: attempt to access beyond end of device [ 94.989243][ T3773] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 95.007582][T11936] loop3: detected capacity change from 0 to 128 [ 95.011791][T11938] loop4: detected capacity change from 0 to 256 [ 95.041979][ T3773] kworker/u8:42: attempt to access beyond end of device [ 95.041979][ T3773] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 95.062546][ T3773] kworker/u8:42: attempt to access beyond end of device [ 95.062546][ T3773] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 95.078258][ T3773] kworker/u8:42: attempt to access beyond end of device [ 95.078258][ T3773] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 95.101557][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 95.139433][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 95.550742][T11944] loop1: detected capacity change from 0 to 32768 [ 95.750765][T11958] wg1 speed is unknown, defaulting to 1000 [ 95.753866][T11952] loop1: detected capacity change from 0 to 512 [ 95.791538][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 95.826435][T11952] EXT4-fs (loop1): failed to initialize system zone (-117) [ 95.837073][T11952] EXT4-fs (loop1): mount failed [ 95.848118][T11958] loop3: detected capacity change from 0 to 512 [ 95.855076][T11958] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.865245][T11958] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 95.876229][T11958] EXT4-fs (loop3): group descriptors corrupted! [ 95.920569][T11966] tipc: Enabled bearer , priority 0 [ 95.927449][T11966] syzkaller0: entered promiscuous mode [ 95.933095][T11966] syzkaller0: entered allmulticast mode [ 95.940859][T11968] loop1: detected capacity change from 0 to 1024 [ 95.950321][T11970] loop4: detected capacity change from 0 to 128 [ 95.957870][T11966] tipc: Resetting bearer [ 95.968597][T11968] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 95.986628][T11968] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 95.997155][T11963] tipc: Resetting bearer [ 96.003518][T11968] EXT4-fs (loop1): invalid journal inode [ 96.009284][T11968] ================================================================== [ 96.017356][T11968] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 96.025138][T11968] [ 96.027450][T11968] read-write to 0xffff888237d26fd0 of 8 bytes by task 11970 on cpu 1: [ 96.035586][T11968] find_get_block_common+0x4f0/0x960 [ 96.040874][T11968] bdev_getblk+0x83/0x3b0 [ 96.045208][T11968] __bread_gfp+0x51/0x250 [ 96.049543][T11968] fat_ent_bread+0xc9/0x1a0 [ 96.054051][T11968] fat_ent_read+0x3b3/0x5c0 [ 96.058555][T11968] fat_get_cluster+0x4b2/0x7b0 [ 96.063328][T11968] fat_truncate_blocks+0x27d/0x550 [ 96.068429][T11968] fat_write_end+0xba/0x160 [ 96.072921][T11968] generic_perform_write+0x312/0x490 [ 96.078195][T11968] __generic_file_write_iter+0x9e/0x120 [ 96.083732][T11968] generic_file_write_iter+0x8d/0x2f0 [ 96.089089][T11968] vfs_write+0x52a/0x960 [ 96.093317][T11968] ksys_write+0xda/0x1a0 [ 96.097547][T11968] __x64_sys_write+0x40/0x50 [ 96.102124][T11968] x64_sys_call+0x2802/0x3000 [ 96.106787][T11968] do_syscall_64+0xd2/0x200 [ 96.111275][T11968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.117157][T11968] [ 96.119464][T11968] read to 0xffff888237d26fd0 of 8 bytes by task 11968 on cpu 0: [ 96.127073][T11968] has_bh_in_lru+0x35/0x1f0 [ 96.131569][T11968] __lru_add_drain_all+0x287/0x450 [ 96.136669][T11968] lru_add_drain_all+0x10/0x20 [ 96.141413][T11968] invalidate_bdev+0x47/0x70 [ 96.145986][T11968] ext4_fill_super+0x2d2c/0x3810 [ 96.150909][T11968] get_tree_bdev_flags+0x291/0x300 [ 96.156005][T11968] get_tree_bdev+0x1f/0x30 [ 96.160413][T11968] ext4_get_tree+0x1c/0x30 [ 96.164816][T11968] vfs_get_tree+0x57/0x1d0 [ 96.169224][T11968] do_new_mount+0x24d/0x660 [ 96.173720][T11968] path_mount+0x4a5/0xb70 [ 96.178049][T11968] __se_sys_mount+0x28c/0x2e0 [ 96.182721][T11968] __x64_sys_mount+0x67/0x80 [ 96.187302][T11968] x64_sys_call+0x2b51/0x3000 [ 96.191979][T11968] do_syscall_64+0xd2/0x200 [ 96.196472][T11968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.202347][T11968] [ 96.204651][T11968] value changed: 0x0000000000000000 -> 0xffff8881073ee3a8 [ 96.211737][T11968] [ 96.214041][T11968] Reported by Kernel Concurrency Sanitizer on: [ 96.220204][T11968] CPU: 0 UID: 0 PID: 11968 Comm: syz.1.786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.229910][T11968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.239947][T11968] ================================================================== [ 96.258244][T11963] tipc: Disabling bearer [ 96.296339][T11968] loop1: detected capacity change from 0 to 512 [ 96.306624][T11968] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.325116][T11968] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 96.340939][T11968] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.786: bg 0: block 248: padding at end of block bitmap is not set [ 96.356685][T11968] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.786: Failed to acquire dquot type 1 [ 96.370391][T11968] EXT4-fs (loop1): 1 truncate cleaned up [ 96.378568][T11968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 96.401600][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.