last executing test programs: 4m4.2065953s ago: executing program 32 (id=31): write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 3m58.753954903s ago: executing program 33 (id=143): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x2000000a}}, 0x10) close_range(r0, r0, 0x0) 3m46.173959851s ago: executing program 34 (id=437): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x12, 0x0, &(0x7f0000000140)) 3m43.529149325s ago: executing program 35 (id=483): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m25.222749596s ago: executing program 36 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m22.017312087s ago: executing program 37 (id=854): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfeff, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0xfffffffc, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m20.713256988s ago: executing program 38 (id=866): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x9d6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) syz_pidfd_open(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x4004000) epoll_create1(0x0) 3m13.272224834s ago: executing program 39 (id=945): socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x26181ae3cde4511b}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @remote, 0x3}, 0x10) 3m0.194854189s ago: executing program 40 (id=1182): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @lsm=0x2b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2m50.676161141s ago: executing program 41 (id=1319): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, @perf_bp={0x0}, 0x424, 0x0, 0x0, 0x2, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f, 0x61, 0x2e, 0x30]}}, 0x0, 0x38}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 2m34.776722634s ago: executing program 42 (id=1553): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ftruncate(r0, 0x4a8e) 2m24.377601674s ago: executing program 6 (id=1691): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1002}, 0x50) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000340)={0x0, 0xfb, 0x25, 0x5, 0x20, "b48d0bf0e352df6b766f8540b4bdecd6", "f9d05a94d168559e46096dd47cb84880"}, 0x25, 0x0) 2m24.158583321s ago: executing program 6 (id=1693): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 2m23.985134076s ago: executing program 6 (id=1697): r0 = syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4061, &(0x7f000000c3c0)="$eJzszzFKwwAUBuC/rcEogSKoiyAWBzeJm1NukV08hoOKuYlj8TbewdErxMGmUusgQkHl+5aXx//y8hL+iHJRDxf1aS/JySxdXb+HW8PkzsdL9UWK3XKcKkmxvrOdb/pqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1xqvdHdJuuebs6Evl8n1UbrbJpdVUh5Mk4dJiuZ4lP1kdv7F3knykmSU5DVJO93sbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8XVSrf9Oa6Gh/v1mcfTdE2xTPu+77/92TJp5z+5lzd24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOJABAAAAEOZvnUf7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJMCAAD//1SIE9k=") sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x40000c0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x9000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x8001, 0x37}, 0x1112, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2m23.487991202s ago: executing program 6 (id=1706): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x8f) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20) 2m23.439194544s ago: executing program 6 (id=1708): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 2m23.408253925s ago: executing program 6 (id=1710): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 2m20.4127455s ago: executing program 7 (id=1754): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2m18.291461277s ago: executing program 7 (id=1775): r0 = syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x10, r0, 0x83d9f000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) truncate(&(0x7f0000000100)='./file1\x00', 0x5) 2m18.091048003s ago: executing program 7 (id=1777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffecf, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010102}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) 2m17.888450449s ago: executing program 7 (id=1780): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 2m17.825481311s ago: executing program 7 (id=1782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) shutdown(r0, 0x1) recvfrom$inet6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 2m17.593308729s ago: executing program 7 (id=1785): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x9371, 0x0, 0x2}) close(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10001, 0x2) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={0x0}) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000180)) 2m17.55185589s ago: executing program 43 (id=1785): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x9371, 0x0, 0x2}) close(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10001, 0x2) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={0x0}) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000180)) 2m10.454584325s ago: executing program 8 (id=1846): prlimit64(0x0, 0xb, &(0x7f0000000040), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) tkill(r0, 0x14) 2m10.186471233s ago: executing program 8 (id=1851): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m9.520245505s ago: executing program 8 (id=1859): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6_icmp(0xa, 0x2, 0x3a) write$binfmt_misc(r1, &(0x7f00000001c0)="077db85e6ea4ceb2", 0x8) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2m9.496217896s ago: executing program 8 (id=1860): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 2m9.462011207s ago: executing program 8 (id=1861): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) 2m9.125378008s ago: executing program 8 (id=1866): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m9.125187838s ago: executing program 44 (id=1866): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m8.051357872s ago: executing program 45 (id=1710): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1m31.663250995s ago: executing program 2 (id=2583): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) 1m31.521620979s ago: executing program 2 (id=2586): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x3c, r2, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x3c}}, 0x20) 1m31.48023572s ago: executing program 2 (id=2588): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.366422234s ago: executing program 2 (id=2590): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 1m31.18249054s ago: executing program 2 (id=2593): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m30.704389215s ago: executing program 2 (id=2602): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x100, 0xe79c, 0x1, 0x3ff, 0xcdd7}) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m30.639495847s ago: executing program 46 (id=2602): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x100, 0xe79c, 0x1, 0x3ff, 0xcdd7}) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 23.03628715s ago: executing program 0 (id=4104): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000180)=0x925) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x2, 0x3}}, 0x20) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22.941587213s ago: executing program 0 (id=4107): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x4cf, &(0x7f0000000500)="$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") syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x52000b04) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 22.897748374s ago: executing program 0 (id=4109): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x60, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r1}, 0x38) 22.699616661s ago: executing program 0 (id=4115): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 22.663889782s ago: executing program 0 (id=4117): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x961, 0x2}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8003}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 22.469281768s ago: executing program 0 (id=4121): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, 0x0, 0x2810) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x1, 0x0, 0xad, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) 22.469132448s ago: executing program 47 (id=4121): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, 0x0, 0x2810) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x1, 0x0, 0xad, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) 4.921204494s ago: executing program 3 (id=4418): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x24018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x9, 0x2, 0x0, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.90593947s ago: executing program 3 (id=4458): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.90329067s ago: executing program 1 (id=4468): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 1.851498812s ago: executing program 1 (id=4461): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000003380)=""/4101, 0x1005}, {&(0x7f0000000000)=""/30, 0x1e}], 0x2) 1.712118876s ago: executing program 1 (id=4464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40004) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000280), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) 1.662608988s ago: executing program 1 (id=4466): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b80)=""/230, 0xe6}], 0x1, &(0x7f0000000880)=""/64, 0x40}, 0x40012160) 1.568555851s ago: executing program 1 (id=4469): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc9) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r0, 0x0) read(r0, 0x0, 0x0) msync(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) 1.489320933s ago: executing program 1 (id=4470): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x24018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x9, 0x2, 0x0, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.321364918s ago: executing program 5 (id=4475): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$evdev(0x0, 0xc, 0x80000) 1.314245249s ago: executing program 5 (id=4477): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.27031109s ago: executing program 5 (id=4478): unshare(0x20000400) r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x2000c000) 1.025038218s ago: executing program 9 (id=4482): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x12c, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x118, 0x1, [@m_ct={0x114, 0x17, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "f77abad482729b044e411445d041d0f9"}, @TCA_CT_LABELS={0x14, 0x7, "2a8ea532b674a5664df0e9c5caf2ba9e"}]}, {0xba, 0x6, "62a0a3854cfac8ebadea83919f5a6c93ceeba2fece66d1a7dd6fbfd8ed90f5eb80bf8199ff375ece798101bab83371a741d503a8050a96210a72fef96257f24a601e60377cd1c15d15a4044e0c961addf954d6337e695dc38c02fface9ebd08cb7840c0911cfb758cff473c35a1ba4a1344b4f702844dfe14cc6a11ad49888a44a381f5e38a24ae3beb5833b16cde65754dd24da887baefd2315055b11b72f05dc8f21961f3b20fee65fe1ef0eb926183b2fde9b729d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x12c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 919.026111ms ago: executing program 4 (id=4485): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 918.736231ms ago: executing program 5 (id=4486): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) syz_io_uring_setup(0x31c5, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7fff, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) 918.452021ms ago: executing program 9 (id=4487): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x8, 0x9}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) 868.948212ms ago: executing program 9 (id=4488): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$evdev(0x0, 0xc, 0x80000) 868.771623ms ago: executing program 4 (id=4489): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e8, 0x0, @perf_bp={0x0}, 0x1beea, 0x6, 0x95, 0x1, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x391, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 868.318792ms ago: executing program 3 (id=4490): r0 = syz_open_dev$loop(0x0, 0x0, 0xca781) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000380)=""/28, 0x1c) getdents64(r1, 0xfffffffffffffffe, 0x29) socket$inet_sctp(0x2, 0x1, 0x84) 817.207685ms ago: executing program 5 (id=4491): r0 = socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) 807.492164ms ago: executing program 9 (id=4492): r0 = socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 773.494376ms ago: executing program 4 (id=4493): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a86c690cf2723463fbce83146", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 773.390966ms ago: executing program 3 (id=4494): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x100) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 666.547669ms ago: executing program 4 (id=4495): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0xffffffff]}}) r1 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000280)=0x11) 588.507792ms ago: executing program 9 (id=4496): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x20042, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x6}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) 584.941482ms ago: executing program 4 (id=4497): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="410301"], 0x4) 564.472393ms ago: executing program 3 (id=4498): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x5dc, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 550.849253ms ago: executing program 9 (id=4499): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 417.989337ms ago: executing program 4 (id=4500): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x1000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 57.154638ms ago: executing program 3 (id=4501): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10122, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2000c080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 0s ago: executing program 5 (id=4502): sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) kernel console output (not intermixed with test programs): beled_t tclass=dir permissive=1 [ 213.596154][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.616788][T10941] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 213.645429][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.654559][T10941] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 213.668281][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.677317][T10941] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 213.691076][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.700779][T10941] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 213.717076][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.726518][T10941] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 213.740276][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.749668][T10941] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 213.763334][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.772515][T10941] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 213.786638][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.796239][T10941] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 213.810866][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.822522][T15228] loop3: detected capacity change from 0 to 128 [ 213.832062][ T28] audit: type=1400 audit(1780654102.499:1839): avc: denied { write } for pid=10941 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.839321][T15228] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 213.869001][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.889694][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.893475][T15232] loop9: detected capacity change from 0 to 256 [ 213.909135][ T28] audit: type=1400 audit(1780654102.559:1840): avc: denied { remove_name } for pid=10941 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.932356][ T28] audit: type=1400 audit(1780654102.559:1841): avc: denied { unlink } for pid=10941 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 213.940436][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 213.980341][T15228] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.004750][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 214.020346][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 214.030589][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 214.040322][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 214.052820][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 214.062466][T10941] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 214.062730][T10941] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 214.081711][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 214.091581][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 214.101156][T10941] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 214.110747][T10941] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 214.110882][T10941] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 214.138444][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.273590][T15244] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2979'. [ 214.288440][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2979'. [ 214.375642][ T8417] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.499189][T15263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2987'. [ 214.510911][T15263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2987'. [ 214.971708][T15307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.127785][T15315] dummy0: entered promiscuous mode [ 215.133605][T15315] gretap0: entered promiscuous mode [ 215.145682][T15315] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 215.165699][T15315] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 215.181875][T15315] hsr1: entered allmulticast mode [ 215.191434][T15315] dummy0: entered allmulticast mode [ 215.202772][T15315] gretap0: entered allmulticast mode [ 215.241539][T15318] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3009'. [ 215.259118][T15318] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3009'. [ 216.039171][T15350] loop5: detected capacity change from 0 to 512 [ 216.062854][T15350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.094362][T15350] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3022: iget: bad i_size value: 38620345925642 [ 216.136713][T15350] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 216.136940][T15350] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3022: couldn't read orphan inode 15 (err -117) [ 216.146153][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 216.146177][ C1] EXT4-fs (loop5): initial error at time 1780654104: ext4_orphan_get:1397: inode 15 [ 216.146210][ C1] EXT4-fs (loop5): last error at time 1780654104: ext4_orphan_get:1397: inode 15 [ 216.183530][T15350] loop5: lost filesystem error report for type 5 error -117 [ 216.187790][T15350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.224539][T15365] loop3: detected capacity change from 0 to 256 [ 216.258198][T15365] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.273436][T15366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.276207][T15371] EXT4-fs (loop5): shut down requested (1) [ 216.307541][T15374] netlink: 'syz.0.3032': attribute type 4 has an invalid length. [ 216.372727][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.383402][T15366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.413531][ T9] IPVS: starting estimator thread 0... [ 216.445566][T15366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.513154][T15385] IPVS: using max 2352 ests per chain, 117600 per kthread [ 216.521764][T15366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.555301][T15401] syzkaller0: entered promiscuous mode [ 216.561401][T15401] syzkaller0: entered allmulticast mode [ 216.591480][ T6430] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.605377][ T6430] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.623194][ T6430] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.631623][ T6430] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.889562][T15431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3057'. [ 217.078431][T15436] loop1: detected capacity change from 0 to 512 [ 217.085781][T15436] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.107714][T15436] EXT4-fs (loop1): 1 truncate cleaned up [ 217.117051][T15436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.182812][T15443] sit0: entered promiscuous mode [ 217.190265][T11515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.196147][T15443] netlink: 'syz.3.3062': attribute type 1 has an invalid length. [ 217.207210][T15443] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3062'. [ 217.256930][T15447] usb usb5: usbfs: process 15447 (syz.3.3064) did not claim interface 0 before use [ 217.430929][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3068'. [ 217.509500][T15470] netlink: 'syz.9.3072': attribute type 25 has an invalid length. [ 217.532539][T15470] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3072'. [ 217.606382][T15477] loop3: detected capacity change from 0 to 256 [ 217.622818][T15470] netlink: 'syz.9.3072': attribute type 25 has an invalid length. [ 217.646382][T15477] FAT-fs (loop3): IO charset iso8859-4 not found [ 217.860015][T15492] loop9: detected capacity change from 0 to 736 [ 218.169201][ T4229] IPVS: starting estimator thread 0... [ 218.200646][T15480] loop5: detected capacity change from 0 to 4096 [ 218.251468][T15480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.263776][T15512] IPVS: using max 1920 ests per chain, 96000 per kthread [ 218.289381][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 218.289399][ T28] audit: type=1400 audit(1780654106.959:1880): avc: denied { write } for pid=15479 comm="syz.5.3078" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.318219][T15518] 9pnet: p9_errstr2errno: server reported unknown error ½p [ 218.430132][T15532] sctp: [Deprecated]: syz.1.3095 (pid 15532) Use of int in max_burst socket option deprecated. [ 218.430132][T15532] Use struct sctp_assoc_value instead [ 218.573994][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.634121][ T3403] IPVS: starting estimator thread 0... [ 218.742184][T15545] IPVS: using max 2304 ests per chain, 115200 per kthread [ 218.816172][ T28] audit: type=1400 audit(1780654107.489:1881): avc: denied { read } for pid=15555 comm="syz.5.3106" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 218.843930][ T28] audit: type=1400 audit(1780654107.489:1882): avc: denied { open } for pid=15555 comm="syz.5.3106" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 218.869334][ T28] audit: type=1400 audit(1780654107.489:1883): avc: denied { ioctl } for pid=15555 comm="syz.5.3106" path="/newroot/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 219.052029][T15585] loop3: detected capacity change from 0 to 1024 [ 219.058935][T15585] EXT4-fs: Ignoring removed orlov option [ 219.074299][T15585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.091194][ T28] audit: type=1400 audit(1780654107.759:1884): avc: denied { write } for pid=15584 comm="syz.3.3113" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.166356][ T28] audit: type=1400 audit(1780654107.839:1885): avc: denied { write } for pid=15584 comm="syz.3.3113" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.189683][ T28] audit: type=1400 audit(1780654107.839:1886): avc: denied { write } for pid=15584 comm="syz.3.3113" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.218252][ T28] audit: type=1400 audit(1780654107.839:1887): avc: denied { rename } for pid=15584 comm="syz.3.3113" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.270251][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.374931][ T3403] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 219.392286][ T3403] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.621888][T15636] loop3: detected capacity change from 0 to 8192 [ 219.660161][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.677798][ T28] audit: type=1400 audit(1780654108.349:1888): avc: denied { ioctl } for pid=15651 comm="syz.0.3127" path="socket:[42941]" dev="sockfs" ino=42941 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.901127][T15682] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.967471][T15682] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.037569][T15682] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.094163][T15682] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.206010][ T6423] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.214446][ T6423] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.227752][ T68] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.241923][ T68] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.312368][T15689] loop5: detected capacity change from 0 to 128 [ 220.324645][T15689] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 220.351698][T15689] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.366072][ T28] audit: type=1400 audit(1780654109.039:1889): avc: denied { write } for pid=15688 comm="syz.5.3130" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.533677][T15695] loop3: detected capacity change from 0 to 8192 [ 220.572142][T15695] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.588972][T15695] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.598035][T15695] FAT-fs (loop3): Filesystem has been set read-only [ 220.604986][T15703] tun0: tun_chr_ioctl cmd 1074025672 [ 220.610718][T15703] tun0: ignored: set checksum enabled [ 220.623752][T15695] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.632751][T15695] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.636281][T10941] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.641650][T15695] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 220.840223][T15717] __nla_validate_parse: 2 callbacks suppressed [ 220.840245][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'. [ 220.887874][T15719] dummy0: entered promiscuous mode [ 220.912351][T15719] dummy0: entered allmulticast mode [ 220.948858][T15725] netlink: 'syz.9.3146': attribute type 2 has an invalid length. [ 221.021210][T15730] loop5: detected capacity change from 0 to 8192 [ 221.075337][T15738] loop8: detected capacity change from 0 to 7 [ 221.413442][T15753] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 221.423367][T15753] SELinux: failed to load policy [ 221.695310][ T3403] IPVS: starting estimator thread 0... [ 221.703522][ T3580] Bluetooth: hci0: command 0x1003 tx timeout [ 221.709763][ T4683] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.718065][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3159'. [ 221.782409][T15764] IPVS: using max 2112 ests per chain, 105600 per kthread [ 222.210250][T15793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.220012][T15793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.663920][T15808] loop5: detected capacity change from 0 to 256 [ 222.670947][T15808] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.726455][T15808] FAT-fs (loop5): Directory bread(block 64) failed [ 222.744627][T15808] FAT-fs (loop5): Directory bread(block 65) failed [ 222.751280][T15808] FAT-fs (loop5): Directory bread(block 66) failed [ 222.757910][T15808] FAT-fs (loop5): Directory bread(block 67) failed [ 222.764957][T15808] FAT-fs (loop5): Directory bread(block 68) failed [ 222.771551][T15808] FAT-fs (loop5): Directory bread(block 69) failed [ 222.778395][T15808] FAT-fs (loop5): Directory bread(block 70) failed [ 222.785221][T15808] FAT-fs (loop5): Directory bread(block 71) failed [ 222.791909][T15808] FAT-fs (loop5): Directory bread(block 72) failed [ 222.798592][T15808] FAT-fs (loop5): Directory bread(block 73) failed [ 222.930576][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3187'. [ 223.137767][T15846] loop5: detected capacity change from 0 to 1024 [ 223.174933][T15856] loop1: detected capacity change from 0 to 256 [ 223.181714][T15846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 223.198251][T15856] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.219850][T15846] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.250064][T15856] FAT-fs (loop1): Directory bread(block 64) failed [ 223.262289][T15856] FAT-fs (loop1): Directory bread(block 65) failed [ 223.287835][T15856] FAT-fs (loop1): Directory bread(block 66) failed [ 223.303226][T15856] FAT-fs (loop1): Directory bread(block 67) failed [ 223.320151][T15856] FAT-fs (loop1): Directory bread(block 68) failed [ 223.321090][T15866] xt_hashlimit: size too large, truncated to 1048576 [ 223.338673][T15856] FAT-fs (loop1): Directory bread(block 69) failed [ 223.355070][T15856] FAT-fs (loop1): Directory bread(block 70) failed [ 223.371803][T15856] FAT-fs (loop1): Directory bread(block 71) failed [ 223.390288][T15856] FAT-fs (loop1): Directory bread(block 72) failed [ 223.409848][ T36] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 6) [ 223.412205][T15856] FAT-fs (loop1): Directory bread(block 73) failed [ 223.434475][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 223.468095][ T36] EXT4-fs (loop5): This should not happen!! Data will be lost [ 223.468095][ T36] [ 223.487948][ T68] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 223.503991][ T68] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 223.528017][T15873] loop1: detected capacity change from 0 to 256 [ 223.535907][ T68] EXT4-fs (loop5): This should not happen!! Data will be lost [ 223.535907][ T68] [ 223.557714][T10941] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 223.569779][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 223.609747][T15873] FAT-fs (loop1): codepage cp874 not found [ 223.690704][T15887] syz_tun: entered allmulticast mode [ 223.709199][T15886] syz_tun: left allmulticast mode [ 223.799833][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 223.799850][ T28] audit: type=1400 audit(1780654112.469:1898): avc: denied { connect } for pid=15895 comm="syz.0.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 223.988182][T15907] netlink: 'syz.5.3222': attribute type 19 has an invalid length. [ 224.005177][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3222'. [ 224.030965][T15907] netlink: 'syz.5.3222': attribute type 19 has an invalid length. [ 224.032236][ T68] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.047957][ T68] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.056828][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3222'. [ 224.092637][ T68] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.106515][T15909] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3224'. [ 224.123878][ T68] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.271272][ T28] audit: type=1400 audit(1780654112.939:1899): avc: denied { ioctl } for pid=15920 comm="syz.3.3229" path="socket:[44481]" dev="sockfs" ino=44481 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 224.338612][ T28] audit: type=1400 audit(1780654112.969:1900): avc: denied { map } for pid=15925 comm="syz.1.3231" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.688317][ T28] audit: type=1400 audit(1780654113.359:1901): avc: denied { firmware_load } for pid=15968 comm="syz.5.3246" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 225.251367][T16030] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3261'. [ 225.352475][ T28] audit: type=1326 audit(1780654114.029:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.9.3254" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 225.425762][ T28] audit: type=1326 audit(1780654114.049:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.9.3254" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 225.477997][ T28] audit: type=1326 audit(1780654114.049:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.9.3254" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 225.525645][ T28] audit: type=1326 audit(1780654114.049:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.9.3254" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 225.575019][ T28] audit: type=1326 audit(1780654114.049:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.9.3254" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 225.613311][ T28] audit: type=1326 audit(1780654114.049:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16052 comm="syz.9.3254" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 227.371595][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3292'. [ 227.506411][T16156] loop9: detected capacity change from 0 to 512 [ 227.528414][T16156] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.538979][T16156] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 227.548394][T16156] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 227.559677][T16156] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 227.567929][T16156] System zones: 0-2, 18-18, 34-35 [ 227.573979][T16156] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.594800][T16156] xt_hashlimit: size too large, truncated to 1048576 [ 227.612996][T16161] loop5: detected capacity change from 0 to 2048 [ 227.633459][T16161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.659732][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.739971][T16174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3301'. [ 227.954094][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.163779][T16195] loop9: detected capacity change from 0 to 8192 [ 228.191574][T16195] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.217032][T16195] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 228.239671][T16195] FAT-fs (loop9): Filesystem has been set read-only [ 228.254629][T16195] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 228.265828][T16195] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 228.281928][T16195] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 229.129297][T16243] loop5: detected capacity change from 0 to 512 [ 229.153331][T16245] netlink: 'syz.9.3334': attribute type 1 has an invalid length. [ 229.177538][T16243] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 229.221494][T16243] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 229.246032][T16243] System zones: 1-12 [ 229.261102][T16243] EXT4-fs (loop5): 1 truncate cleaned up [ 229.273980][T16243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.323223][ T8836] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 229.336438][ T8836] CPU: 0 UID: 0 PID: 8836 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 229.336479][ T8836] Tainted: [W]=WARN [ 229.336487][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.336504][ T8836] Call Trace: [ 229.336511][ T8836] [ 229.336520][ T8836] __dump_stack+0x1d/0x30 [ 229.336591][ T8836] dump_stack_lvl+0x95/0xd0 [ 229.336618][ T8836] dump_stack+0x15/0x1b [ 229.336644][ T8836] dump_header+0x80/0x240 [ 229.336667][ T8836] oom_kill_process+0x295/0x350 [ 229.336743][ T8836] out_of_memory+0x97d/0xb80 [ 229.336820][ T8836] try_charge_memcg+0x62f/0xa10 [ 229.336854][ T8836] charge_memcg+0x6d/0x120 [ 229.336887][ T8836] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 229.336976][ T8836] __swap_cache_prepare_and_add+0x69/0x4a0 [ 229.337058][ T8836] ? alloc_pages_mpol+0x217/0x260 [ 229.337090][ T8836] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 229.337139][ T8836] swap_cache_alloc_folio+0xa2/0x120 [ 229.337165][ T8836] swap_cluster_readahead+0x25f/0x3c0 [ 229.337196][ T8836] swapin_readahead+0xde/0x840 [ 229.337234][ T8836] ? next_uptodate_folio+0x771/0x7e0 [ 229.337254][ T8836] ? percpu_counter_add_batch+0xb6/0x130 [ 229.337350][ T8836] ? mm_trace_rss_stat+0x1d/0xc0 [ 229.337416][ T8836] ? __rcu_read_unlock+0x33/0x70 [ 229.337465][ T8836] ? __rcu_read_unlock+0x4e/0x70 [ 229.337544][ T8836] ? swap_cache_get_folio+0x1e0/0x1f0 [ 229.337632][ T8836] do_swap_page+0x31e/0x2180 [ 229.337731][ T8836] ? filemap_fault+0x85f/0xb70 [ 229.337766][ T8836] ? __css_rstat_updated+0xbb/0x280 [ 229.337797][ T8836] ? __rcu_read_lock+0x36/0x50 [ 229.337823][ T8836] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 229.337851][ T8836] handle_mm_fault+0xb30/0x2e70 [ 229.337947][ T8836] ? vma_start_read+0x1c7/0x2c0 [ 229.338075][ T8836] do_user_addr_fault+0x62f/0x1050 [ 229.338106][ T8836] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 229.338131][ T8836] ? trace_page_fault_user+0x1f/0xa0 [ 229.338197][ T8836] exc_page_fault+0x62/0xa0 [ 229.338300][ T8836] asm_exc_page_fault+0x26/0x30 [ 229.338325][ T8836] RIP: 0033:0x7f93f1aaae77 [ 229.338345][ T8836] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24 [ 229.338407][ T8836] RSP: 002b:00007ffc54220c70 EFLAGS: 00010206 [ 229.338430][ T8836] RAX: 0000001b34424000 RBX: 00000000000003b3 RCX: 0000000000037e88 [ 229.338445][ T8836] RDX: 00000000038ac41c RSI: 00007ffc54220d00 RDI: 0000000000000005 [ 229.338458][ T8836] RBP: 00007ffc54220cac R08: 000000000d8309ba R09: 3fffffffffffffff [ 229.338472][ T8836] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 229.338489][ T8836] R13: 00000000000927c0 R14: 0000000000037d02 R15: 00007ffc54220d00 [ 229.338538][ T8836] [ 229.338559][ T8836] memory: usage 307200kB, limit 307200kB, failcnt 1169 [ 229.617678][ T8836] memory+swap: usage 308156kB, limit 9007199254740988kB, failcnt 0 [ 229.625737][ T8836] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 229.633094][ T8836] Memory cgroup stats for /syz0: [ 229.633425][ T8836] cache 8192 [ 229.641602][ T8836] rss 0 [ 229.644422][ T8836] shmem 0 [ 229.647448][ T8836] mapped_file 0 [ 229.650980][ T8836] dirty 0 [ 229.654039][ T8836] writeback 0 [ 229.657347][ T8836] workingset_refault_anon 2622 [ 229.662171][ T8836] workingset_refault_file 503 [ 229.666872][ T8836] swap 978944 [ 229.670227][ T8836] swapcached 31887360 [ 229.674265][ T8836] pgpgin 94566 [ 229.677710][ T8836] pgpgout 94563 [ 229.681213][ T8836] pgfault 162772 [ 229.684840][ T8836] pgmajfault 372 [ 229.688417][ T8836] inactive_anon 4096 [ 229.692353][ T8836] active_anon 0 [ 229.695869][ T8836] inactive_file 8192 [ 229.699853][ T8836] active_file 0 [ 229.703454][ T8836] unevictable 0 [ 229.706942][ T8836] hierarchical_memory_limit 314572800 [ 229.712470][ T8836] hierarchical_memsw_limit 9223372036854771712 [ 229.718657][ T8836] total_cache 8192 [ 229.722476][ T8836] total_rss 0 [ 229.725789][ T8836] total_shmem 0 [ 229.729268][ T8836] total_mapped_file 0 [ 229.733391][ T8836] total_dirty 0 [ 229.736953][ T8836] total_writeback 0 [ 229.740818][ T8836] total_workingset_refault_anon 2622 [ 229.746179][ T8836] total_workingset_refault_file 503 [ 229.751551][ T8836] total_swap 978944 [ 229.755432][ T8836] total_swapcached 31887360 [ 229.760002][ T8836] total_pgpgin 94566 [ 229.765427][ T8836] total_pgpgout 94563 [ 229.769448][ T8836] total_pgfault 162772 [ 229.773566][ T8836] total_pgmajfault 372 [ 229.777646][ T8836] total_inactive_anon 4096 [ 229.782129][ T8836] total_active_anon 0 [ 229.786165][ T8836] total_inactive_file 8192 [ 229.790607][ T8836] total_active_file 0 [ 229.794652][ T8836] total_unevictable 0 [ 229.798826][ T8836] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3326,pid=16227,uid=0 [ 229.813635][ T8836] Memory cgroup out of memory: Killed process 16227 (syz.0.3326) total-vm:96084kB, anon-rss:1236kB, file-rss:22100kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 229.845118][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.928977][T16239] loop3: detected capacity change from 0 to 4096 [ 229.967956][T16239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.139390][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 230.139407][ T28] audit: type=1400 audit(1780654118.809:1916): avc: denied { write } for pid=16238 comm="syz.3.3331" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.414987][ T28] audit: type=1400 audit(1780654119.089:1917): avc: denied { write } for pid=16276 comm="syz.5.3347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.506202][ T3390] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 230.514182][ T3390] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 230.680437][ T28] audit: type=1400 audit(1780654119.349:1918): avc: denied { watch watch_reads } for pid=16293 comm="syz.5.3356" path="/327/file1" dev="tmpfs" ino=1720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 230.728410][T16290] loop9: detected capacity change from 0 to 4096 [ 230.743392][T16296] netlink: 'syz.0.3357': attribute type 39 has an invalid length. [ 230.765548][T16290] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.825941][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.865022][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.920240][ T28] audit: type=1326 audit(1780654119.589:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.9.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 230.948289][ T28] audit: type=1326 audit(1780654119.589:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.9.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 230.957776][T16309] netlink: 'syz.5.3362': attribute type 6 has an invalid length. [ 230.980482][ T28] audit: type=1326 audit(1780654119.589:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.9.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 231.030539][ T28] audit: type=1326 audit(1780654119.589:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.9.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 231.067881][ T28] audit: type=1326 audit(1780654119.589:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.9.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 231.093916][ T28] audit: type=1326 audit(1780654119.589:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.9.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 231.119817][ T28] audit: type=1326 audit(1780654119.589:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16305 comm="syz.9.3360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 231.198277][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 231.211022][T16323] Bluetooth: hci0: Frame reassembly failed (-84) [ 231.255915][T16327] loop3: detected capacity change from 0 to 256 [ 232.270299][T16372] SELinux: failed to load policy [ 232.694746][T16398] loop9: detected capacity change from 0 to 256 [ 233.222124][ T4683] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 233.224425][ T3580] Bluetooth: hci0: command 0x1003 tx timeout [ 233.449015][T16426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3411'. [ 233.472883][T16428] loop3: detected capacity change from 0 to 128 [ 233.753653][T16451] bond0: entered promiscuous mode [ 233.762011][T16451] bond_slave_0: entered promiscuous mode [ 233.768902][T16451] bond_slave_1: entered promiscuous mode [ 233.789433][T16447] bond0: left promiscuous mode [ 233.812189][T16447] bond_slave_0: left promiscuous mode [ 233.817832][T16447] bond_slave_1: left promiscuous mode [ 233.836646][T16457] bridge1: entered promiscuous mode [ 233.845766][T16457] bridge1: entered allmulticast mode [ 233.924595][T16471] loop1: detected capacity change from 0 to 512 [ 233.932731][T16471] EXT4-fs: Ignoring removed orlov option [ 233.941016][T16471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 233.958604][T16471] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #16: comm syz.1.3432: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 233.975690][T16471] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 233.975935][T16471] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3432: couldn't read orphan inode 16 (err -117) [ 233.985198][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 233.985215][ C1] EXT4-fs (loop1): initial error at time 1780654122: ext4_ext_check_inode:521: inode 16 [ 233.985251][ C1] EXT4-fs (loop1): last error at time 1780654122: ext4_ext_check_inode:521: inode 16 [ 234.025517][T16471] loop1: lost filesystem error report for type 5 error -117 [ 234.025672][T16471] EXT4-fs (loop1): 1 orphan inode deleted [ 234.041407][T16471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.085834][T11515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.423116][T16492] loop1: detected capacity change from 0 to 512 [ 234.445490][T16492] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 234.455390][T16492] EXT4-fs (loop1): orphan cleanup on readonly fs [ 234.464961][T16492] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.3440: Failed to acquire dquot type 1 [ 234.477548][T16492] loop1: lost filesystem error report for type 5 error -5 [ 234.482212][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 234.496752][ C0] EXT4-fs (loop1): initial error at time 1780654123: ext4_acquire_dquot:7034 [ 234.505973][ C0] EXT4-fs (loop1): last error at time 1780654123: ext4_acquire_dquot:7034 [ 234.519593][T16492] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3440: bg 0: block 40: padding at end of block bitmap is not set [ 234.536029][T16492] loop1: lost filesystem error report for type 5 error -117 [ 234.537105][T16492] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 234.555878][T16492] loop1: lost filesystem error report for type 5 error -117 [ 234.558965][T16492] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.3440: data will be lost [ 234.582599][T16492] EXT4-fs (loop1): 1 truncate cleaned up [ 234.595541][T16492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.632934][T11515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.781443][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 235.781462][ T28] audit: type=1400 audit(1780654124.449:1961): avc: denied { map } for pid=16574 comm="syz.1.3478" path="socket:[45771]" dev="sockfs" ino=45771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 235.822355][T16585] netlink: 'syz.0.3482': attribute type 12 has an invalid length. [ 235.830601][T16585] netlink: 'syz.0.3482': attribute type 29 has an invalid length. [ 235.848424][T16585] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3482'. [ 235.863512][T16585] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3482'. [ 235.880741][T16585] netlink: 'syz.0.3482': attribute type 12 has an invalid length. [ 235.895032][T16585] netlink: 'syz.0.3482': attribute type 29 has an invalid length. [ 235.905359][T16585] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3482'. [ 235.922278][T16585] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3482'. [ 236.079707][ T28] audit: type=1400 audit(1780654124.749:1962): avc: denied { mount } for pid=16588 comm="syz.1.3484" name="/" dev="rpc_pipefs" ino=45799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 236.204850][T16599] loop1: detected capacity change from 0 to 512 [ 236.235053][T16603] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3492'. [ 236.255695][T16599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.279777][T16599] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.305487][ T28] audit: type=1400 audit(1780654124.979:1963): avc: denied { write } for pid=16598 comm="syz.1.3488" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.318925][T16595] loop5: detected capacity change from 0 to 512 [ 236.334356][ T28] audit: type=1400 audit(1780654124.999:1964): avc: denied { write } for pid=16598 comm="syz.1.3488" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.334447][ T28] audit: type=1400 audit(1780654124.999:1965): avc: denied { write } for pid=16598 comm="syz.1.3488" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.368853][ T28] audit: type=1400 audit(1780654125.029:1966): avc: denied { listen } for pid=16608 comm="syz.9.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.449050][T11515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.469543][T16595] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 236.482636][T16595] EXT4-fs (loop5): orphan cleanup on readonly fs [ 236.499594][ T28] audit: type=1400 audit(1780654125.159:1967): avc: denied { write } for pid=16608 comm="syz.9.3493" path="socket:[45858]" dev="sockfs" ino=45858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.599708][T16595] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 236.626863][T16595] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 236.637335][T16595] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3487: Failed to acquire dquot type 1 [ 236.650576][T16595] loop5: lost filesystem error report for type 5 error -5 [ 236.662093][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 236.676732][ C1] EXT4-fs (loop5): initial error at time 1780654125: ext4_acquire_dquot:7034 [ 236.686765][ C1] EXT4-fs (loop5): last error at time 1780654125: ext4_acquire_dquot:7034 [ 236.730513][T16595] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3487: bg 0: block 40: padding at end of block bitmap is not set [ 236.772446][T16595] loop5: lost filesystem error report for type 5 error -117 [ 236.782359][T16595] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 236.804915][T16595] loop5: lost filesystem error report for type 5 error -117 [ 236.833412][T16595] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.3487: data will be lost [ 236.915651][T16595] EXT4-fs (loop5): 1 truncate cleaned up [ 236.980751][T16595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.021568][T16650] loop1: detected capacity change from 0 to 512 [ 237.055976][T16650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.077951][T16650] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.099159][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.118715][ T28] audit: type=1400 audit(1780654125.769:1968): avc: denied { write } for pid=16647 comm="syz.1.3510" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.145633][T11515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.392638][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3519'. [ 237.401627][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3519'. [ 237.410717][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3519'. [ 237.999832][T16710] netlink: 'syz.0.3535': attribute type 4 has an invalid length. [ 238.216174][T16710] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.223458][T16710] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.302448][T16710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.316238][T16710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.429092][T16730] gretap1: entered allmulticast mode [ 238.445304][T16730] team0: Port device gretap1 added [ 238.460142][T16740] bridge0: port 3(team0) entered blocking state [ 238.475335][T16740] bridge0: port 3(team0) entered disabled state [ 238.486784][T16740] team0: entered allmulticast mode [ 238.492037][T16740] team_slave_0: entered allmulticast mode [ 238.497872][T16740] team_slave_1: entered allmulticast mode [ 238.505621][T16740] team0: entered promiscuous mode [ 238.510920][T16740] team_slave_0: entered promiscuous mode [ 238.521209][T16740] team_slave_1: entered promiscuous mode [ 238.527182][T16740] gretap1: entered promiscuous mode [ 238.533015][T16740] bridge0: port 3(team0) entered blocking state [ 238.539432][T16740] bridge0: port 3(team0) entered forwarding state [ 238.549261][ T30] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.564327][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.583500][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 238.597295][ T30] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.607030][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.617154][ T30] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 238.649732][ T30] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.661323][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.672528][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 238.681586][ T30] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.690868][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.703393][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 238.733686][T16757] tipc: Enabling of bearer rejected, failed to enable media [ 239.084596][T16784] loop3: detected capacity change from 0 to 128 [ 239.097148][T16784] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 239.112772][T16784] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.140223][T16784] ext2 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.147833][T16790] loop5: detected capacity change from 0 to 512 [ 239.180358][ T8417] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.227195][T16790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.247283][T16790] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.396786][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.524679][T16828] loop1: detected capacity change from 0 to 512 [ 239.549832][T16828] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 239.586264][T16828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.599250][T16828] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.628682][T11515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.757102][T16846] loop1: detected capacity change from 0 to 512 [ 239.769638][T16846] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.791878][T16846] EXT4-fs (loop1): 1 truncate cleaned up [ 239.801817][T16846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.914265][T11515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.970796][T16857] loop5: detected capacity change from 0 to 2048 [ 240.025676][T16857] loop5: p2 < > p4 [ 240.032653][T16857] loop5: p4 size 262144 extends beyond EOD, truncated [ 240.200578][T16866] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3590'. [ 240.531912][T16895] loop5: detected capacity change from 0 to 128 [ 240.544955][T16895] FAT-fs (loop5): Directory bread(block 162) failed [ 240.553530][T16895] FAT-fs (loop5): Directory bread(block 163) failed [ 240.561896][T16895] FAT-fs (loop5): Directory bread(block 164) failed [ 240.569901][T16895] FAT-fs (loop5): Directory bread(block 165) failed [ 240.576898][T16895] FAT-fs (loop5): Directory bread(block 166) failed [ 240.583716][T16895] FAT-fs (loop5): Directory bread(block 167) failed [ 240.590749][T16895] FAT-fs (loop5): Directory bread(block 168) failed [ 240.597526][T16895] FAT-fs (loop5): Directory bread(block 169) failed [ 240.604245][T16895] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 240.616542][T16895] FAT-fs (loop5): Directory bread(block 162) failed [ 240.623433][T16895] FAT-fs (loop5): Directory bread(block 163) failed [ 240.630378][T16895] syz.5.3603: attempt to access beyond end of device [ 240.630378][T16895] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 240.643776][T16895] syz.5.3603: attempt to access beyond end of device [ 240.643776][T16895] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 240.745593][T16910] xt_hashlimit: size too large, truncated to 1048576 [ 240.806313][T16913] serio: Serial port ptm0 [ 240.957249][T16913] serio: Serial port ptm0 [ 241.089644][T16934] sg_write: data in/out 483412/136 bytes for SCSI command 0x0-- guessing data in; [ 241.089644][T16934] program syz.5.3618 not setting count and/or reply_len properly [ 241.396577][T16961] tls_set_device_offload: netdev not found [ 241.441978][T16966] netlink: 'syz.1.3631': attribute type 6 has an invalid length. [ 241.722585][T16953] loop3: detected capacity change from 0 to 512 [ 241.777832][T16953] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 241.788398][T16953] EXT4-fs (loop3): orphan cleanup on readonly fs [ 241.815442][T16953] __quota_error: 31 callbacks suppressed [ 241.815464][T16953] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 241.835586][T16953] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 241.846636][T16953] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3625: Failed to acquire dquot type 1 [ 241.864872][T16953] loop3: lost filesystem error report for type 5 error -5 [ 241.870570][T16953] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3625: bg 0: block 40: padding at end of block bitmap is not set [ 241.872059][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 241.878894][T16953] loop3: lost filesystem error report for type 5 error -117 [ 241.892211][ C0] EXT4-fs (loop3): initial error at time 1780654386: ext4_acquire_dquot:7034 [ 241.892243][ C0] EXT4-fs (loop3): last error at time 1780654386: ext4_acquire_dquot:7034 [ 241.933538][T16953] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 241.942981][ T28] audit: type=1400 audit(1780654386.604:2000): avc: denied { getopt } for pid=17004 comm="syz.9.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 241.963403][T16953] loop3: lost filesystem error report for type 5 error -117 [ 241.978235][T16953] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.3625: data will be lost [ 242.004255][T16953] EXT4-fs (loop3): 1 truncate cleaned up [ 242.037959][T16953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.081233][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.239811][T17019] veth0_to_team: entered promiscuous mode [ 242.259143][T17019] veth0_to_team: left promiscuous mode [ 242.372523][T17033] loop3: detected capacity change from 0 to 512 [ 242.408797][T17033] EXT4-fs: Ignoring removed orlov option [ 242.440564][T17033] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.482463][T17033] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.3657: corrupted in-inode xattr: e_value size too large [ 242.482500][T17033] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.482773][T17033] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3657: couldn't read orphan inode 15 (err -117) [ 242.482805][T17033] loop3: lost filesystem error report for type 5 error -117 [ 242.483485][T17033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.520888][ T28] audit: type=1400 audit(1780654387.184:2001): avc: denied { write } for pid=17032 comm="syz.3.3657" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.520919][ T28] audit: type=1400 audit(1780654387.184:2002): avc: denied { create } for pid=17032 comm="syz.3.3657" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 242.529334][ T28] audit: type=1400 audit(1780654387.194:2003): avc: denied { write } for pid=17032 comm="syz.3.3657" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.529439][ T28] audit: type=1400 audit(1780654387.194:2004): avc: denied { write } for pid=17032 comm="syz.3.3657" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.529463][ T28] audit: type=1400 audit(1780654387.194:2005): avc: denied { create } for pid=17032 comm="syz.3.3657" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 242.534606][ T28] audit: type=1400 audit(1780654387.204:2006): avc: denied { write } for pid=17032 comm="syz.3.3657" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.534651][ T28] audit: type=1400 audit(1780654387.204:2007): avc: denied { write } for pid=17032 comm="syz.3.3657" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.668154][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.650716][T17140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.660403][T17140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.352656][T17167] SELinux: failed to load policy [ 244.376523][T17169] netlink: 'syz.0.3708': attribute type 1 has an invalid length. [ 245.012603][T17181] loop9: detected capacity change from 0 to 4096 [ 245.043397][T17181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.069131][T17187] netlink: 'syz.0.3716': attribute type 8 has an invalid length. [ 245.453172][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.477432][T17209] loop3: detected capacity change from 0 to 512 [ 245.813978][T17223] loop3: detected capacity change from 0 to 128 [ 245.833420][T17223] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 245.856654][T17223] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.971568][ T8417] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.954822][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 246.954840][ T28] audit: type=1400 audit(1780654391.624:2051): avc: denied { read } for pid=17306 comm="syz.3.3764" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 246.990364][ T28] audit: type=1400 audit(1780654391.624:2052): avc: denied { open } for pid=17306 comm="syz.3.3764" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 247.486230][T17337] loop9: detected capacity change from 0 to 128 [ 247.643626][ T68] kworker/u8:4: attempt to access beyond end of device [ 247.643626][ T68] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 247.659009][ T68] kworker/u8:4: attempt to access beyond end of device [ 247.659009][ T68] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 247.705032][ T68] kworker/u8:4: attempt to access beyond end of device [ 247.705032][ T68] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 247.719917][ T68] kworker/u8:4: attempt to access beyond end of device [ 247.719917][ T68] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 247.734521][ T68] kworker/u8:4: attempt to access beyond end of device [ 247.734521][ T68] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 247.748032][ T68] kworker/u8:4: attempt to access beyond end of device [ 247.748032][ T68] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 247.763564][ T68] kworker/u8:4: attempt to access beyond end of device [ 247.763564][ T68] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 247.800604][ T68] kworker/u8:4: attempt to access beyond end of device [ 247.800604][ T68] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 247.814314][ T68] kworker/u8:4: attempt to access beyond end of device [ 247.814314][ T68] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 247.828660][ T68] kworker/u8:4: attempt to access beyond end of device [ 247.828660][ T68] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 247.853426][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3784'. [ 247.871546][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3784'. [ 247.885056][T17354] netlink: 'syz.3.3784': attribute type 11 has an invalid length. [ 247.895320][T17356] loop9: detected capacity change from 0 to 2048 [ 247.905799][ T6430] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.919100][ T6430] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.931416][ T6430] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.941054][T17356] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.962154][T17356] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.983838][ T6430] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.008967][ T28] audit: type=1400 audit(1780654392.674:2053): avc: denied { write } for pid=17355 comm="syz.9.3782" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.088805][ T28] audit: type=1400 audit(1780654392.754:2054): avc: denied { ioctl } for pid=17366 comm="syz.3.3787" path="socket:[48688]" dev="sockfs" ino=48688 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 248.164489][ T28] audit: type=1326 audit(1780654392.834:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.9.3782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 248.194056][T17372] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3782: bg 0: block 345: padding at end of block bitmap is not set [ 248.209096][ T28] audit: type=1326 audit(1780654392.864:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.9.3782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 248.235080][T17372] EXT4-fs (loop9): Remounting filesystem read-only [ 248.252617][ T6413] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 248.253241][T17356] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #15: comm syz.9.3782: ES cache extent failed: add [0,16,112,0x1] conflict with existing [1,15,113,0x12] [ 248.253241][T17356] [ 248.298762][ T28] audit: type=1326 audit(1780654392.864:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.9.3782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 248.353837][T17380] syz.5.3791 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 248.372930][ T28] audit: type=1326 audit(1780654392.864:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.9.3782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 248.441066][ T28] audit: type=1326 audit(1780654392.884:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.9.3782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 248.508247][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.518105][ T28] audit: type=1326 audit(1780654392.884:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17355 comm="syz.9.3782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 249.011039][T17427] loop5: detected capacity change from 0 to 512 [ 249.044920][T17427] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 249.061591][T17427] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3813: invalid indirect mapped block 9 (level 0) [ 249.075205][T17427] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 249.075483][T17427] EXT4-fs (loop5): 1 truncate cleaned up [ 249.084689][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 249.084712][ C1] EXT4-fs (loop5): initial error at time 1780654393: ext4_free_branches:1023: inode 11 [ 249.084739][ C1] EXT4-fs (loop5): last error at time 1780654393: ext4_free_branches:1023: inode 11 [ 249.117148][T17427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.313523][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.344991][T17442] can0: slcan on ttyS3. [ 249.375812][T17446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3821'. [ 249.385980][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3821'. [ 249.395487][T17446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3821'. [ 249.442117][T17442] can0 (unregistered): slcan off ttyS3. [ 249.450107][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3821'. [ 249.541343][ T3403] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.552222][ T3403] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 249.626283][T17468] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3831'. [ 249.663853][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3830'. [ 249.700657][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3830'. [ 250.863591][T17504] loop5: detected capacity change from 0 to 512 [ 250.883735][T17504] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 250.888980][T17499] loop9: detected capacity change from 0 to 512 [ 250.900623][T17504] EXT4-fs (loop5): bad block size 32768 [ 250.995607][T17504] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3844'. [ 251.057369][T17499] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 251.069732][T17499] EXT4-fs (loop9): orphan cleanup on readonly fs [ 251.087842][T17499] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.3840: Failed to acquire dquot type 1 [ 251.123772][T17499] loop9: lost filesystem error report for type 5 error -5 [ 251.131993][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 251.145019][T17499] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3840: bg 0: block 40: padding at end of block bitmap is not set [ 251.145986][ C0] EXT4-fs (loop9): initial error at time 1780654395: ext4_acquire_dquot:7034 [ 251.146017][ C0] EXT4-fs (loop9): last error at time 1780654395: ext4_acquire_dquot:7034 [ 251.206931][T17499] loop9: lost filesystem error report for type 5 error -117 [ 251.219771][T17499] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 251.239024][T17499] loop9: lost filesystem error report for type 5 error -117 [ 251.243386][T17499] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #16: comm syz.9.3840: data will be lost [ 251.327263][T17499] EXT4-fs (loop9): 1 truncate cleaned up [ 251.358957][T17499] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.401491][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.485389][ T8854] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 251.504554][ T8854] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.692004][T17546] ip6erspan0: entered promiscuous mode [ 252.033440][T17551] loop9: detected capacity change from 0 to 2048 [ 252.080621][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 252.080670][ T28] audit: type=1400 audit(1780654396.744:2094): avc: denied { write } for pid=17567 comm="syz.3.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 252.128725][ T28] audit: type=1400 audit(1780654396.784:2095): avc: denied { watch watch_reads } for pid=17569 comm="syz.0.3873" path="/proc/1207/net/pfkey" dev="proc" ino=4026533871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 252.195477][T17573] loop3: detected capacity change from 0 to 512 [ 252.248292][ T28] audit: type=1326 audit(1780654396.914:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17576 comm="syz.0.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f1bdce59 code=0x7ffc0000 [ 252.279935][T17573] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3874: inode has both inline data and extents flags [ 252.300370][T17573] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.301731][T17573] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3874: couldn't read orphan inode 15 (err -117) [ 252.310994][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 252.311010][ C1] EXT4-fs (loop3): initial error at time 1780654396: ext4_orphan_get:1397: inode 15 [ 252.311037][ C1] EXT4-fs (loop3): last error at time 1780654396: ext4_orphan_get:1397: inode 15 [ 252.324770][ T28] audit: type=1326 audit(1780654396.944:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17576 comm="syz.0.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f1bdce59 code=0x7ffc0000 [ 252.331210][T17573] loop3: lost filesystem error report for type 5 error -117 [ 252.363654][ T28] audit: type=1326 audit(1780654396.944:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17576 comm="syz.0.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f1bdce59 code=0x7ffc0000 [ 252.409286][T17573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.441328][T17551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 252.545648][ T28] audit: type=1326 audit(1780654396.944:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17576 comm="syz.0.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f1bdce59 code=0x7ffc0000 [ 252.632241][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 252.645985][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.666217][ T28] audit: type=1326 audit(1780654396.944:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17576 comm="syz.0.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f93f1bdce59 code=0x7ffc0000 [ 252.786714][ T28] audit: type=1326 audit(1780654396.944:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17576 comm="syz.0.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f1bdce59 code=0x7ffc0000 [ 252.854942][ T28] audit: type=1326 audit(1780654396.944:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17576 comm="syz.0.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f1bdce59 code=0x7ffc0000 [ 252.881912][ T28] audit: type=1326 audit(1780654396.944:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17576 comm="syz.0.3876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f1bdce59 code=0x7ffc0000 [ 252.955456][T17599] loop3: detected capacity change from 0 to 512 [ 252.993892][T17599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.006621][T17599] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.045880][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.107050][T17606] __nla_validate_parse: 2 callbacks suppressed [ 253.107087][T17606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3885'. [ 253.252197][T17619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17619 comm=syz.1.3893 [ 253.288871][T17619] netlink: 'syz.1.3893': attribute type 1 has an invalid length. [ 253.321497][T17619] bond4: (slave bridge1): making interface the new active one [ 253.329878][T17619] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 253.395502][T17632] sch_tbf: burst 1023 is lower than device lo mtu (1514) ! [ 253.450391][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3900'. [ 253.563897][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 253.601848][T17653] Set syz1 is full, maxelem 14 reached [ 253.613761][T17655] loop3: detected capacity change from 0 to 1024 [ 253.620603][T17655] EXT4-fs: Ignoring removed bh option [ 253.645651][T17655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.670838][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.694513][T17663] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3910'. [ 254.416774][T17690] bridge0: port 3(syz_tun) entered blocking state [ 254.437524][T17690] bridge0: port 3(syz_tun) entered disabled state [ 254.444190][T17690] syz_tun: entered allmulticast mode [ 254.450223][T17690] syz_tun: entered promiscuous mode [ 254.782362][T17719] loop3: detected capacity change from 0 to 4096 [ 254.819849][T17719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.063282][T17733] loop5: detected capacity change from 0 to 512 [ 255.078146][T17733] EXT4-fs: Ignoring removed bh option [ 255.104350][T17733] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.3941: corrupted in-inode xattr: e_value size too large [ 255.122752][T17733] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.123376][T17733] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3941: couldn't read orphan inode 15 (err -117) [ 255.132587][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 255.132605][ C1] EXT4-fs (loop5): initial error at time 1780654399: ext4_iget_extra_inode:5128: inode 15 [ 255.132646][ C1] EXT4-fs (loop5): last error at time 1780654399: ext4_iget_extra_inode:5128: inode 15 [ 255.228491][T17733] loop5: lost filesystem error report for type 5 error -117 [ 255.232635][T17733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.255498][T17736] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 255.321450][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.357489][T17733] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.3941: Unrecognised inode hash code 4 [ 255.372869][T17733] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3941: Corrupt directory, running e2fsck is recommended [ 255.442552][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.594706][T17747] loop9: detected capacity change from 0 to 512 [ 255.628209][T17760] loop5: detected capacity change from 0 to 512 [ 255.647913][T17760] EXT4-fs: Ignoring removed orlov option [ 255.675862][T17747] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 255.691932][T17760] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.700018][T17747] EXT4-fs (loop9): bad block size 32768 [ 255.714544][T17760] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.3953: corrupted in-inode xattr: e_value size too large [ 255.729097][T17760] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.731995][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 255.734581][T17760] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3953: couldn't read orphan inode 15 (err -117) [ 255.741157][ C0] EXT4-fs (loop5): initial error at time 1780654400: ext4_iget_extra_inode:5128: inode 15 [ 255.769401][ C0] EXT4-fs (loop5): last error at time 1780654400: ext4_iget_extra_inode:5128: inode 15 [ 255.783471][T17747] netlink: 277 bytes leftover after parsing attributes in process `syz.9.3948'. [ 255.783864][T17760] loop5: lost filesystem error report for type 5 error -117 [ 255.793746][T17760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.903958][T17768] veth0_to_team: entered promiscuous mode [ 255.916949][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.934097][T17768] veth0_to_team: left promiscuous mode [ 255.964209][T17770] ref_ctr_offset mismatch. inode: 0x8d0 offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0 [ 256.081140][T17780] bridge0: port 4(syz_tun) entered blocking state [ 256.104839][T17780] bridge0: port 4(syz_tun) entered disabled state [ 256.129322][T17780] syz_tun: entered allmulticast mode [ 256.149919][T17780] syz_tun: entered promiscuous mode [ 256.159569][T17780] bridge0: port 4(syz_tun) entered blocking state [ 256.166090][T17780] bridge0: port 4(syz_tun) entered forwarding state [ 256.184560][T17786] netlink: 'syz.5.3965': attribute type 1 has an invalid length. [ 256.200738][T17786] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3965'. [ 256.317998][T17796] bridge0: entered promiscuous mode [ 256.323504][T17796] bridge0: entered allmulticast mode [ 256.518030][T17808] only policy match revision 0 supported [ 256.518045][T17808] unable to load match [ 256.894327][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3989'. [ 257.041907][T17803] loop5: detected capacity change from 0 to 2048 [ 257.117333][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 257.117348][ T28] audit: type=1400 audit(1780654401.784:2136): avc: denied { create } for pid=17852 comm="syz.1.3995" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 257.253143][T17803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 257.269051][T17863] loop3: detected capacity change from 0 to 512 [ 257.281898][T17863] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 257.312232][T17863] EXT4-fs (loop3): bad block size 32768 [ 257.337312][T17863] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3997'. [ 257.376030][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 257.450436][T17885] loop3: detected capacity change from 0 to 512 [ 257.468296][T17885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.485908][ T28] audit: type=1400 audit(1780654402.154:2137): avc: denied { write } for pid=17884 comm="syz.3.4007" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.512215][ T28] audit: type=1400 audit(1780654402.154:2138): avc: denied { write } for pid=17884 comm="syz.3.4007" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 257.537489][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.550223][ T28] audit: type=1400 audit(1780654402.154:2139): avc: denied { write } for pid=17884 comm="syz.3.4007" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 257.579811][ T28] audit: type=1400 audit(1780654402.154:2140): avc: denied { read } for pid=17884 comm="syz.3.4007" name="file0" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 257.606888][ T8854] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 257.614671][ T28] audit: type=1400 audit(1780654402.154:2141): avc: denied { write } for pid=17884 comm="syz.3.4007" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 257.628806][T17894] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 257.637633][ T28] audit: type=1400 audit(1780654402.154:2142): avc: denied { write } for pid=17884 comm="syz.3.4007" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 257.645942][ T8854] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.011031][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4020'. [ 258.064739][T17922] netlink: 'syz.5.4024': attribute type 1 has an invalid length. [ 258.116944][T17922] bond2: (slave geneve3): making interface the new active one [ 258.157440][T17922] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 258.167256][ T30] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 258.186711][ T30] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 258.237896][ T30] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 258.263876][ T30] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 258.570020][ T28] audit: type=1400 audit(1780654403.234:2143): avc: denied { write } for pid=17953 comm="syz.1.4036" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 258.634740][T17958] netlink: 'syz.3.4038': attribute type 1 has an invalid length. [ 258.646800][T17956] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4037'. [ 258.657375][T17958] bond1: entered promiscuous mode [ 258.669086][T17958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.713535][T17958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.745668][T17958] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 258.765260][T17958] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 258.800726][T17958] bond1: (slave vti0): making interface the new active one [ 258.823727][T17958] vti0: entered promiscuous mode [ 258.845431][T17958] bond1: (slave vti0): Enslaving as an active interface with an up link [ 259.542316][T17989] gre1: entered promiscuous mode [ 259.609561][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4054'. [ 259.691282][T17998] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 259.800192][T18012] tipc: Started in network mode [ 259.805503][T18012] tipc: Node identity ac14140f, cluster identity 4711 [ 259.812778][T18012] tipc: New replicast peer: 255.255.255.255 [ 259.818980][T18012] tipc: Enabled bearer , priority 10 [ 259.862197][T18016] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 259.998295][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4071'. [ 260.028166][T18034] bridge0: port 4(vlan2) entered blocking state [ 260.034799][T18034] bridge0: port 4(vlan2) entered disabled state [ 260.041305][T18034] vlan2: entered allmulticast mode [ 260.046833][T18034] geneve0: entered allmulticast mode [ 260.053218][T18034] vlan2: entered promiscuous mode [ 260.058451][T18034] geneve0: entered promiscuous mode [ 260.777655][ T28] audit: type=1400 audit(1780654405.444:2144): avc: denied { mounton } for pid=18036 comm="syz.5.4084" path="/454/file0" dev="tmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 260.846055][ T28] audit: type=1400 audit(1780654405.514:2145): avc: denied { accept } for pid=18048 comm="syz.9.4079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 260.938528][ T8716] tipc: Node number set to 2886997007 [ 260.964162][T18057] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.4082'. [ 260.988652][T18041] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4077'. [ 261.384732][T18068] loop9: detected capacity change from 0 to 512 [ 261.431023][T18068] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.448092][T18068] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.527875][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4102'. [ 261.690665][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.789277][T18099] loop9: detected capacity change from 0 to 4096 [ 261.805406][T18099] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.923665][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.172084][T18132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4116'. [ 262.186788][T18132] netlink: 'syz.3.4116': attribute type 30 has an invalid length. [ 262.198854][T13865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.204189][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4116'. [ 262.244637][T13865] bond0: (slave syz_tun): Releasing backup interface [ 262.276529][T18138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4120'. [ 262.285736][T18138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4120'. [ 262.461949][T18146] loop3: detected capacity change from 0 to 2048 [ 262.507122][T18146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 262.540659][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 262.707411][T11292] bridge_slave_1: left allmulticast mode [ 262.713237][T11292] bridge_slave_1: left promiscuous mode [ 262.719264][T11292] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.729765][T11292] bridge_slave_0: left allmulticast mode [ 262.735667][T11292] bridge_slave_0: left promiscuous mode [ 262.741453][T11292] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.863073][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 262.863091][ T28] audit: type=1400 audit(1780654407.534:2150): avc: denied { connect } for pid=18184 comm="syz.5.4135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.915142][T11292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.928678][T11292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.946275][T11292] bond0 (unregistering): Released all slaves [ 262.958735][T11292] bond1 (unregistering): Released all slaves [ 263.019763][T11292] tipc: Disabling bearer [ 263.035704][T18195] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 263.042637][T11292] tipc: Left network mode [ 263.139359][T18142] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.160579][T18142] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.169825][T18142] bridge_slave_0: entered allmulticast mode [ 263.176518][T18142] bridge_slave_0: entered promiscuous mode [ 263.183609][T18142] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.191116][T18142] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.198600][T18142] bridge_slave_1: entered allmulticast mode [ 263.205604][T18142] bridge_slave_1: entered promiscuous mode [ 263.213908][T18195] @0Ù: renamed from bond_slave_1 [ 263.270844][T18142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.284846][T11292] hsr_slave_0: left promiscuous mode [ 263.289512][T18205] loop9: detected capacity change from 0 to 128 [ 263.298070][T11292] hsr_slave_1: left promiscuous mode [ 263.303964][T11292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.311431][T11292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.322619][T18205] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 263.379074][T18205] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.405076][T18205] EXT4-fs (loop9): shut down requested (1) [ 263.407938][ T28] audit: type=1400 audit(1780654408.064:2151): avc: denied { write } for pid=18203 comm="syz.9.4144" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.464689][T11292] team0 (unregistering): Port device team_slave_1 removed [ 263.490628][T11292] team0 (unregistering): Port device team_slave_0 removed [ 263.534970][ T28] audit: type=1400 audit(1780654408.204:2152): avc: denied { write } for pid=18204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.563034][T14004] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.592605][T18142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.640150][ T28] audit: type=1400 audit(1780654408.304:2153): avc: denied { write } for pid=18218 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.714355][ T3025] 8021q: adding VLAN 0 to HW filter on device eth11 [ 263.735153][T18142] team0: Port device team_slave_0 added [ 263.751723][T18142] team0: Port device team_slave_1 added [ 263.817233][T18142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.838781][T18142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.899752][T18142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.924690][T18142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.939683][T18142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.996904][T18142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.097865][T18142] hsr_slave_0: entered promiscuous mode [ 264.113766][T18142] hsr_slave_1: entered promiscuous mode [ 264.204467][T11292] IPVS: stop unused estimator thread 0... [ 264.265875][ T28] audit: type=1400 audit(1780654408.934:2154): avc: denied { write } for pid=18237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.428928][ T28] audit: type=1400 audit(1780654409.094:2155): avc: denied { write } for pid=18257 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.590009][ T3025] 8021q: adding VLAN 0 to HW filter on device eth12 [ 264.900712][ T28] audit: type=1400 audit(1780654409.564:2156): avc: denied { write } for pid=18266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.981652][ T28] audit: type=1400 audit(1780654409.644:2157): avc: denied { write } for pid=18281 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.005579][T18142] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.026274][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.044062][T18142] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.065083][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.087442][ T3025] 8021q: adding VLAN 0 to HW filter on device eth13 [ 265.097942][T18142] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.111935][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.124177][T18142] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.148434][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.257379][T18142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.278799][T18142] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.294178][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.301304][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.318717][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.325954][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.352362][T18142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.366060][T18142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.481204][ T28] audit: type=1400 audit(1780654410.144:2158): avc: denied { write } for pid=18293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.515514][T18312] loop5: detected capacity change from 0 to 512 [ 265.531809][T18312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.574779][ T28] audit: type=1400 audit(1780654410.244:2159): avc: denied { write } for pid=18316 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.605075][T18312] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.643992][ T3025] 8021q: adding VLAN 0 to HW filter on device eth14 [ 265.720337][T18142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.924530][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.205261][T18142] veth0_vlan: entered promiscuous mode [ 266.290208][T18142] veth1_vlan: entered promiscuous mode [ 266.329689][T18142] veth0_macvtap: entered promiscuous mode [ 266.366532][T18142] veth1_macvtap: entered promiscuous mode [ 266.425269][T18142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.446267][T18142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.475819][ T6430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.507176][ T6430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.538825][ T6430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.567608][ T6430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.905262][ T9] IPVS: starting estimator thread 0... [ 266.913932][T18403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.929553][T18403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.002038][T18419] IPVS: using max 2160 ests per chain, 108000 per kthread [ 267.496690][T18474] __nla_validate_parse: 1 callbacks suppressed [ 267.496705][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4186'. [ 267.809212][T18512] pimreg: entered allmulticast mode [ 267.829120][T18512] pimreg: left allmulticast mode [ 267.908934][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 267.909006][ T28] audit: type=1400 audit(1780654412.574:2175): avc: denied { write } for pid=18513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.988787][ T28] audit: type=1400 audit(1780654412.654:2176): avc: denied { write } for pid=18531 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.027335][ T28] audit: type=1400 audit(1780654412.674:2177): avc: denied { write } for pid=18530 comm="syz.9.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 268.058113][T18535] loop3: detected capacity change from 0 to 512 [ 268.073226][T18535] EXT4-fs: Ignoring removed bh option [ 268.095633][T18535] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 268.117146][T18535] EXT4-fs (loop3): 1 truncate cleaned up [ 268.123599][T18535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.136182][ T28] audit: type=1326 audit(1780654412.794:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.9.4202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 268.162069][ T28] audit: type=1326 audit(1780654412.794:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.9.4202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 268.188133][ T28] audit: type=1326 audit(1780654412.804:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.9.4202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 268.213818][ T28] audit: type=1326 audit(1780654412.804:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.9.4202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 268.239877][ T28] audit: type=1326 audit(1780654412.804:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.9.4202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 268.276749][ T28] audit: type=1326 audit(1780654412.814:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.9.4202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 268.330108][ T28] audit: type=1326 audit(1780654412.904:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.9.4202" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4baa6ce59 code=0x7ffc0000 [ 268.393777][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.457978][T18565] loop9: detected capacity change from 0 to 512 [ 268.505716][T18565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.542162][T18565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.574532][T18565] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.627980][T18581] loop3: detected capacity change from 0 to 512 [ 268.636982][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.676998][T18581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.726221][T18581] ext4 filesystem being mounted at /641/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.776957][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.067403][T18636] loop5: detected capacity change from 0 to 512 [ 269.107371][T18636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.132960][T18636] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.185303][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.349917][T18664] loop9: detected capacity change from 0 to 1024 [ 269.356798][T18664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.399982][T18664] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.418577][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4228'. [ 269.534252][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.759673][T18686] loop5: detected capacity change from 0 to 4096 [ 269.775250][T18686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.936766][T18703] loop4: detected capacity change from 0 to 256 [ 269.957154][T18703] FAT-fs (loop4): Directory bread(block 64) failed [ 269.980595][T18703] FAT-fs (loop4): Directory bread(block 65) failed [ 269.995893][T18703] FAT-fs (loop4): Directory bread(block 66) failed [ 270.004460][T18703] FAT-fs (loop4): Directory bread(block 67) failed [ 270.011180][T18703] FAT-fs (loop4): Directory bread(block 68) failed [ 270.019449][T18703] FAT-fs (loop4): Directory bread(block 69) failed [ 270.034842][T18703] FAT-fs (loop4): Directory bread(block 70) failed [ 270.048755][T18703] FAT-fs (loop4): Directory bread(block 71) failed [ 270.063147][T18703] FAT-fs (loop4): Directory bread(block 72) failed [ 270.078344][T18703] FAT-fs (loop4): Directory bread(block 73) failed [ 270.142757][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.178320][T18712] bio_check_eod: 30 callbacks suppressed [ 270.178344][T18712] syz.4.4242: attempt to access beyond end of device [ 270.178344][T18712] loop4: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 270.210482][T18712] syz.4.4242: attempt to access beyond end of device [ 270.210482][T18712] loop4: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 270.225821][T18712] syz.4.4242: attempt to access beyond end of device [ 270.225821][T18712] loop4: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 270.245033][T18712] syz.4.4242: attempt to access beyond end of device [ 270.245033][T18712] loop4: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 270.261128][T18712] syz.4.4242: attempt to access beyond end of device [ 270.261128][T18712] loop4: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 270.281950][T18712] syz.4.4242: attempt to access beyond end of device [ 270.281950][T18712] loop4: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 270.299002][T18712] syz.4.4242: attempt to access beyond end of device [ 270.299002][T18712] loop4: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 270.317940][T18712] syz.4.4242: attempt to access beyond end of device [ 270.317940][T18712] loop4: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 270.333497][T18712] syz.4.4242: attempt to access beyond end of device [ 270.333497][T18712] loop4: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 270.353495][T18712] syz.4.4242: attempt to access beyond end of device [ 270.353495][T18712] loop4: rw=1, sector=2472, nr_sectors = 32 limit=256 [ 272.962676][T18718] loop9: detected capacity change from 0 to 1024 [ 272.991403][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4247'. [ 273.013525][T18718] netlink: 'syz.9.4247': attribute type 5 has an invalid length. [ 273.030937][T18718] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4247'. [ 273.045868][T18724] loop3: detected capacity change from 0 to 764 [ 273.065343][T18718] geneve2: entered promiscuous mode [ 273.085858][T18718] geneve2: entered allmulticast mode [ 273.359797][T18724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.369191][T18724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.473816][T18748] loop9: detected capacity change from 0 to 1024 [ 273.482733][T18748] EXT4-fs: Ignoring removed bh option [ 273.515606][T18748] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.640662][T18758] loop4: detected capacity change from 0 to 128 [ 273.648091][T18758] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 273.677923][T18758] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.690579][T18758] ext2 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.708817][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 273.708834][ T28] audit: type=1400 audit(1780654418.374:2217): avc: denied { write } for pid=18757 comm="syz.4.4261" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.739034][ T28] audit: type=1400 audit(1780654418.374:2218): avc: denied { write } for pid=18757 comm="syz.4.4261" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 273.765646][T18142] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.776316][ T28] audit: type=1400 audit(1780654418.384:2219): avc: denied { write } for pid=18757 comm="syz.4.4261" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.815917][ T28] audit: type=1400 audit(1780654418.384:2220): avc: denied { write } for pid=18757 comm="syz.4.4261" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.838179][ T28] audit: type=1400 audit(1780654418.384:2221): avc: denied { write } for pid=18757 comm="syz.4.4261" name="file7" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 273.860391][ T28] audit: type=1400 audit(1780654418.384:2222): avc: denied { write } for pid=18757 comm="syz.4.4261" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.887672][ T28] audit: type=1400 audit(1780654418.384:2223): avc: denied { write } for pid=18757 comm="syz.4.4261" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 273.922540][ T28] audit: type=1400 audit(1780654418.384:2224): avc: denied { rename } for pid=18757 comm="syz.4.4261" name="file0" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 274.316041][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.447726][ T28] audit: type=1400 audit(1780654419.114:2225): avc: denied { create } for pid=18802 comm="syz.1.4278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 274.505004][ T28] audit: type=1400 audit(1780654419.134:2226): avc: denied { write } for pid=18802 comm="syz.1.4278" path="socket:[53049]" dev="sockfs" ino=53049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 274.588306][T18812] loop9: detected capacity change from 0 to 512 [ 274.609447][T18812] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 274.623381][T18817] xt_hashlimit: size too large, truncated to 1048576 [ 274.687805][T18812] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.4281: bad orphan inode 13 [ 274.717768][T18812] loop9: lost filesystem error report for type 5 error -117 [ 274.717918][T18812] ext4_test_bit(bit=12, block=18) = 1 [ 274.725289][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 274.725305][ C0] EXT4-fs (loop9): last error at time 1780654419: ext4_orphan_get:1423 [ 274.779803][T18812] is_bad_inode(inode)=0 [ 274.787416][T18812] NEXT_ORPHAN(inode)=0 [ 274.791569][T18812] max_ino=32 [ 274.795058][T18812] i_nlink=1 [ 274.798735][T18812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 274.818287][T18812] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 275.017772][T18842] loop9: detected capacity change from 0 to 256 [ 275.420058][T18873] loop3: detected capacity change from 0 to 512 [ 275.463055][T18873] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.4308: corrupted in-inode xattr: invalid ea_ino [ 275.506006][T18873] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 275.506924][T18873] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4308: couldn't read orphan inode 15 (err -117) [ 275.516145][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 275.516175][ C1] EXT4-fs (loop3): initial error at time 1780654420: ext4_iget_extra_inode:5128: inode 15 [ 275.516200][ C1] EXT4-fs (loop3): last error at time 1780654420: ext4_iget_extra_inode:5128: inode 15 [ 275.554671][T18873] loop3: lost filesystem error report for type 5 error -117 [ 275.566338][T18873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.664806][ T8417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.733785][T18898] only policy match revision 0 supported [ 275.733800][T18898] unable to load match [ 276.078368][T18924] loop5: detected capacity change from 0 to 512 [ 276.109486][T18924] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.4327: corrupted in-inode xattr: invalid ea_ino [ 276.135080][T18924] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 276.138991][T18924] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.4327: couldn't read orphan inode 15 (err -117) [ 276.148290][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 276.148313][ C1] EXT4-fs (loop5): initial error at time 1780654420: ext4_iget_extra_inode:5128: inode 15 [ 276.148353][ C1] EXT4-fs (loop5): last error at time 1780654420: ext4_iget_extra_inode:5128: inode 15 [ 276.208338][T18924] loop5: lost filesystem error report for type 5 error -117 [ 276.238731][T18924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.316779][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.626848][T18959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.644905][T18959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.815131][T18969] loop4: detected capacity change from 0 to 1024 [ 276.823169][T18969] EXT4-fs: Ignoring removed bh option [ 276.857664][T18969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.942674][T18142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.040824][T18979] loop4: detected capacity change from 0 to 512 [ 277.081347][T18979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.225340][T18142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.927352][T19021] loop4: detected capacity change from 0 to 512 [ 277.948140][T19021] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.4368: corrupted inode contents [ 277.968414][T19021] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 277.968740][T19021] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.4368: mark_inode_dirty error [ 277.977962][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 277.977985][ C0] EXT4-fs (loop4): initial error at time 1780654422: ext4_do_update_inode:5690: inode 16 [ 277.978025][ C0] EXT4-fs (loop4): last error at time 1780654422: ext4_do_update_inode:5690: inode 16 [ 278.015485][T19021] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.015717][T19021] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.4368: corrupted inode contents [ 278.037068][T19021] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.038247][T19021] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.4368: mark_inode_dirty error [ 278.058863][T19021] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.059399][T19021] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.4368: corrupted inode contents [ 278.080610][T19021] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.080901][T19021] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 278.099037][T19021] loop4: lost filesystem error report for type 5 error -117 [ 278.099268][T19021] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.4368: corrupted inode contents [ 278.118909][T19021] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.119089][T19021] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.4368: mark_inode_dirty error [ 278.140026][T19021] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.140267][T19021] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 278.158634][T19021] loop4: lost filesystem error report for type 5 error -117 [ 278.164317][T19021] EXT4-fs (loop4): 1 truncate cleaned up [ 278.181490][T19030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.191455][T19021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.204611][T19030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.206269][ T68] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 278.213280][T19021] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.247014][T19032] loop2: detected capacity change from 0 to 7 [ 278.383316][T18142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.635267][T19058] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.645749][T19058] bridge_slave_0 (unregistering): left allmulticast mode [ 278.652902][T19058] bridge_slave_0 (unregistering): left promiscuous mode [ 278.660045][T19058] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.735438][T19063] loop4: detected capacity change from 0 to 512 [ 278.755480][T19063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.770894][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 278.770913][ T28] audit: type=1400 audit(1780654423.434:2240): avc: denied { write } for pid=19062 comm="syz.4.4387" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.813009][T18142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.824215][T19069] netlink: 'syz.5.4388': attribute type 1 has an invalid length. [ 278.891663][ T28] audit: type=1400 audit(1780654423.554:2241): avc: denied { write } for pid=19067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.904202][T19069] bond3: entered promiscuous mode [ 278.924150][T19069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.937453][T19080] bridge0: port 1(vlan2) entered blocking state [ 278.948071][T19080] bridge0: port 1(vlan2) entered disabled state [ 278.955505][T19080] vlan2: entered allmulticast mode [ 278.960686][T19080] geneve0: entered allmulticast mode [ 278.967128][T19080] vlan2: entered promiscuous mode [ 278.972392][T19080] geneve0: entered promiscuous mode [ 278.995907][ T28] audit: type=1400 audit(1780654423.664:2242): avc: denied { write } for pid=19086 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.022643][T19069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.052437][T19069] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 279.077877][T19069] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 279.093634][T19069] bond3: (slave vti0): making interface the new active one [ 279.101027][T19069] vti0: entered promiscuous mode [ 279.108143][T19069] bond3: (slave vti0): Enslaving as an active interface with an up link [ 279.120800][T19092] gre1: entered promiscuous mode [ 279.203641][T19100] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 279.304533][T19115] loop5: detected capacity change from 0 to 512 [ 279.326404][ T28] audit: type=1400 audit(1780654423.994:2243): avc: denied { write } for pid=19101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.372417][T19115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.390396][ T28] audit: type=1400 audit(1780654424.054:2244): avc: denied { write } for pid=19112 comm="syz.5.4399" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 279.450560][ T28] audit: type=1400 audit(1780654424.114:2245): avc: denied { write } for pid=19125 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.474907][T10941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.539973][T19134] bridge0: port 5(vlan2) entered blocking state [ 279.547569][T19134] bridge0: port 5(vlan2) entered disabled state [ 279.555061][T19134] vlan2: entered allmulticast mode [ 279.560428][T19134] geneve0: entered allmulticast mode [ 279.566933][T19134] vlan2: entered promiscuous mode [ 279.572251][T19134] geneve0: entered promiscuous mode [ 279.630902][T19143] sctp: [Deprecated]: syz.9.4408 (pid 19143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.630902][T19143] Use struct sctp_sack_info instead [ 279.704472][T19149] gre1: entered promiscuous mode [ 280.278472][ T28] audit: type=1400 audit(1780654424.944:2246): avc: denied { write } for pid=19169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.363917][ T28] audit: type=1400 audit(1780654425.034:2247): avc: denied { write } for pid=19182 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.406762][T19185] bridge0: left allmulticast mode [ 280.434102][T19185] bridge0: port 3(vlan2) entered blocking state [ 280.453354][T19185] bridge0: port 3(vlan2) entered disabled state [ 280.471857][T19185] vlan2: entered allmulticast mode [ 280.481936][T19185] geneve0: entered allmulticast mode [ 280.496129][T19185] vlan2: entered promiscuous mode [ 280.507812][T19185] geneve0: entered promiscuous mode [ 280.699889][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4428'. [ 280.864278][T19224] bridge0: port 3(vlan2) entered blocking state [ 280.870667][T19224] bridge0: port 3(vlan2) entered disabled state [ 280.888326][T19224] vlan2: entered allmulticast mode [ 280.895356][T19224] geneve0: entered allmulticast mode [ 280.903645][ T28] audit: type=1400 audit(1780654425.574:2248): avc: denied { write } for pid=19210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.928895][T19224] vlan2: entered promiscuous mode [ 280.936137][T19224] geneve0: entered promiscuous mode [ 280.977207][ T28] audit: type=1400 audit(1780654425.634:2249): avc: denied { write } for pid=19233 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.779381][T19251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4440'. [ 281.849513][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4443'. [ 282.156061][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4449'. [ 282.165324][T19267] netlink: 'syz.4.4449': attribute type 30 has an invalid length. [ 282.173311][T19267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'. [ 282.987658][T16736] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 283.000329][T16736] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 283.047462][T19303] fido_id[19303]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 283.082833][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4463'. [ 283.304156][T19328] loop4: detected capacity change from 0 to 128 [ 283.310976][T19328] EXT4-fs: Ignoring removed orlov option [ 283.324234][T19328] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 283.335920][ T3295] udevd[3295]: incorrect ext4 checksum on /dev/loop4 [ 283.511665][T19343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4477'. [ 283.651035][T19196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.778086][T19354] syzkaller1: entered promiscuous mode [ 283.793608][T19354] syzkaller1: entered allmulticast mode [ 283.878220][ T28] audit: type=1400 audit(1780654428.544:2250): avc: denied { write } for pid=19359 comm="syz.9.4487" lport=46131 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 283.971316][T19372] loop3: detected capacity change from 0 to 164 [ 283.978849][T19372] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 283.988513][T19372] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 284.051288][T19378] loop3: detected capacity change from 0 to 128 [ 284.074021][T19378] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 284.110953][T19378] ext4 filesystem being mounted at /686/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.150173][ T28] audit: type=1400 audit(1780654428.814:2251): avc: denied { write } for pid=19377 comm="syz.3.4494" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.185775][T19378] EXT4-fs (loop3): shut down requested (1) [ 284.244290][ T8417] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.275166][T19393] loop9: detected capacity change from 0 to 512 [ 284.296188][T19393] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 284.336860][T19393] EXT4-fs (loop9): 1 truncate cleaned up [ 284.356675][T19393] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.382611][T19399] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 284.409034][ T28] audit: type=1400 audit(1780654429.074:2252): avc: denied { write } for pid=19392 comm="syz.9.4499" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.720946][T19403] loop3: detected capacity change from 0 to 256 [ 284.739424][T19403] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.817046][T19406] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 284.826726][T19406] FAT-fs (loop3): Filesystem has been set read-only [ 284.833774][T19406] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 284.841984][T19406] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 284.850158][T19406] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 284.858302][T19406] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 284.866669][T19406] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 284.875977][T19406] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 285.020408][ T30] ================================================================== [ 285.028545][ T30] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 285.038026][ T30] [ 285.040359][ T30] write to 0xffff888123c324d0 of 2 bytes by task 19400 on cpu 0: [ 285.048085][ T30] copy_folio_from_iter_atomic+0x743/0x10b0 [ 285.053994][ T30] generic_perform_write+0x2c1/0x490 [ 285.059314][ T30] ext4_buffered_write_iter+0x304/0x4c0 [ 285.064878][ T30] ext4_file_write_iter+0x380/0xfa0 [ 285.070118][ T30] iter_file_splice_write+0x6c4/0xa80 [ 285.075533][ T30] direct_splice_actor+0x156/0x2a0 [ 285.081093][ T30] splice_direct_to_actor+0x311/0x670 [ 285.086522][ T30] do_splice_direct+0x119/0x1a0 [ 285.091438][ T30] do_sendfile+0x382/0x650 [ 285.095865][ T30] __x64_sys_sendfile64+0x105/0x150 [ 285.101070][ T30] x64_sys_call+0x2dc4/0x3020 [ 285.105764][ T30] do_syscall_64+0x12c/0x3b0 [ 285.110379][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.116318][ T30] [ 285.118644][ T30] read to 0xffff888123c32400 of 1024 bytes by task 30 on cpu 1: [ 285.126274][ T30] copy_folio_from_iter_atomic+0x743/0x10b0 [ 285.132188][ T30] generic_perform_write+0x2c1/0x490 [ 285.137504][ T30] shmem_file_write_iter+0xc5/0xf0 [ 285.142635][ T30] lo_rw_aio+0x67d/0x730 [ 285.146887][ T30] loop_process_work+0x56c/0xac0 [ 285.151848][ T30] loop_workfn+0x31/0x40 [ 285.156140][ T30] process_scheduled_works+0x4f0/0x9c0 [ 285.161644][ T30] worker_thread+0x58a/0x780 [ 285.166247][ T30] kthread+0x22a/0x280 [ 285.170322][ T30] ret_from_fork+0x146/0x330 [ 285.174929][ T30] ret_from_fork_asm+0x1a/0x30 [ 285.179744][ T30] [ 285.182079][ T30] Reported by Kernel Concurrency Sanitizer on: [ 285.188259][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 285.199164][ T30] Tainted: [W]=WARN [ 285.202975][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.213041][ T30] Workqueue: loop9 loop_workfn [ 285.217842][ T30] ================================================================== [ 285.337860][T14004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.