last executing test programs: 3m23.073518898s ago: executing program 1 (id=102): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0xc0080, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 3m23.015080308s ago: executing program 1 (id=104): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88441) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.919852048s ago: executing program 1 (id=107): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0xf8, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001040)=""/4118, 0x1016) 3m22.885995747s ago: executing program 1 (id=110): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008002, &(0x7f0000000d40), 0x1, 0x5de, &(0x7f0000000d80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) sendfile(r1, r0, 0x0, 0x7f1) 3m22.733546977s ago: executing program 1 (id=118): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) iopl(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @private}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xd80c}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x73}]}, 0x34}}, 0x0) syz_read_part_table(0x4063, &(0x7f0000004100)="$eJzsz0EuxAAUBuB/RkuJBYmdRDQSSxkXEJfoBeYKrGXoGVzAciKxdSRHsKsgRmpGZNgQ37d4bf/3XvIafoW1peLkfny7nWS/TjuaJFWSYsHY6DjlRjXMZpLz+XYz/cnNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAX3L6SV5+tTjeTXtRvH9frdwVySA7SX3Um7ze6rr+7jBppt+7FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4l9afy+pcfPZSH7vF3dwcpD3ZG6ZK6sO3sOxmK30PH4Om609dzt4Gr4/Jcj8BAPDEDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwUAAP//JREYEg==") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000040), 0x9acd473c29efa073) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000280)=""/251) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3], 0x20) 3m22.319247896s ago: executing program 1 (id=135): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x0) 3m22.292320146s ago: executing program 32 (id=135): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x0) 15.402586001s ago: executing program 0 (id=6380): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 15.341431301s ago: executing program 0 (id=6383): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$tipc(r0, &(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10) close(r0) 15.340684771s ago: executing program 0 (id=6386): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f0000000240)='%+9llu \x00'}, 0x20) 15.301988001s ago: executing program 0 (id=6387): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x180000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000740)=0x499, 0x4) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 15.04190271s ago: executing program 0 (id=6392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) close(r2) 14.749283279s ago: executing program 0 (id=6405): dup(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x38, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_getsetattr(r1, &(0x7f0000000700)={0x800, 0x10, 0x1}, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0) 14.749142699s ago: executing program 33 (id=6405): dup(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x38, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_getsetattr(r1, &(0x7f0000000700)={0x800, 0x10, 0x1}, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0) 6.836621656s ago: executing program 3 (id=6616): socket$netlink(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x5) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x14) fcntl$notify(r3, 0x402, 0x8000003d) r5 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18090000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000950000000000005467df65d8b4f3b75f8489b4e9edcb79171a923958318517231da4ed7fc36f4bbd04f4ab805e0ebab400ef4faada6eadd2e0e28a2a49ee40a0ed923b76462a99d15f1535b6f05e200bae516023a0e008c1ae7c2e4ab9ac6dbccc4ae4cbbb2d64a711ca11f3f36524d16272f08368e6f70748393e0e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x790d9647692e5cb5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x178}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fcd38ed45ad0bd6a7b723aed20ffffff0018000000000000269a252e72dab2537fc791996f1ae65baaff298500000041000000d500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2111, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x26) close(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0), 0x106}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES16=r7, @ANYRES16=r5], 0x50) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r11, 0x0, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff441f49655a63e6500000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 5.969772614s ago: executing program 3 (id=6648): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 5.698444514s ago: executing program 3 (id=6655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 5.638046464s ago: executing program 3 (id=6658): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@barrier}, {@data_err_ignore}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x10, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c6681000000000000000100"}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000}]) 5.158178832s ago: executing program 3 (id=6665): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) accept4(r0, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 5.134414263s ago: executing program 3 (id=6667): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x4}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x787f, 0x0, 0x1, 0x286}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.078837562s ago: executing program 34 (id=6667): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0x4}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x787f, 0x0, 0x1, 0x286}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.896474527s ago: executing program 6 (id=6702): socket$netlink(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x5) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x14) fcntl$notify(r3, 0x402, 0x8000003d) r5 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18090000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000950000000000005467df65d8b4f3b75f8489b4e9edcb79171a923958318517231da4ed7fc36f4bbd04f4ab805e0ebab400ef4faada6eadd2e0e28a2a49ee40a0ed923b76462a99d15f1535b6f05e200bae516023a0e008c1ae7c2e4ab9ac6dbccc4ae4cbbb2d64a711ca11f3f36524d16272f08368e6f70748393e0e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x790d9647692e5cb5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x178}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fcd38ed45ad0bd6a7b723aed20ffffff0018000000000000269a252e72dab2537fc791996f1ae65baaff298500000041000000d500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2111, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x26) close(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0), 0x106}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES16=r7, @ANYRES16=r5], 0x50) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r11, 0x0, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff441f49655a63e6500000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.342510806s ago: executing program 2 (id=6719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b04, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYRES8=r4]) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) 2.248572576s ago: executing program 2 (id=6721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ff00000000000000000000008500000041800000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 2.064916856s ago: executing program 2 (id=6726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r2, 0xffffffffffffffff, 0x0) 2.033716235s ago: executing program 6 (id=6728): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x1f8) 1.960772575s ago: executing program 2 (id=6729): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) getpgrp(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.960268925s ago: executing program 6 (id=6731): syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000600)={[{@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nobarrier}, {}]}, 0x0, 0x786, &(0x7f0000000a00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket(0x11, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) io_uring_setup(0x4a77, &(0x7f00000001c0)={0x0, 0x8000f8e0, 0x10000, 0x3, 0x17d}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 1.739855565s ago: executing program 2 (id=6737): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x2810448, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0x2, 0x269, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000000240)="d68351d7e557b1dd8f774761af20a5407ea2fccfb13280d6", 0x18) sendfile(r2, r0, 0x0, 0x40001) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 1.070562523s ago: executing program 6 (id=6746): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 992.739833ms ago: executing program 4 (id=6747): syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 937.017223ms ago: executing program 4 (id=6748): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 852.165213ms ago: executing program 4 (id=6749): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc090, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x6d}}}}}]}}]}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) syz_usb_connect$uac1(0x1, 0xf7, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x7f, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x9}, [@mixer_unit={0x9, 0x24, 0x4, 0x2, 0x1, "e9657c5d"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x4}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x6, 0x9, "a43f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x882c, 0x0, "b6e52f70eec2"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x3, 0x1, "25b4bed4884d704d4b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0x7, 0x9, "1a", "6b88b4"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xc, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x10, '2'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb, 0x5, 0x9, {0x7, 0x25, 0x1, 0x81, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0xe8, 0x2, "9185e8a2b7"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x2, 0x3}, @as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x5}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x4, 0x7, "c1"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x2, 0x1, "9c435f9e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x6, 0x7, {0x7, 0x25, 0x1, 0x0, 0x80, 0x9}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x10, 0x2, 0x0, 0xd6, 0x8}, 0xc, &(0x7f0000000500)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x5, 0x7}]}, 0x7, [{0xf0, &(0x7f0000000540)=@string={0xf0, 0x3, "638e767bcfb9fb480cdd9300d77b3dd4f80a716af8eb74f22bc3cfdbdbab4b689fb4f0670704cf6e091bc2135f1af32b8e4e537cee8a2cad149efdad839cdbf03abcad10771c8a530e5f383c3adaaddf7fe250d0dcd51c1de7ccfdaa2192650744808c99bd94a523a9c0acfcb9515161f16baddadc72514b42ce82de4af934a827c3bf1bccce6cdbe786c05e9c2c9b36bb39ffe8c1bcc1a2e685334c22120080f3eb8d5086b9a245d5a5f1a1f6d6a2e72ba098b08d9df448031cd4a613270faa62b2dd447db4b3f97aa3112c1af6bf0bc1c00ad511acfe6ee66853b44ef8cdf061d67ba18c3d4bce40bfcea92e9a"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44e}}, {0xf6, &(0x7f00000006c0)=@string={0xf6, 0x3, "e7ae569dcf142cd396ff7edea7872cb2a48db0d983efb3da0a5f6e6786d8bfc325c7e32eaa4a4f6a6730455ad8964733ffc89c04f57b00ae4312d0b9cef843234298e3f95699980e4598e8ac6102d452dfc5249bca2744a275db92476b14e89d85d31d257f425d69ddd381181972ac79783e5ea8411e9991dda958b9fe6266ae09d995f371c65f0c53eced467c93b2b18bc8ff7c56307abbb0427a78953ba0883dbe29d9a4e1dce2f45f4b2d9b3e18386b9b8085c677a11d5258915f5d337bbf449fe4616ec9e4ca7e2759a5b8dce65f30932bcfe210822ffea91021b8175a1c23607630838757a9bfb0f45fc9960fcc2906efb8"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x404}}, {0x97, &(0x7f0000000840)=@string={0x97, 0x3, "8d2538588d74c7e5902b980e42ada567b729fcf26ab748601a20cecb94be83ef4721fecf3be42743aca5fa3dcc71f98b0f1b22a7d90dead6121a27560c765b3922e34468976d5935a57ac5b1b3e57f9e253d06e7fe8bb1038b59f1b56d3ba06b83238cae526e931ee651bd969045871d6ab65095a1a25cf3c4be14192d2fc6b045ed079af86b6c191956923d572d12e2fbf20c20f2"}}]}) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x0, 0x0, 0x2000000}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) 761.333942ms ago: executing program 2 (id=6752): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2f7, &(0x7f0000000c00)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 710.953002ms ago: executing program 5 (id=6754): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "00000600", "8657e22727751fe4"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 666.258682ms ago: executing program 5 (id=6756): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x4) 453.880352ms ago: executing program 7 (id=6758): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x8, 0x6, 0x41ff, 0x5, 0x2, 0xffff, 0x686, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x3, 0xa, 0x5, 0x9, 0xfffffffa}}, &(0x7f00000003c0)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r1, 0x4}, &(0x7f0000000440)=0x8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='xprtrdma_err_chunk\x00', r4, 0x0, 0x8}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) move_pages(0x0, 0x7, &(0x7f00000014c0)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil], &(0x7f0000001500)=[0x1, 0x70e3, 0x2eb0, 0x7, 0x8, 0x1, 0x6, 0x7], &(0x7f0000001540), 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x06\xe8\x1a@\x00Cx\x8a\x82d') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200000000000a047) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000001680)={0x10000, 0x6, 0x29, 0xfffffffc, 0x61, "6d5181e7b343dcac29be27e2fe339723022a5c", 0x100, 0xffffffa1}) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000001640)={0x1, 0x10, 0xfa00, {&(0x7f0000001600)}}, 0x18) io_pgetevents(0x0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_sync_fs\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) 424.271171ms ago: executing program 6 (id=6759): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 379.105112ms ago: executing program 7 (id=6760): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, 'p'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x40808c4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 361.752261ms ago: executing program 7 (id=6761): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff74, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 354.012521ms ago: executing program 6 (id=6762): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x2810448, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0x2, 0x269, &(0x7f0000000780)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000000240)="d68351d7e557b1dd8f774761af20a5407ea2fccfb13280d6", 0x18) sendfile(r2, r0, 0x0, 0x40001) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 340.585551ms ago: executing program 7 (id=6763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x6044}, 0x6) 265.392531ms ago: executing program 7 (id=6764): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[], 0xfe44, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wg2\x00', 0x100}) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) 203.191821ms ago: executing program 7 (id=6765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) memfd_secret(0x80000) socket(0x28, 0x5, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) 179.820521ms ago: executing program 4 (id=6766): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x401}, 0x18) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 111.826381ms ago: executing program 4 (id=6767): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'netpci0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x8004) 44.328851ms ago: executing program 5 (id=6768): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}, {&(0x7f0000000040)='\\', 0x1}], 0x2) 44.096611ms ago: executing program 5 (id=6769): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) 43.648611ms ago: executing program 4 (id=6770): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x45}, 0x0) 517.46µs ago: executing program 5 (id=6771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='hrtimer_init\x00', r2}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 0s ago: executing program 5 (id=6772): socket$netlink(0x10, 0x3, 0x6) openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18090000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000950000000000005467df65d8b4f3b75f8489b4e9edcb79171a923958318517231da4ed7fc36f4bbd04f4ab805e0ebab400ef4faada6eadd2e0e28a2a49ee40a0ed923b76462a99d15f1535b6f05e200bae516023a0e008c1ae7c2e4ab9ac6dbccc4ae4cbbb2d64a711ca11f3f36524d16272f08368e6f70748393e0e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x790d9647692e5cb5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fcd38ed45ad0bd6a7b723aed20ffffff0018000000000000269a252e72dab2537fc791996f1ae65baaff298500000041000000d500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) kernel console output (not intermixed with test programs): 84] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 192.947489][T15484] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 21 with error 28 [ 192.960028][T15484] EXT4-fs (loop5): This should not happen!! Data will be lost [ 192.960028][T15484] [ 192.969802][T15484] EXT4-fs (loop5): Total free blocks count 0 [ 192.975823][T15484] EXT4-fs (loop5): Free/Dirty block details [ 192.981796][T15484] EXT4-fs (loop5): free_blocks=66060288 [ 192.987414][T15484] EXT4-fs (loop5): dirty_blocks=48 [ 192.992553][T15484] EXT4-fs (loop5): Block reservation details [ 192.998584][T15484] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 193.021897][ T1087] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 193.034331][ T1087] EXT4-fs (loop5): This should not happen!! Data will be lost [ 193.034331][ T1087] [ 193.067434][T15490] loop3: detected capacity change from 0 to 2048 [ 193.074350][T15490] msdos: Unknown parameter ' ]CŚ?‚I+őí荼rĐÂ~7Ůh¬8µ·F©SëŕNtiL’~vg [ 193.074350][T15490] ţwBq”ô»¦ŞZ˝xG˙U_$.lqXĂ!?‘®ŢŁç´`8·+Q˘ńoľAĐë“xoK~ô‹cĐĂÔüµŻe„§±ĄśľM®%ž÷ěč˙˙˙˙˙˙˙˙0xffffffffffffffff' [ 193.123057][T15496] loop5: detected capacity change from 0 to 512 [ 193.131309][T15494] loop3: detected capacity change from 0 to 512 [ 193.138669][T15494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.151661][T15494] EXT4-fs (loop3): orphan cleanup on readonly fs [ 193.176597][T15494] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5157: bg 0: block 248: padding at end of block bitmap is not set [ 193.192540][T15494] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.5157: Failed to acquire dquot type 1 [ 193.205408][T15494] EXT4-fs (loop3): 1 truncate cleaned up [ 193.331908][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5171'. [ 193.354193][T15530] loop3: detected capacity change from 0 to 512 [ 193.354867][T15526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.361166][T15530] EXT4-fs: Ignoring removed i_version option [ 193.368094][T15526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.375788][T15530] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.411190][T15527] loop5: detected capacity change from 0 to 8192 [ 193.415363][T15530] EXT4-fs (loop3): 1 truncate cleaned up [ 193.426104][T15526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.433685][T15526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.472148][T15535] loop4: detected capacity change from 0 to 512 [ 193.480906][T15535] EXT4-fs: Ignoring removed i_version option [ 193.486989][T15535] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.494181][T15535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.509565][T15535] EXT4-fs (loop4): 1 truncate cleaned up [ 193.530935][T15537] loop5: detected capacity change from 0 to 512 [ 193.549445][T15537] ext4 filesystem being mounted at /1005/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.632436][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5183'. [ 193.674344][T15562] netlink: 'syz.0.5187': attribute type 3 has an invalid length. [ 193.682222][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5187'. [ 193.714985][T15565] loop0: detected capacity change from 0 to 1024 [ 193.731009][T15565] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.5188: Allocating blocks 385-513 which overlap fs metadata [ 193.749773][T15565] EXT4-fs (loop0): pa ffff8881006f65b0: logic 16, phys. 129, len 24 [ 193.757886][T15565] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 193.769272][T15565] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 193.781773][T15565] EXT4-fs (loop0): This should not happen!! Data will be lost [ 193.781773][T15565] [ 193.791461][T15565] EXT4-fs (loop0): Total free blocks count 0 [ 193.797531][T15565] EXT4-fs (loop0): Free/Dirty block details [ 193.803448][T15565] EXT4-fs (loop0): free_blocks=128 [ 193.808598][T15565] EXT4-fs (loop0): dirty_blocks=0 [ 193.813649][T15565] EXT4-fs (loop0): Block reservation details [ 193.819853][T15565] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 193.899364][T15574] random: crng reseeded on system resumption [ 193.964034][T15583] loop5: detected capacity change from 0 to 512 [ 193.965473][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 193.965490][ T29] audit: type=1326 audit(1740900054.094:43521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.0.5191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09a66ad169 code=0x0 [ 194.010566][T15583] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 194.021608][T15583] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 194.035935][ T29] audit: type=1400 audit(1740900054.154:43522): avc: denied { relabelfrom } for pid=15586 comm="syz.0.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 194.036689][T15583] EXT4-fs (loop5): mount failed [ 194.056428][ T29] audit: type=1400 audit(1740900054.154:43523): avc: denied { relabelto } for pid=15586 comm="syz.0.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 194.151556][ T29] audit: type=1400 audit(1740900054.284:43524): avc: denied { sys_module } for pid=15588 comm="syz.0.5197" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 194.177544][T15594] loop2: detected capacity change from 0 to 512 [ 194.186180][T15594] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.203331][T15597] loop0: detected capacity change from 0 to 512 [ 194.211541][T15597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.222673][T15602] loop5: detected capacity change from 0 to 512 [ 194.222953][T15594] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.5199: corrupted in-inode xattr: e_name out of bounds [ 194.229653][T15602] EXT4-fs: Ignoring removed nobh option [ 194.244120][T15597] EXT4-fs (loop0): orphan cleanup on readonly fs [ 194.255199][T15594] EXT4-fs (loop2): Remounting filesystem read-only [ 194.255840][T15597] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5200: bg 0: block 248: padding at end of block bitmap is not set [ 194.261975][T15594] EXT4-fs (loop2): 1 truncate cleaned up [ 194.277775][T15597] Quota error (device loop0): write_blk: dquota write failed [ 194.282332][T15594] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 194.289302][T15597] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 194.305718][T15597] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.5200: Failed to acquire dquot type 1 [ 194.308760][T15602] ext4 filesystem being mounted at /1017/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.319090][T15597] EXT4-fs (loop0): 1 truncate cleaned up [ 194.379275][ T29] audit: type=1326 audit(1740900054.514:43525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15608 comm="syz.2.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 194.403025][ T29] audit: type=1326 audit(1740900054.514:43526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15608 comm="syz.2.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 194.426712][ T29] audit: type=1326 audit(1740900054.514:43527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15608 comm="syz.2.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 194.484040][T15616] loop5: detected capacity change from 0 to 512 [ 194.490764][T15616] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 194.532319][T15621] random: crng reseeded on system resumption [ 194.616194][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5214'. [ 194.648226][T15636] dummy0: entered promiscuous mode [ 194.648903][T15633] loop4: detected capacity change from 0 to 164 [ 194.659728][T15635] dummy0: left promiscuous mode [ 194.671453][T15633] iso9660: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 194.694488][T15638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5217'. [ 194.758377][T15648] loop0: detected capacity change from 0 to 128 [ 194.784577][T15651] loop2: detected capacity change from 0 to 128 [ 194.809960][T15647] loop3: detected capacity change from 0 to 2048 [ 194.867687][T15647] Alternate GPT is invalid, using primary GPT. [ 194.874214][T15647] loop3: p1 p2 p3 [ 194.920748][T15672] random: crng reseeded on system resumption [ 194.961587][T15675] loop0: detected capacity change from 0 to 1024 [ 194.977486][T15675] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 195.000409][T15683] loop3: detected capacity change from 0 to 512 [ 195.008068][T15675] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 195.017237][T15683] EXT4-fs: Ignoring removed bh option [ 195.020488][T15684] loop4: detected capacity change from 0 to 2048 [ 195.033620][T15675] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #32: comm syz.0.5234: iget: special inode unallocated [ 195.046651][T15675] EXT4-fs (loop0): no journal found [ 195.052085][T15675] EXT4-fs (loop0): can't get journal size [ 195.056937][T15683] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 195.062204][T15675] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.5234: iget: special inode unallocated [ 195.080890][T15684] Alternate GPT is invalid, using primary GPT. [ 195.087248][T15684] loop4: p1 p2 p3 [ 195.088043][T15675] EXT4-fs (loop0): failed to initialize system zone (-117) [ 195.100660][T15675] EXT4-fs (loop0): mount failed [ 195.101500][T15683] EXT4-fs (loop3): 1 truncate cleaned up [ 195.159703][T15696] netlink: 'syz.4.5241': attribute type 4 has an invalid length. [ 195.167627][T15696] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5241'. [ 195.192688][ T3303] ------------[ cut here ]------------ [ 195.198262][ T3303] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 195.198572][ T3303] WARNING: CPU: 0 PID: 3303 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0 [ 195.218181][ T3303] Modules linked in: [ 195.222218][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 195.225674][T15705] loop2: detected capacity change from 0 to 128 [ 195.233137][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.249720][ T3303] RIP: 0010:inode_set_cached_link+0xc4/0xd0 [ 195.255691][ T3303] Code: ff 48 c7 c7 1e f5 b2 86 e8 59 61 c4 ff c6 05 80 71 0b 05 01 90 48 c7 c7 1f 33 1b 86 4c 89 f6 89 ea 44 89 f9 e8 dd b5 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 195.275454][ T3303] RSP: 0018:ffffc9000159fac8 EFLAGS: 00010246 [ 195.281628][ T3303] RAX: 9120e1e9244fdc00 RBX: ffff8881066972a8 RCX: ffff8881046d4200 [ 195.289641][ T3303] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 195.297736][ T3303] RBP: 0000000000000027 R08: ffffffff81343af7 R09: 0000000000000000 [ 195.305833][ T3303] R10: 0001ffffffffffff R11: ffff8881046d4200 R12: ffff8881066972a8 [ 195.313866][ T3303] R13: ffff8881066972d0 R14: ffff888106697180 R15: 000000000000001d [ 195.321909][ T3303] FS: 0000555586b77500(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 195.331025][ T3303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.337717][ T3303] CR2: 00007ffe80e71be8 CR3: 0000000104094000 CR4: 00000000003506f0 [ 195.345730][ T3303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.353766][ T3303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 195.361963][ T3303] Call Trace: [ 195.365277][ T3303] [ 195.368256][ T3303] ? __warn+0x141/0x350 [ 195.372424][ T3303] ? report_bug+0x315/0x420 [ 195.377056][ T3303] ? inode_set_cached_link+0xc4/0xd0 [ 195.382411][ T3303] ? handle_bug+0x60/0x90 [ 195.386988][ T3303] ? exc_invalid_op+0x1a/0x50 [ 195.391730][ T3303] ? asm_exc_invalid_op+0x1a/0x20 [ 195.396786][ T3303] ? __warn_printk+0x167/0x1b0 [ 195.401699][ T3303] ? inode_set_cached_link+0xc4/0xd0 [ 195.407133][ T3303] ? inode_set_cached_link+0xc3/0xd0 [ 195.412526][ T3303] __ext4_iget+0x1bb5/0x1e20 [ 195.417177][ T3303] ext4_lookup+0x15b/0x390 [ 195.421608][ T3303] __lookup_slow+0x18a/0x250 [ 195.426305][ T3303] lookup_slow+0x3c/0x60 [ 195.430582][ T3303] walk_component+0x1f5/0x230 [ 195.435290][ T3303] ? path_lookupat+0xfd/0x2b0 [ 195.440071][ T3303] path_lookupat+0x10a/0x2b0 [ 195.444711][ T3303] filename_lookup+0x150/0x340 [ 195.449607][ T3303] user_path_at+0x3c/0x120 [ 195.454033][ T3303] __x64_sys_umount+0x85/0xe0 [ 195.458743][ T3303] x64_sys_call+0x20cd/0x2dc0 [ 195.463494][ T3303] do_syscall_64+0xc9/0x1c0 [ 195.468148][ T3303] ? clear_bhb_loop+0x55/0xb0 [ 195.472848][ T3303] ? clear_bhb_loop+0x55/0xb0 [ 195.477573][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.483639][ T3303] RIP: 0033:0x7f0661c2e497 [ 195.488099][ T3303] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 195.507761][ T3303] RSP: 002b:00007ffe80e72398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 195.516179][ T3303] RAX: ffffffffffffffda RBX: 00007f0661cae08c RCX: 00007f0661c2e497 [ 195.524304][ T3303] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe80e72450 [ 195.532416][ T3303] RBP: 00007ffe80e72450 R08: 0000000000000000 R09: 0000000000000000 [ 195.540447][ T3303] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe80e73540 [ 195.548670][ T3303] R13: 00007f0661cae08c R14: 000000000002fa77 R15: 00007ffe80e75700 [ 195.556696][ T3303] [ 195.559950][ T3303] ---[ end trace 0000000000000000 ]--- [ 195.606682][T15714] hub 9-0:1.0: USB hub found [ 195.614731][T15714] hub 9-0:1.0: 8 ports detected [ 195.619955][T15717] loop0: detected capacity change from 0 to 1024 [ 195.639141][T15717] EXT4-fs: Ignoring removed nobh option [ 195.644854][T15717] EXT4-fs: Ignoring removed bh option [ 195.751551][ T35] kernel write not supported for file /2294/attr/exec (pid: 35 comm: kworker/1:1) [ 195.764209][T15744] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.779649][T15744] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 195.867024][T15764] loop0: detected capacity change from 0 to 512 [ 195.876963][T15764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.900640][T15769] random: crng reseeded on system resumption [ 195.946258][T15764] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5274: invalid block [ 195.958929][T15764] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5274: invalid indirect mapped block 4294967295 (level 1) [ 195.973788][T15764] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5274: invalid indirect mapped block 4294967295 (level 1) [ 195.988989][T15776] loop3: detected capacity change from 0 to 1024 [ 195.989243][T15764] EXT4-fs (loop0): 2 truncates cleaned up [ 195.995797][T15776] EXT4-fs: Ignoring removed nobh option [ 196.005245][T15764] EXT4-fs (loop0): shut down requested (0) [ 196.006892][T15776] EXT4-fs: Ignoring removed bh option [ 196.067340][T15786] loop0: detected capacity change from 0 to 512 [ 196.078160][T15786] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 196.083258][T15776] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.5279: Allocating blocks 497-513 which overlap fs metadata [ 196.103488][T15776] EXT4-fs (loop3): Remounting filesystem read-only [ 196.112051][T15786] EXT4-fs (loop0): 1 truncate cleaned up [ 196.129673][T15775] EXT4-fs (loop3): pa ffff8881006f6620: logic 256, phys. 385, len 8 [ 196.151180][T15786] netlink: 'syz.0.5280': attribute type 6 has an invalid length. [ 196.208901][T15797] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.234290][T15800] infiniband syz0: set active [ 196.239091][T15800] infiniband syz0: added bond0 [ 196.245650][T15802] serio: Serial port ptm0 [ 196.245669][T15804] loop0: detected capacity change from 0 to 764 [ 196.255735][T15800] RDS/IB: syz0: added [ 196.258542][T15806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.260900][T15800] smc: adding ib device syz0 with port count 1 [ 196.270869][T15806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.280508][T15800] smc: ib device syz0 port 1 has pnetid [ 196.303179][T15804] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 196.324301][T15810] program syz.3.5292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.337131][T15810] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 196.369021][T15814] loop0: detected capacity change from 0 to 256 [ 196.407992][T15814] FAT-fs (loop0): Directory bread(block 64) failed [ 196.414710][T15814] FAT-fs (loop0): Directory bread(block 65) failed [ 196.422053][T15814] FAT-fs (loop0): Directory bread(block 66) failed [ 196.429234][T15814] FAT-fs (loop0): Directory bread(block 67) failed [ 196.435928][T15814] FAT-fs (loop0): Directory bread(block 68) failed [ 196.443397][T15814] FAT-fs (loop0): Directory bread(block 69) failed [ 196.451684][T15814] FAT-fs (loop0): Directory bread(block 70) failed [ 196.459408][T15814] FAT-fs (loop0): Directory bread(block 71) failed [ 196.471153][T15814] FAT-fs (loop0): Directory bread(block 72) failed [ 196.477830][T15814] FAT-fs (loop0): Directory bread(block 73) failed [ 196.478103][T15806] smc: removing ib device syz0 [ 196.503953][T15819] loop3: detected capacity change from 0 to 512 [ 196.511973][T15819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.528581][T15819] EXT4-fs (loop3): 1 truncate cleaned up [ 196.772166][T15846] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5309'. [ 196.796367][T15848] loop5: detected capacity change from 0 to 128 [ 196.824324][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.832084][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.839729][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.847439][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 196.854790][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 196.870447][T15852] xt_CT: No such helper "pptp" [ 196.933757][T15860] netlink: 'syz.0.5315': attribute type 4 has an invalid length. [ 197.081042][T15874] sd 0:0:1:0: device reset [ 197.186042][T15888] loop4: detected capacity change from 0 to 1024 [ 197.208312][T15888] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 197.225885][T15888] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 197.238488][T15888] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.238488][T15888] [ 197.248203][T15888] EXT4-fs (loop4): Total free blocks count 0 [ 197.254191][T15888] EXT4-fs (loop4): Free/Dirty block details [ 197.260107][T15888] EXT4-fs (loop4): free_blocks=20480 [ 197.265394][T15888] EXT4-fs (loop4): dirty_blocks=64 [ 197.270533][T15888] EXT4-fs (loop4): Block reservation details [ 197.276543][T15888] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 197.283995][T15894] ALSA: seq fatal error: cannot create timer (-22) [ 197.308821][ T1087] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 197.321148][ T1087] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.321148][ T1087] [ 197.398673][T15910] loop4: detected capacity change from 0 to 512 [ 197.406011][T15910] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.417339][T15911] loop0: detected capacity change from 0 to 128 [ 197.424300][T15911] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.437206][T15910] EXT4-fs (loop4): 1 truncate cleaned up [ 197.450377][ T1087] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.506111][T15924] program syz.0.5345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.548385][T15931] __nla_validate_parse: 1 callbacks suppressed [ 197.548402][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5348'. [ 197.622767][T15913] loop2: detected capacity change from 0 to 1024 [ 197.629940][T15913] EXT4-fs: Ignoring removed oldalloc option [ 197.635930][T15913] EXT4-fs: Ignoring removed bh option [ 197.713785][T15952] program syz.3.5357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.747970][T15959] SELinux: security policydb version 18 (MLS) not backwards compatible [ 197.756582][T15959] SELinux: failed to load policy [ 197.877052][T15973] loop5: detected capacity change from 0 to 164 [ 197.884171][T15973] ISOFS: unable to read i-node block [ 197.889694][T15973] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 197.899023][T15973] isofs_fill_super: get root inode failed [ 198.001801][T15984] loop5: detected capacity change from 0 to 2048 [ 198.020987][T15984] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 198.244086][T15999] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 198.252703][T15999] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 198.285686][T16001] loop5: detected capacity change from 0 to 164 [ 198.293823][T16001] Unable to read rock-ridge attributes [ 198.301220][T16001] Unable to read rock-ridge attributes [ 198.321791][T16005] loop2: detected capacity change from 0 to 128 [ 198.373696][T16011] loop5: detected capacity change from 0 to 2048 [ 198.381563][T16011] EXT4-fs (loop5): stripe (216) is not aligned with cluster size (16), stripe is disabled [ 198.394808][T16015] netlink: 'syz.2.5385': attribute type 3 has an invalid length. [ 198.402828][T16015] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.5385'. [ 198.432509][T16019] loop2: detected capacity change from 0 to 164 [ 198.466004][T16024] loop5: detected capacity change from 0 to 164 [ 198.472431][T16025] loop0: detected capacity change from 0 to 1024 [ 198.472895][T16025] EXT4-fs: Ignoring removed nobh option [ 198.485486][T16025] EXT4-fs: Ignoring removed bh option [ 198.488258][T16027] IPv6: sit1: Disabled Multicast RS [ 198.503886][T16024] rock: directory entry would overflow storage [ 198.510162][T16024] rock: sig=0x4f50, size=4, remaining=3 [ 198.515889][T16024] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 198.553938][T16025] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.5388: Allocating blocks 497-513 which overlap fs metadata [ 198.570548][T16035] loop4: detected capacity change from 0 to 1024 [ 198.578203][T16025] EXT4-fs (loop0): pa ffff8881006f6620: logic 256, phys. 385, len 8 [ 198.586419][T16025] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 198.620881][T16040] loop2: detected capacity change from 0 to 512 [ 198.628737][T16040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.658342][T16040] EXT4-fs (loop2): 1 truncate cleaned up [ 198.771065][T16063] loop4: detected capacity change from 0 to 512 [ 198.785253][T16067] loop5: detected capacity change from 0 to 1024 [ 198.793605][T16063] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.805195][T16067] EXT4-fs: Ignoring removed bh option [ 198.812075][T16063] EXT4-fs (loop4): 1 truncate cleaned up [ 198.853362][T16067] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.5406: Allocating blocks 497-513 which overlap fs metadata [ 198.884829][T16067] EXT4-fs (loop5): pa ffff8881065f3230: logic 256, phys. 385, len 8 [ 198.892931][T16067] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 198.973637][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 198.973656][ T29] audit: type=1326 audit(1740900059.104:43889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 199.026448][ T29] audit: type=1326 audit(1740900059.104:43890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 199.050155][ T29] audit: type=1326 audit(1740900059.114:43891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 199.073712][ T29] audit: type=1326 audit(1740900059.114:43892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 199.097401][ T29] audit: type=1326 audit(1740900059.114:43893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16082 comm="syz.2.5411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 199.105638][T16085] loop5: detected capacity change from 0 to 512 [ 199.128979][ T29] audit: type=1326 audit(1740900059.234:43894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.5.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5fe5d169 code=0x7ffc0000 [ 199.152784][ T29] audit: type=1326 audit(1740900059.234:43895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.5.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b5fe5d169 code=0x7ffc0000 [ 199.176489][ T29] audit: type=1326 audit(1740900059.234:43896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.5.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5b5fe5d169 code=0x7ffc0000 [ 199.200235][ T29] audit: type=1326 audit(1740900059.234:43897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.5.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5b5fe5d1a3 code=0x7ffc0000 [ 199.223680][ T29] audit: type=1326 audit(1740900059.234:43898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.5.5412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5b5fe5bc1f code=0x7ffc0000 [ 199.269656][T16088] ALSA: seq fatal error: cannot create timer (-22) [ 199.283972][T16085] ext4 filesystem being mounted at /1061/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.355036][T16108] ref_ctr_offset mismatch. inode: 0x15e2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 199.520683][T16127] bond1: entered promiscuous mode [ 199.525945][T16127] bond1: entered allmulticast mode [ 199.532273][T16127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.542426][T16127] bond1 (unregistering): Released all slaves [ 199.627630][T16134] loop5: detected capacity change from 0 to 164 [ 199.996300][T16170] loop5: detected capacity change from 0 to 128 [ 200.022416][T16170] FAT-fs (loop5): Directory bread(block 32) failed [ 200.031698][T16170] FAT-fs (loop5): Directory bread(block 33) failed [ 200.039713][T16170] FAT-fs (loop5): Directory bread(block 34) failed [ 200.048831][T16170] FAT-fs (loop5): Directory bread(block 35) failed [ 200.056217][T16170] FAT-fs (loop5): Directory bread(block 36) failed [ 200.062974][T16170] FAT-fs (loop5): Directory bread(block 37) failed [ 200.070171][T16170] FAT-fs (loop5): Directory bread(block 38) failed [ 200.076933][T16170] FAT-fs (loop5): Directory bread(block 39) failed [ 200.083678][T16170] FAT-fs (loop5): Directory bread(block 40) failed [ 200.090537][T16170] FAT-fs (loop5): Directory bread(block 41) failed [ 200.135559][T16170] syz.5.5449: attempt to access beyond end of device [ 200.135559][T16170] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 200.150040][T16170] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 200.158226][T16170] FAT-fs (loop5): Filesystem has been set read-only [ 200.384672][T16212] bond1: entered promiscuous mode [ 200.389799][T16212] bond1: entered allmulticast mode [ 200.395141][T16212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.406438][T16212] bond1 (unregistering): Released all slaves [ 200.544003][T16223] loop5: detected capacity change from 0 to 1024 [ 200.552373][T16223] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 200.563636][T16223] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 200.572160][T16223] EXT4-fs (loop5): orphan cleanup on readonly fs [ 200.579172][T16223] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 200.588896][T16223] EXT4-fs (loop5): Remounting filesystem read-only [ 200.595767][T16223] EXT4-fs (loop5): 1 orphan inode deleted [ 200.602276][T16223] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 200.699232][T16230] loop5: detected capacity change from 0 to 256 [ 200.706992][T16230] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.710327][T16219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.726148][T16219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.901901][T16237] loop3: detected capacity change from 0 to 512 [ 200.929289][T16237] ext4 filesystem being mounted at /1080/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.944550][T16237] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 200.977228][T16244] loop5: detected capacity change from 0 to 1764 [ 201.029442][T16253] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 201.059199][T16259] loop5: detected capacity change from 0 to 128 [ 201.188399][T16277] loop3: detected capacity change from 0 to 512 [ 201.198415][T16277] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.5499: casefold flag without casefold feature [ 201.211373][T16277] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.5499: couldn't read orphan inode 15 (err -117) [ 201.306768][T16294] SELinux: Context Ü is not valid (left unmapped). [ 201.352007][T16300] loop3: detected capacity change from 0 to 512 [ 201.377987][T16300] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 201.386197][T16300] EXT4-fs (loop3): orphan cleanup on readonly fs [ 201.394383][T16300] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 201.414384][T16300] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 201.423371][T16300] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5510: bg 0: block 40: padding at end of block bitmap is not set [ 201.438362][T16300] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 201.448614][T16300] EXT4-fs (loop3): 1 truncate cleaned up [ 201.489397][T16315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5516'. [ 201.677912][T16331] loop3: detected capacity change from 0 to 2048 [ 201.699792][T16331] EXT4-fs mount: 88 callbacks suppressed [ 201.699814][T16331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.721111][T16331] ext4 filesystem being mounted at /1093/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.754476][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.867127][T16358] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5535'. [ 201.876394][T16333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.891807][T16333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.903001][T16360] loop5: detected capacity change from 0 to 1024 [ 201.909922][T16360] EXT4-fs: Ignoring removed orlov option [ 201.915661][T16360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.928726][T16360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.950089][T16362] usb usb6: usbfs: process 16362 (syz.3.5537) did not claim interface 0 before use [ 201.961369][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.043098][T16377] loop3: detected capacity change from 0 to 512 [ 202.058624][T16377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.071313][T16377] ext4 filesystem being mounted at /1102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.095747][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.148645][T16389] loop3: detected capacity change from 0 to 128 [ 202.330585][T16414] 9pnet_fd: Insufficient options for proto=fd [ 202.353396][T16416] loop3: detected capacity change from 0 to 512 [ 202.360628][T16416] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.372467][T16416] EXT4-fs (loop3): 1 truncate cleaned up [ 202.378691][T16416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.394883][T16416] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 202.426230][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.442471][T16419] loop3: detected capacity change from 0 to 164 [ 202.451686][T16419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5562'. [ 202.460824][T16419] unsupported nla_type 19547 [ 202.597763][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 202.606699][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 202.615785][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 202.648345][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 202.657324][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 202.672121][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 202.712993][T16457] usb usb3: usbfs: interface 0 claimed by hub while 'syz.3.5578' sets config #0 [ 202.717430][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 202.731111][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 202.744362][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 202.831612][T16475] SELinux: security_context_str_to_sid () failed with errno=-22 [ 202.936513][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5595'. [ 202.950328][T16495] IPVS: Error joining to the multicast group [ 203.008800][T16502] loop4: detected capacity change from 0 to 523 [ 203.016490][T16502] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 203.030427][T16502] EXT4-fs (loop4): orphan cleanup on readonly fs [ 203.048007][T16502] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5601: Block bitmap for bg 0 marked uninitialized [ 203.067334][T16502] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 203.081224][T16502] EXT4-fs (loop4): 1 orphan inode deleted [ 203.091200][T16502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 203.149272][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.337975][T16543] loop0: detected capacity change from 0 to 8192 [ 203.338888][T16552] bond2: entered promiscuous mode [ 203.349804][T16552] bond2: entered allmulticast mode [ 203.356234][T16552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.368502][T16552] bond2 (unregistering): Released all slaves [ 203.411121][T16563] unsupported nlmsg_type 40 [ 203.571360][T16589] can0: slcan on ttyS3. [ 203.636938][T16588] can0 (unregistered): slcan off ttyS3. [ 203.795839][T16621] bridge0: entered promiscuous mode [ 203.802937][T16621] bridge0: left promiscuous mode [ 203.822961][T16623] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 203.841982][T16627] loop0: detected capacity change from 0 to 1024 [ 203.854224][T16627] EXT4-fs: Ignoring removed orlov option [ 203.859995][T16627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.893941][T16627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.938195][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.995371][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 203.995389][ T29] audit: type=1400 audit(1740900064.124:44277): avc: denied { mount } for pid=16648 comm="syz.3.5665" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 204.105636][ T29] audit: type=1326 audit(1740900064.234:44278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.5669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b59a2d169 code=0x0 [ 204.459832][ T29] audit: type=1400 audit(1740900064.594:44279): avc: denied { create } for pid=16680 comm="syz.4.5680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.483942][ T29] audit: type=1400 audit(1740900064.614:44280): avc: denied { bind } for pid=16680 comm="syz.4.5680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.517198][ T29] audit: type=1400 audit(1740900064.654:44281): avc: denied { read } for pid=16684 comm="syz.3.5682" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 204.541728][ T29] audit: type=1400 audit(1740900064.654:44282): avc: denied { open } for pid=16684 comm="syz.3.5682" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 204.606917][ T29] audit: type=1400 audit(1740900064.734:44283): avc: denied { ioctl } for pid=16684 comm="syz.3.5682" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 204.671762][T16693] loop4: detected capacity change from 0 to 1024 [ 204.720565][T16693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.755907][ T29] audit: type=1326 audit(1740900064.884:44284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16702 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661c2d169 code=0x7ffc0000 [ 204.779596][ T29] audit: type=1326 audit(1740900064.884:44285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16702 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661c2d169 code=0x7ffc0000 [ 204.816855][ T29] audit: type=1326 audit(1740900064.944:44286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16702 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0661c2d169 code=0x7ffc0000 [ 204.861378][T16707] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 204.881295][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.933872][T16709] loop5: detected capacity change from 0 to 2048 [ 205.042649][T16709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.068271][T16709] ext4 filesystem being mounted at /1136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.141905][T16735] loop3: detected capacity change from 0 to 1024 [ 205.156542][T16735] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.190231][T16735] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 205.205932][T16735] EXT4-fs (loop3): orphan cleanup on readonly fs [ 205.220654][T16735] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 205.230381][T16735] EXT4-fs (loop3): Remounting filesystem read-only [ 205.238083][T16735] EXT4-fs (loop3): 1 orphan inode deleted [ 205.244392][T16735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 205.256615][T16735] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 205.264741][T16735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.345233][ T165] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 205.360320][ T165] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 205.373000][ T165] EXT4-fs (loop5): This should not happen!! Data will be lost [ 205.373000][ T165] [ 205.429766][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 205.442714][ T36] EXT4-fs (loop5): This should not happen!! Data will be lost [ 205.442714][ T36] [ 205.452434][ T36] EXT4-fs (loop5): Total free blocks count 0 [ 205.458528][ T36] EXT4-fs (loop5): Free/Dirty block details [ 205.464506][ T36] EXT4-fs (loop5): free_blocks=0 [ 205.469480][ T36] EXT4-fs (loop5): dirty_blocks=2048 [ 205.474811][ T36] EXT4-fs (loop5): Block reservation details [ 205.620327][T16759] loop5: detected capacity change from 0 to 2048 [ 205.627366][T16759] msdos: Unknown parameter 'Ý' [ 205.950201][T16772] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 206.013962][T16782] netem: change failed [ 206.040674][T16788] loop4: detected capacity change from 0 to 1024 [ 206.059513][T16788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.071984][T16788] ext4 filesystem being mounted at /1166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.095375][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.109140][T16792] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.116741][T16792] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 206.170328][T16802] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 206.196006][T16806] sd 0:0:1:0: device reset [ 206.239546][T16815] ipvlan2: entered promiscuous mode [ 206.244811][T16815] ipvlan2: entered allmulticast mode [ 206.250302][T16815] bridge0: entered allmulticast mode [ 206.257082][T16815] bridge0: port 3(ipvlan2) entered blocking state [ 206.263651][T16815] bridge0: port 3(ipvlan2) entered disabled state [ 207.336408][T16912] xt_hashlimit: max too large, truncated to 1048576 [ 207.353344][T16916] loop2: detected capacity change from 0 to 512 [ 207.836353][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.843942][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.851455][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.858930][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.866347][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.873843][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.881463][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.889095][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.896555][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.904001][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.911456][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.919134][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.926754][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.934196][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.941703][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.949420][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.956949][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 207.964749][ T35] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 208.249723][T16962] __nla_validate_parse: 11 callbacks suppressed [ 208.249746][T16962] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5805'. [ 208.305262][T16962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.343848][T16962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.368101][T16962] bond0 (unregistering): Released all slaves [ 208.564306][T17002] netlink: 'syz.3.5824': attribute type 21 has an invalid length. [ 208.572287][T17002] netlink: 'syz.3.5824': attribute type 20 has an invalid length. [ 208.580420][T17002] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.584213][T17004] IPv4: Oversized IP packet from 127.202.26.0 [ 208.629822][T17011] SELinux: policydb version 0 does not match my version range 15-34 [ 208.640676][T17011] SELinux: failed to load policy [ 208.654794][T17012] bond0: entered promiscuous mode [ 208.659958][T17012] bond0: entered allmulticast mode [ 208.667236][T17012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.680112][T17017] 9pnet_fd: Insufficient options for proto=fd [ 208.688406][T17012] bond0 (unregistering): Released all slaves [ 208.947932][T17044] netlink: 'syz.5.5843': attribute type 1 has an invalid length. [ 208.955709][T17044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5843'. [ 209.008981][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 209.008998][ T29] audit: type=1326 audit(1740900069.144:44707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17038 comm="syz.2.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 209.038914][ T29] audit: type=1326 audit(1740900069.144:44708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17038 comm="syz.2.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 209.094000][ T29] audit: type=1400 audit(1740900069.224:44709): avc: denied { getopt } for pid=17051 comm="syz.5.5847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 209.120768][T17054] sd 0:0:1:0: device reset [ 209.141647][T17056] bond1: entered promiscuous mode [ 209.147041][T17056] bond1: entered allmulticast mode [ 209.152594][T17056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.163660][T17056] bond1 (unregistering): Released all slaves [ 209.279043][T17072] loop4: detected capacity change from 0 to 1024 [ 209.286220][T17072] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.301399][T17072] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 209.322599][T17072] EXT4-fs (loop4): orphan cleanup on readonly fs [ 209.341675][T17072] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 209.352092][T17072] EXT4-fs (loop4): Remounting filesystem read-only [ 209.359550][T17072] Quota error (device loop4): write_blk: dquota write failed [ 209.367104][T17072] Quota error (device loop4): write_blk: dquota write failed [ 209.374530][T17072] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 209.384665][T17072] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 209.393749][T17072] EXT4-fs (loop4): 1 orphan inode deleted [ 209.402998][T17072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 209.418441][T17072] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 209.427002][T17072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.452086][T17091] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 209.486997][ T29] audit: type=1400 audit(1740900069.614:44710): avc: denied { setopt } for pid=17088 comm="syz.5.5858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.564361][T17102] loop5: detected capacity change from 0 to 512 [ 209.599696][T17102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.613834][T17102] ext4 filesystem being mounted at /1168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.691464][T17102] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.782918][T17118] loop5: detected capacity change from 0 to 4096 [ 209.809309][T17118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.848362][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.907065][ T29] audit: type=1400 audit(1740900070.034:44711): avc: denied { write } for pid=17126 comm="syz.0.5874" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 209.948844][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5877'. [ 209.957819][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5877'. [ 209.973418][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5877'. [ 209.985765][ T29] audit: type=1400 audit(1740900070.124:44712): avc: denied { setopt } for pid=17136 comm="syz.0.5878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.043338][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5877'. [ 210.052314][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5877'. [ 210.062474][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5877'. [ 210.094093][T17150] netlink: 'syz.4.5883': attribute type 3 has an invalid length. [ 210.131040][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5877'. [ 210.140168][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5877'. [ 210.163200][T17155] loop3: detected capacity change from 0 to 164 [ 210.327733][T17181] loop5: detected capacity change from 0 to 128 [ 210.352106][T17183] loop3: detected capacity change from 0 to 256 [ 210.593226][T17207] loop4: detected capacity change from 0 to 512 [ 210.615193][T17207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 210.639691][T17207] EXT4-fs (loop4): 1 truncate cleaned up [ 210.645874][T17207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.666041][T17215] netlink: 'syz.3.5912': attribute type 3 has an invalid length. [ 210.699408][T17221] tipc: Failed to remove unknown binding: 66,1,1/2886997007:115458608/115458610 [ 210.708603][T17221] tipc: Failed to remove unknown binding: 66,1,1/2886997007:115458608/115458610 [ 210.720613][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.748695][T17225] loop4: detected capacity change from 0 to 2048 [ 210.777548][T17225] loop4: p1 < > p4 [ 210.782344][T17225] loop4: p4 size 8388608 extends beyond EOD, truncated [ 210.959769][T17259] IPv6: Can't replace route, no match found [ 211.029052][T17267] loop4: detected capacity change from 0 to 1024 [ 211.054293][T17267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.156636][T17288] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 211.167763][T17287] IPVS: stopping master sync thread 17288 ... [ 211.243352][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.320851][T17305] loop2: detected capacity change from 0 to 4096 [ 211.325529][T17311] 9pnet: p9_errstr2errno: server reported unknown error ő1 g;-‡~  [ 211.338417][T17305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.369393][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.388131][T17296] random: crng reseeded on system resumption [ 211.467953][T17332] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 211.626957][T17350] hub 2-0:1.0: USB hub found [ 211.650540][T17350] hub 2-0:1.0: 8 ports detected [ 211.781773][T17367] loop3: detected capacity change from 0 to 2048 [ 211.839813][T17375] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 211.848779][T17367] loop3: p1 < > p4 [ 211.853722][T17367] loop3: p4 size 8388608 extends beyond EOD, truncated [ 211.893925][T17377] loop2: detected capacity change from 0 to 2048 [ 211.902750][T17377] EXT4-fs: Ignoring removed bh option [ 211.962810][T17377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.010222][T17377] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.5984: corrupted in-inode xattr: e_name out of bounds [ 212.088612][T17409] loop4: detected capacity change from 0 to 1024 [ 212.096713][T17409] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 212.104815][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.229864][T17426] ref_ctr_offset mismatch. inode: 0x1879 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 212.301126][T17437] loop5: detected capacity change from 0 to 512 [ 212.330768][T17437] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 212.332679][T17440] loop4: detected capacity change from 0 to 2048 [ 212.351528][T17440] ext4: Unknown parameter 'noacl' [ 212.367523][T17437] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm +}[@: Failed to acquire dquot type 1 [ 212.368937][T17440] loop4: detected capacity change from 0 to 2048 [ 212.386713][T17437] EXT4-fs (loop5): 1 truncate cleaned up [ 212.399010][T17440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.417745][T17437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.433243][T17437] ext4 filesystem being mounted at /1192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.499503][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.518543][ T50] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 212.556454][T17458] loop3: detected capacity change from 0 to 512 [ 212.567908][T17458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.582105][T17464] loop2: detected capacity change from 0 to 256 [ 212.589631][T17464] msdos: Bad value for 'gid' [ 212.594276][T17464] msdos: Bad value for 'gid' [ 212.601492][T17458] EXT4-fs (loop3): 1 truncate cleaned up [ 212.607825][T17458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.628013][T17458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.667504][T17470] can0: slcan on ttyS3. [ 212.697099][T17469] can0 (unregistered): slcan off ttyS3. [ 213.224196][T17518] netlink: 'syz.5.6048': attribute type 10 has an invalid length. [ 213.232799][T17518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.242395][T17518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.252552][T17518] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 213.316825][T17524] loop5: detected capacity change from 0 to 512 [ 213.323839][T17524] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.357195][T17524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 213.378908][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.388179][T17524] ext4 filesystem being mounted at /1207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.421789][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 213.478574][T17541] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 213.488684][T17541] SELinux: failed to load policy [ 213.498538][T17543] loop4: detected capacity change from 0 to 128 [ 213.824934][T17593] loop3: detected capacity change from 0 to 128 [ 213.887449][T17600] loop5: detected capacity change from 0 to 512 [ 213.895079][T17600] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 213.916284][T17600] EXT4-fs (loop5): 1 truncate cleaned up [ 213.926664][T17600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.940571][T17600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.994667][T17609] loop3: detected capacity change from 0 to 512 [ 214.002703][T17609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.014085][T17609] EXT4-fs (loop3): 1 truncate cleaned up [ 214.022329][T17609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.039439][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 214.039457][ T29] audit: type=1400 audit(1740900074.174:45224): avc: denied { create } for pid=17608 comm="syz.3.6088" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 214.089734][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.112068][T17614] netlink: 'syz.3.6089': attribute type 1 has an invalid length. [ 214.148894][T17619] loop3: detected capacity change from 0 to 1024 [ 214.159646][T17619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.176920][ T29] audit: type=1400 audit(1740900074.304:45225): avc: denied { execute } for pid=17617 comm="syz.3.6092" path="/1248/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.212698][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.278451][T17630] loop3: detected capacity change from 0 to 1024 [ 214.300021][T17630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.312263][T17629] loop4: detected capacity change from 0 to 8192 [ 214.326502][ T29] audit: type=1400 audit(1740900074.454:45226): avc: denied { append } for pid=17628 comm="syz.3.6096" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.387327][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.405458][ T29] audit: type=1326 audit(1740900074.534:45227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17635 comm="syz.0.6099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09a66ad169 code=0x0 [ 214.412728][T17639] loop5: detected capacity change from 0 to 512 [ 214.438971][ T29] audit: type=1400 audit(1740900074.564:45228): avc: denied { read } for pid=17638 comm="syz.3.6100" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.441980][T17639] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 214.462296][ T29] audit: type=1400 audit(1740900074.564:45229): avc: denied { open } for pid=17638 comm="syz.3.6100" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.473408][T17639] EXT4-fs (loop5): orphan cleanup on readonly fs [ 214.501260][T17639] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6101: bg 0: block 248: padding at end of block bitmap is not set [ 214.515808][T17639] Quota error (device loop5): write_blk: dquota write failed [ 214.520539][ T29] audit: type=1326 audit(1740900074.654:45230): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17644 comm="syz.4.6102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e8d3d169 code=0x7ffc0000 [ 214.523310][T17639] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 214.557232][T17639] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.6101: Failed to acquire dquot type 1 [ 214.563197][ T29] audit: type=1326 audit(1740900074.684:45231): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17644 comm="syz.4.6102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e8d3d169 code=0x7ffc0000 [ 214.570818][T17639] EXT4-fs (loop5): 1 truncate cleaned up [ 214.613431][T17639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.636712][T17649] loop4: detected capacity change from 0 to 2048 [ 214.657311][T17653] loop2: detected capacity change from 0 to 512 [ 214.664855][T17649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.677211][T17639] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 214.699008][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.709918][T17649] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 214.726368][T17649] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 214.738900][T17649] EXT4-fs (loop4): This should not happen!! Data will be lost [ 214.738900][T17649] [ 214.748681][T17649] EXT4-fs (loop4): Total free blocks count 0 [ 214.754885][T17649] EXT4-fs (loop4): Free/Dirty block details [ 214.760842][T17649] EXT4-fs (loop4): free_blocks=2415919104 [ 214.766594][T17649] EXT4-fs (loop4): dirty_blocks=32 [ 214.771779][T17649] EXT4-fs (loop4): Block reservation details [ 214.777856][T17649] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 214.784405][T17658] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 214.924260][T17671] loop4: detected capacity change from 0 to 512 [ 214.931398][T17671] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 214.942547][T17671] EXT4-fs (loop4): orphan cleanup on readonly fs [ 214.949238][T17671] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.6112: Block bitmap for bg 0 marked uninitialized [ 214.962720][T17671] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 214.971836][T17671] EXT4-fs (loop4): 1 orphan inode deleted [ 214.978039][T17671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 215.001609][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.043873][T17678] loop4: detected capacity change from 0 to 1024 [ 215.051633][T17678] EXT4-fs: Ignoring removed nobh option [ 215.057321][T17678] EXT4-fs: Ignoring removed bh option [ 215.079590][T17678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.092686][T17678] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.111018][T17685] set match dimension is over the limit! [ 215.160506][T17689] loop5: detected capacity change from 0 to 8192 [ 215.169348][T17689] syz.5.6119: attempt to access beyond end of device [ 215.169348][T17689] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 215.182913][T17689] Buffer I/O error on dev loop5, logical block 57847, async page read [ 215.191410][T17689] syz.5.6119: attempt to access beyond end of device [ 215.191410][T17689] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 215.204927][T17689] Buffer I/O error on dev loop5, logical block 57847, async page read [ 215.213202][T17689] syz.5.6119: attempt to access beyond end of device [ 215.213202][T17689] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 215.226716][T17689] Buffer I/O error on dev loop5, logical block 57847, async page read [ 215.235766][T17689] syz.5.6119: attempt to access beyond end of device [ 215.235766][T17689] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 215.249458][T17689] Buffer I/O error on dev loop5, logical block 57847, async page read [ 215.350533][T17707] __nla_validate_parse: 10 callbacks suppressed [ 215.350553][T17707] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6127'. [ 215.371402][T17707] loop5: detected capacity change from 0 to 512 [ 215.378392][T17707] journal_path: Non-blockdev passed as './bus' [ 215.384604][T17707] EXT4-fs: error: could not find journal device path [ 215.428296][T17717] loop3: detected capacity change from 0 to 512 [ 215.434943][T17717] EXT4-fs: Ignoring removed oldalloc option [ 215.443186][T17717] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.6131: Parent and EA inode have the same ino 15 [ 215.456730][T17717] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.6131: Parent and EA inode have the same ino 15 [ 215.470139][T17717] EXT4-fs (loop3): 1 orphan inode deleted [ 215.476456][T17717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.502755][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.530922][T17727] loop3: detected capacity change from 0 to 2048 [ 215.559535][T17727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.571773][T17727] ext4 filesystem being mounted at /1257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.585733][T17727] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6134: bg 0: block 345: padding at end of block bitmap is not set [ 215.600390][T17727] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 215.634547][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.635789][T17735] loop2: detected capacity change from 0 to 128 [ 215.651463][T17735] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.681288][ T165] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.700580][T17743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17743 comm=syz.3.6142 [ 215.702677][T17742] loop2: detected capacity change from 0 to 512 [ 215.713184][T17743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17743 comm=syz.3.6142 [ 215.799849][T17755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.808551][T17755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.031586][T17778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.040463][T17778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.053475][T17780] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 216.287749][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6163'. [ 216.296926][T17793] smc: net device bond0 applied user defined pnetid S [ 216.305205][T17793] smc: net device bond0 erased user defined pnetid S [ 216.338643][T17800] loop5: detected capacity change from 0 to 1024 [ 216.348939][T17800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.381564][ T3793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.408016][T17811] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 216.415808][T17809] loop5: detected capacity change from 0 to 1024 [ 216.423264][T17809] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 216.433177][T17809] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 216.444470][T17809] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 216.456494][T17809] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #5: comm syz.5.6169: unexpected bad inode w/o EXT4_IGET_BAD [ 216.470085][T17809] EXT4-fs (loop5): no journal found [ 216.475406][T17809] EXT4-fs (loop5): can't get journal size [ 216.486652][T17809] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 216.654289][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'. [ 217.377380][T17902] loop3: detected capacity change from 0 to 1024 [ 217.430265][T17902] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 217.469473][T17902] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 217.480876][T17902] EXT4-fs (loop3): orphan cleanup on readonly fs [ 217.502197][T17902] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 217.528771][T17902] EXT4-fs (loop3): Remounting filesystem read-only [ 217.549941][T17902] EXT4-fs (loop3): 1 orphan inode deleted [ 217.567542][T17902] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 217.644637][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6201'. [ 217.733799][T17947] loop4: detected capacity change from 0 to 2048 [ 217.754036][T17945] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 217.775572][T17945] SELinux: failed to load policy [ 217.782022][T17947] ext4: Unknown parameter 'obj_user' [ 218.071274][T17971] futex_wake_op: syz.5.6215 tries to shift op by -1; fix this program [ 218.356858][T17992] xt_CT: No such helper "pptp" [ 218.467200][T18003] loop3: detected capacity change from 0 to 512 [ 218.474680][T18003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.501170][T18003] ext4 filesystem being mounted at /1273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.517533][T18010] program syz.5.6229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.647101][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6236'. [ 218.662858][T18025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6236'. [ 218.849338][T18041] netlink: 'syz.3.6243': attribute type 39 has an invalid length. [ 219.033976][T18044] loop4: detected capacity change from 0 to 512 [ 219.034523][T18044] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.053693][T18044] ext4 filesystem being mounted at /1274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.054688][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 219.054704][ T29] audit: type=1400 audit(1740900079.184:45589): avc: denied { read write } for pid=18043 comm="syz.4.6244" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.094698][ T29] audit: type=1400 audit(1740900079.204:45590): avc: denied { open } for pid=18043 comm="syz.4.6244" path="/1274/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.094811][ T29] audit: type=1400 audit(1740900079.204:45591): avc: denied { ioctl } for pid=18043 comm="syz.4.6244" path="/1274/file0/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.173796][T18050] syz_tun: entered allmulticast mode [ 219.179820][T18049] syz_tun: left allmulticast mode [ 219.203191][ T29] audit: type=1400 audit(1740900079.334:45592): avc: denied { create } for pid=18051 comm="syz.0.6247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.203228][ T29] audit: type=1400 audit(1740900079.334:45593): avc: denied { connect } for pid=18051 comm="syz.0.6247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.221803][T18057] loop3: detected capacity change from 0 to 256 [ 219.226909][ T29] audit: type=1400 audit(1740900079.334:45594): avc: denied { write } for pid=18051 comm="syz.0.6247" path="socket:[52033]" dev="sockfs" ino=52033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.296828][ T29] audit: type=1400 audit(1740900079.384:45595): avc: denied { append } for pid=18054 comm="syz.4.6248" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 219.296868][ T29] audit: type=1326 audit(1740900079.404:45596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.4.6248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6e8d3d169 code=0x0 [ 219.296900][ T29] audit: type=1400 audit(1740900079.404:45597): avc: denied { mount } for pid=18056 comm="syz.3.6249" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 219.344595][ T29] audit: type=1326 audit(1740900079.464:45598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18056 comm="syz.3.6249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661c2d169 code=0x7ffc0000 [ 219.435718][T18062] bridge0: port 4(vlan0) entered blocking state [ 219.435801][T18062] bridge0: port 4(vlan0) entered disabled state [ 219.437067][T18062] vlan0: entered allmulticast mode [ 219.454081][T18062] bridge0: entered allmulticast mode [ 219.459905][T18062] vlan0: left allmulticast mode [ 219.459927][T18062] bridge0: left allmulticast mode [ 219.468577][T18064] serio: Serial port ptm0 [ 219.582218][T18069] hub 6-0:1.0: USB hub found [ 219.582285][T18069] hub 6-0:1.0: 8 ports detected [ 219.809163][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6261'. [ 219.818975][T18087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6261'. [ 219.949349][T18085] random: crng reseeded on system resumption [ 220.272628][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.280176][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.287695][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.295708][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.303175][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.310732][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.318294][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.325787][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.333258][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.340701][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.348225][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.355634][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.363139][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.370706][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.378288][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.385813][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.393325][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.400823][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.408373][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.415856][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.421442][T18125] loop4: detected capacity change from 0 to 164 [ 220.423311][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.437043][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.444449][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.451947][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.459424][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.467008][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.474417][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.482779][ T3372] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 220.491390][ T3372] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 220.514431][T18127] loop4: detected capacity change from 0 to 512 [ 220.550116][T18127] ext4 filesystem being mounted at /1281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.616420][T18136] 9pnet_fd: Insufficient options for proto=fd [ 220.690380][T18140] loop4: detected capacity change from 0 to 4096 [ 220.842335][T18154] netlink: 'syz.4.6288': attribute type 3 has an invalid length. [ 220.862678][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6287'. [ 221.054365][T18173] vlan0: entered allmulticast mode [ 221.129930][T18162] random: crng reseeded on system resumption [ 221.353020][T18198] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 221.488865][T18208] loop5: detected capacity change from 0 to 8192 [ 221.577006][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6306'. [ 221.595315][T18216] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6306'. [ 221.648953][T18222] loop3: detected capacity change from 0 to 512 [ 221.655787][T18222] journal_path: Non-blockdev passed as './bus' [ 221.662112][T18222] EXT4-fs: error: could not find journal device path [ 221.830532][T18239] loop3: detected capacity change from 0 to 2048 [ 221.861346][T18239] ext4 filesystem being mounted at /1291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.901046][T18239] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6318: bg 0: block 345: padding at end of block bitmap is not set [ 221.916718][T18239] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 221.929326][T18239] EXT4-fs (loop3): This should not happen!! Data will be lost [ 221.929326][T18239] [ 222.048708][T18248] serio: Serial port ptm0 [ 222.054752][T18246] loop4: detected capacity change from 0 to 1024 [ 222.061711][T18246] EXT4-fs: Ignoring removed bh option [ 222.068041][T18246] EXT4-fs: inline encryption not supported [ 222.074327][T18246] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 222.101275][T18246] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 222.110976][T18246] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm gtp: lblock 2 mapped to illegal pblock 2 (length 1) [ 222.124622][T18246] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm gtp: lblock 0 mapped to illegal pblock 48 (length 1) [ 222.139544][T18246] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm gtp: Failed to acquire dquot type 0 [ 222.150581][T18246] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 222.162135][T18246] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #11: comm gtp: mark_inode_dirty error [ 222.173039][T18246] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 222.184125][T18246] EXT4-fs (loop4): 1 orphan inode deleted [ 222.191218][T17903] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:45: lblock 1 mapped to illegal pblock 1 (length 1) [ 222.207420][T17903] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:45: Failed to release dquot type 0 [ 222.220535][T18246] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm gtp: Invalid inode table block 1 in block_group 0 [ 222.234179][T18246] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 222.244715][T18246] EXT4-fs error (device loop4): ext4_quota_off:7194: inode #3: comm gtp: mark_inode_dirty error [ 222.388462][T18259] block device autoloading is deprecated and will be removed. [ 222.396020][T18259] syz.4.6326: attempt to access beyond end of device [ 222.396020][T18259] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 222.584451][T18292] loop5: detected capacity change from 0 to 128 [ 222.611004][T18292] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.643440][T18292] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.732952][T17892] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.888665][T18331] loop5: detected capacity change from 0 to 164 [ 223.000447][T18349] random: crng reseeded on system resumption [ 223.164597][T18361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6354'. [ 223.201763][T18365] ref_ctr_offset mismatch. inode: 0x1ab1 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 223.483352][T18398] loop0: detected capacity change from 0 to 512 [ 223.491881][T18398] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6372: bg 0: block 288: padding at end of block bitmap is not set [ 223.507829][T18398] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 223.517709][T18398] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.6372: attempt to clear invalid blocks 1024 len 1 [ 223.533005][T18398] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6372: invalid indirect mapped block 1819239214 (level 0) [ 223.547935][T18398] EXT4-fs (loop0): 1 truncate cleaned up [ 223.577194][T18407] loop4: detected capacity change from 0 to 128 [ 223.586331][T18407] ext4 filesystem being mounted at /1306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.663194][T18419] syz_tun: entered allmulticast mode [ 223.670167][T18415] syz_tun: left allmulticast mode [ 223.713090][T18426] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.6384'. [ 223.726235][T18426] netlink: zone id is out of range [ 223.731528][T18426] netlink: zone id is out of range [ 223.738004][T18426] netlink: zone id is out of range [ 223.745135][T18432] loop0: detected capacity change from 0 to 512 [ 223.751636][T18426] netlink: set zone limit has 8 unknown bytes [ 223.770057][T18432] EXT4-fs (loop0): orphan cleanup on readonly fs [ 223.784734][T18432] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6387: bg 0: block 248: padding at end of block bitmap is not set [ 223.802795][T18432] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.6387: Failed to acquire dquot type 1 [ 223.814946][T18432] EXT4-fs (loop0): 1 truncate cleaned up [ 223.876503][T18432] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 223.909346][T18432] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.6387: Failed to acquire dquot type 1 [ 223.953312][T18432] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 223.980135][T18445] loop5: detected capacity change from 0 to 164 [ 223.989253][T18445] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 224.012522][ T3301] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 224.029238][ T3301] EXT4-fs error (device loop0): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 224.184002][T18463] loop5: detected capacity change from 0 to 256 [ 224.218777][T18466] loop5: detected capacity change from 0 to 512 [ 224.230385][T18466] ext4 filesystem being mounted at /1290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.341294][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 224.341311][ T29] audit: type=1400 audit(1740900084.474:45832): avc: denied { mounton } for pid=18476 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 224.383993][ T29] audit: type=1400 audit(1740900084.514:45833): avc: denied { sys_module } for pid=18476 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 224.414271][T18482] program syz.4.6410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.432037][T18484] loop3: detected capacity change from 0 to 1024 [ 224.439272][T18484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.469186][T18484] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0002] [ 224.497964][T18484] System zones: 0-1, 3-12 [ 224.519869][ T29] audit: type=1400 audit(1740900084.644:45834): avc: denied { setattr } for pid=18479 comm="syz.3.6409" name="cgroup.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 224.764899][T18476] chnl_net:caif_netlink_parms(): no params data found [ 224.775183][ T29] audit: type=1400 audit(1740900084.904:45835): avc: denied { connect } for pid=18512 comm="syz.5.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.831469][ T29] audit: type=1400 audit(1740900084.934:45836): avc: denied { setopt } for pid=18516 comm="syz.2.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.870966][ T29] audit: type=1326 audit(1740900085.004:45837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.3.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661c2d169 code=0x7ffc0000 [ 224.899519][ T29] audit: type=1326 audit(1740900085.034:45838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.3.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661c2d169 code=0x7ffc0000 [ 224.923353][ T29] audit: type=1326 audit(1740900085.034:45839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.3.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0661c2d169 code=0x7ffc0000 [ 224.947016][ T29] audit: type=1326 audit(1740900085.034:45840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.3.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661c2d169 code=0x7ffc0000 [ 224.970756][ T29] audit: type=1326 audit(1740900085.034:45841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18521 comm="syz.3.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0661c2d169 code=0x7ffc0000 [ 225.026187][T18476] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.033343][T18476] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.042497][T18476] bridge_slave_0: entered allmulticast mode [ 225.049311][T18476] bridge_slave_0: entered promiscuous mode [ 225.056214][T18476] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.063469][T18476] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.074192][T18476] bridge_slave_1: entered allmulticast mode [ 225.080898][T18476] bridge_slave_1: entered promiscuous mode [ 225.105406][T18476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.117330][T18476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.142905][T18476] team0: Port device team_slave_0 added [ 225.152079][T18476] team0: Port device team_slave_1 added [ 225.176354][T18476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.183446][T18476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.209470][T18476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.227731][T18476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.234858][T18476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.260881][T18476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.312618][T18476] hsr_slave_0: entered promiscuous mode [ 225.319002][T18476] hsr_slave_1: entered promiscuous mode [ 225.325117][T18476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.336891][T18476] Cannot create hsr debugfs directory [ 225.442688][T18476] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 225.451964][T18476] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 225.462974][T18476] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 225.473906][T18476] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 225.548974][T18476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.561633][T18552] bond_slave_1: entered promiscuous mode [ 225.567982][T18552] bond_slave_1: left promiscuous mode [ 225.579060][T18476] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.593347][T17892] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.600445][T17892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.632020][T17892] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.639177][T17892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.694857][T18554] loop4: detected capacity change from 0 to 512 [ 225.732463][T18554] ext4 filesystem being mounted at /1328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.767294][T18476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.822984][T18572] syzkaller1: entered promiscuous mode [ 225.828632][T18572] syzkaller1: entered allmulticast mode [ 226.007898][T18476] veth0_vlan: entered promiscuous mode [ 226.025319][T18476] veth1_vlan: entered promiscuous mode [ 226.065742][T18476] veth0_macvtap: entered promiscuous mode [ 226.083181][T18476] veth1_macvtap: entered promiscuous mode [ 226.157709][T18476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.168385][T18476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.178604][T18476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.189075][T18476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.199023][T18476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.209520][T18476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.244396][T18608] loop4: detected capacity change from 0 to 512 [ 226.252778][T18476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.333149][T18608] ext4 filesystem being mounted at /1332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.333815][T18476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.354035][T18476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.363998][T18476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.374546][T18476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.380068][T18608] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.6451: corrupted inode contents [ 226.384376][T18476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.406737][T18476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.416699][T18476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.420485][T18608] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.6451: mark_inode_dirty error [ 226.427162][T18476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.428205][T18476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.457231][T18476] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.466051][T18476] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.474819][T18476] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.483596][T18476] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.503283][T18608] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.6451: corrupted inode contents [ 226.518481][T18608] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.6451: mark_inode_dirty error [ 226.571611][T18620] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.925309][T18653] pim6reg1: entered promiscuous mode [ 226.930794][T18653] pim6reg1: entered allmulticast mode [ 227.036123][T18661] bond_slave_1: entered promiscuous mode [ 227.042595][T18661] bond_slave_1: left promiscuous mode [ 227.339451][T18689] rose0: refused to change device tx_queue_len [ 227.440452][T18702] loop3: detected capacity change from 0 to 2048 [ 227.469089][T18702] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6491: bg 0: block 234: padding at end of block bitmap is not set [ 227.659499][T18722] loop5: detected capacity change from 0 to 128 [ 227.667648][T18724] netlink: 'syz.3.6499': attribute type 10 has an invalid length. [ 227.669268][T18722] ext4 filesystem being mounted at /1308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.675964][T18724] bridge_slave_1: left allmulticast mode [ 227.691816][T18724] bridge_slave_1: left promiscuous mode [ 227.697510][T18724] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.901862][T18750] loop5: detected capacity change from 0 to 512 [ 228.064964][T18750] ext4 filesystem being mounted at /1313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.678759][T18794] loop4: detected capacity change from 0 to 2048 [ 228.777101][T18806] xt_CT: No such helper "pptp" [ 229.002100][T18818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.009387][T18818] IPv6: NLM_F_CREATE should be set when creating new route [ 229.016630][T18818] IPv6: NLM_F_CREATE should be set when creating new route [ 229.189582][T18832] loop3: detected capacity change from 0 to 2048 [ 229.197947][T18832] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.302898][T18846] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 229.404382][T18857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18857 comm=syz.3.6545 [ 229.417405][ T29] kauditd_printk_skb: 4570 callbacks suppressed [ 229.417420][ T29] audit: type=1400 audit(1740900089.554:50412): avc: denied { audit_write } for pid=18856 comm="syz.3.6545" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 229.449380][ T29] audit: type=1107 audit(1740900089.554:50413): pid=18856 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 229.466833][ T29] audit: type=1400 audit(1740900089.594:50414): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 229.487478][ T29] audit: type=1400 audit(1740900089.604:50415): avc: denied { read } for pid=18858 comm="syz.3.6546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.519900][ T29] audit: type=1400 audit(1740900089.644:50416): avc: denied { read } for pid=2985 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 229.542187][ T29] audit: type=1400 audit(1740900089.644:50417): avc: denied { search } for pid=2985 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.563883][ T29] audit: type=1400 audit(1740900089.644:50418): avc: denied { append } for pid=2985 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.586294][ T29] audit: type=1400 audit(1740900089.644:50419): avc: denied { open } for pid=2985 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.608990][ T29] audit: type=1400 audit(1740900089.644:50420): avc: denied { getattr } for pid=2985 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 229.631956][ T29] audit: type=1326 audit(1740900089.654:50421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18860 comm="syz.3.6548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0661c2d169 code=0x0 [ 229.763742][T18875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6552'. [ 229.795207][T18877] pim6reg1: entered promiscuous mode [ 229.800706][T18877] pim6reg1: entered allmulticast mode [ 229.943603][T18881] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 229.953882][T18881] SELinux: failed to load policy [ 230.021842][T18885] syz_tun (unregistering): left promiscuous mode [ 230.283245][T18901] loop6: detected capacity change from 0 to 512 [ 230.347709][T18901] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.434643][T18915] loop3: detected capacity change from 0 to 512 [ 230.452787][T18915] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.6567: casefold flag without casefold feature [ 230.466459][T18915] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.6567: couldn't read orphan inode 15 (err -117) [ 230.489163][T18912] loop4: detected capacity change from 0 to 2048 [ 230.635133][T18935] netlink: 8 bytes leftover after parsing attributes in process `+}[pł'. [ 230.716674][T18942] loop3: detected capacity change from 0 to 128 [ 230.743875][T18942] ext4 filesystem being mounted at /1337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.995125][T18953] SELinux: syz.5.6582 (18953) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 231.299893][T18962] loop5: detected capacity change from 0 to 128 [ 231.304934][T18963] loop3: detected capacity change from 0 to 256 [ 231.318312][T18962] ext4 filesystem being mounted at /1324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.570868][T18989] loop6: detected capacity change from 0 to 128 [ 231.584220][T18989] vfat: Unknown parameter '00000000000000000000003' [ 231.755031][T19010] loop4: detected capacity change from 0 to 512 [ 231.768764][T19010] EXT4-fs mount: 49 callbacks suppressed [ 231.768784][T19010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.788555][T19010] ext4 filesystem being mounted at /1353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.896382][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.974618][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6612'. [ 231.983799][T19028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.991357][T19028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.393303][T19042] IPv6: Can't replace route, no match found [ 232.731186][T19090] loop6: detected capacity change from 0 to 128 [ 232.786528][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.794169][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.801736][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.812007][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.819464][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.826982][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.834614][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.842075][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.849713][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.857268][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.864917][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.872372][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.879821][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.890154][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.897801][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.905414][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.912966][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.920492][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.928109][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.935556][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.943004][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.950452][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.957995][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.965488][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.972971][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.980532][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.987547][T19105] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 232.988229][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.998396][T19105] batman_adv: batadv0: Adding interface: ip6gretap1 [ 233.005545][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 233.012237][T19105] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.012271][T19105] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 233.059198][ T35] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 233.282621][T19126] loop4: detected capacity change from 0 to 512 [ 233.298873][T19126] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.329949][T19126] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 233.340887][T19126] System zones: 0-2, 18-18, 34-34 [ 233.356055][T19126] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6653: bg 0: block 248: padding at end of block bitmap is not set [ 233.390091][T19126] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.6653: Failed to acquire dquot type 1 [ 233.432429][T19126] EXT4-fs (loop4): 1 truncate cleaned up [ 233.439032][T19126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.453539][T19139] loop3: detected capacity change from 0 to 512 [ 233.466402][T19126] ext4 filesystem being mounted at /1360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.489929][T19139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.510155][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.525017][T19139] ext4 filesystem being mounted at /1343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.535883][T17903] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:45: Failed to release dquot type 1 [ 233.587691][T19139] loop3: detected capacity change from 512 to 64 [ 233.604858][T19139] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Out of memory [ 233.625103][T19139] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #18: comm syz.3.6658: mark_inode_dirty error [ 233.640883][T19139] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Out of memory [ 233.659804][T19139] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #18: comm syz.3.6658: mark_inode_dirty error [ 233.671868][T19139] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Out of memory [ 233.684574][T19139] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #18: comm syz.3.6658: mark_inode_dirty error [ 233.696537][T19139] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Out of memory [ 233.706831][T19139] EXT4-fs error (device loop3): ext4_ext_truncate:4457: inode #18: comm syz.3.6658: mark_inode_dirty error [ 233.736877][T19139] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Out of memory [ 233.749618][T19153] loop4: detected capacity change from 0 to 512 [ 233.756451][T19139] EXT4-fs error (device loop3): ext4_truncate:4240: inode #18: comm syz.3.6658: mark_inode_dirty error [ 233.778755][T19153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.794776][T19153] ext4 filesystem being mounted at /1364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.819928][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.894426][T11390] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.942018][T17911] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.049353][T17911] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.100050][T17911] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.141166][T19118] syz.2.6649 (19118) used greatest stack depth: 6368 bytes left [ 234.151064][T17911] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.185434][T19162] chnl_net:caif_netlink_parms(): no params data found [ 234.224057][T19178] random: crng reseeded on system resumption [ 234.236066][T17911] team0: left allmulticast mode [ 234.241046][T17911] team_slave_0: left allmulticast mode [ 234.246690][T17911] team_slave_1: left allmulticast mode [ 234.252277][T17911] team0: left promiscuous mode [ 234.257143][T17911] team_slave_0: left promiscuous mode [ 234.262635][T17911] team_slave_1: left promiscuous mode [ 234.268270][T17911] bridge0: port 3(team0) entered disabled state [ 234.294698][T17911] bridge_slave_0: left allmulticast mode [ 234.300481][T17911] bridge_slave_0: left promiscuous mode [ 234.306200][T17911] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.315589][T19181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.325476][T19181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.387124][T19188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.413517][T17911] dvmrp1 (unregistering): left allmulticast mode [ 234.414723][T19188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.448643][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 234.448661][ T29] audit: type=1326 audit(1740900094.584:50746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm=06E81A40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 234.495554][ T29] audit: type=1326 audit(1740900094.614:50747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm=06E81A40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 234.495633][T19162] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.518826][ T29] audit: type=1326 audit(1740900094.614:50748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm=06E81A40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 234.525877][T19162] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.549234][ T29] audit: type=1326 audit(1740900094.614:50749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm=06E81A40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 234.549263][ T29] audit: type=1326 audit(1740900094.614:50750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm=06E81A40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 234.600498][T19162] bridge_slave_0: entered allmulticast mode [ 234.602949][ T29] audit: type=1326 audit(1740900094.614:50751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm=06E81A40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 234.610926][T19162] bridge_slave_0: entered promiscuous mode [ 234.631950][ T29] audit: type=1326 audit(1740900094.614:50752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm=06E81A40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 234.631985][ T29] audit: type=1326 audit(1740900094.614:50753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm=06E81A40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 234.639022][T19162] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.661108][ T29] audit: type=1326 audit(1740900094.614:50754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm=06E81A40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 234.684472][T19162] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.691482][ T29] audit: type=1326 audit(1740900094.614:50755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm=06E81A40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b59a2d169 code=0x7ffc0000 [ 234.747835][T19162] bridge_slave_1: entered allmulticast mode [ 234.758732][T19162] bridge_slave_1: entered promiscuous mode [ 234.782721][T19195] pimreg: entered allmulticast mode [ 234.788213][T19198] pimreg: left allmulticast mode [ 234.811572][T17911] tipc: Disabling bearer [ 234.816919][T17911] tipc: Left network mode [ 234.841082][T19162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.855162][T19162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.855475][T19205] loop4: detected capacity change from 0 to 1024 [ 234.872678][T17911] hsr_slave_0: left promiscuous mode [ 234.874909][T19205] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 234.889252][T19205] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 234.898949][T17911] hsr_slave_1: left promiscuous mode [ 234.899097][T19205] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 234.904848][T17911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.921967][T17911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.923348][T19205] EXT4-fs (loop4): invalid journal inode [ 234.937503][T19205] EXT4-fs (loop4): can't get journal size [ 234.943803][T17911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.943846][T19205] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.6681: blocks 2-2 from inode overlap system zone [ 234.951323][T17911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.966560][T19205] EXT4-fs (loop4): failed to initialize system zone (-117) [ 234.980089][T19205] EXT4-fs (loop4): mount failed [ 234.985289][T17911] veth1_macvtap: left promiscuous mode [ 234.985853][T19211] netlink: 'syz.2.6682': attribute type 13 has an invalid length. [ 234.990882][T17911] veth0_macvtap: left promiscuous mode [ 234.998708][T19211] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6682'. [ 235.005385][T17911] veth1_vlan: left promiscuous mode [ 235.079367][T17911] team0 (unregistering): Port device team_slave_1 removed [ 235.092106][T17911] team0 (unregistering): Port device team_slave_0 removed [ 235.099208][T19217] netlink: 'syz.4.6685': attribute type 4 has an invalid length. [ 235.149241][T19162] team0: Port device team_slave_0 added [ 235.156310][T19162] team0: Port device team_slave_1 added [ 235.179867][T19162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.186922][T19162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.213241][T19162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.225534][T19162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.232604][T19162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.233510][T19225] loop4: detected capacity change from 0 to 2048 [ 235.258940][T19162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.287754][T19225] EXT4-fs: Ignoring removed bh option [ 235.303057][T19162] hsr_slave_0: entered promiscuous mode [ 235.309408][T19162] hsr_slave_1: entered promiscuous mode [ 235.319795][T19225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.454013][T19162] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 235.468941][T19162] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 235.485840][T19162] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 235.497938][T19162] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 235.594616][T19162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.606229][T19162] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.633920][T17863] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.641084][T17863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.650210][T17911] IPVS: stop unused estimator thread 0... [ 235.673682][T17863] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.680892][T17863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.742769][T19241] bridge_slave_0: left allmulticast mode [ 235.748608][T19241] bridge_slave_0: left promiscuous mode [ 235.754455][T19241] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.791671][T19233] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 235.798111][T19241] bridge_slave_1: left allmulticast mode [ 235.812303][T19241] bridge_slave_1: left promiscuous mode [ 235.818099][T19241] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.826652][T19233] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 235.839176][T19233] EXT4-fs (loop4): This should not happen!! Data will be lost [ 235.839176][T19233] [ 235.848954][T19233] EXT4-fs (loop4): Total free blocks count 0 [ 235.854945][T19233] EXT4-fs (loop4): Free/Dirty block details [ 235.860977][T19233] EXT4-fs (loop4): free_blocks=2415919104 [ 235.866775][T19233] EXT4-fs (loop4): dirty_blocks=8224 [ 235.872131][T19233] EXT4-fs (loop4): Block reservation details [ 235.878189][T19233] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 235.893100][T19241] bond0: (slave bond_slave_0): Releasing backup interface [ 235.910762][T19241] bond0: (slave bond_slave_1): Releasing backup interface [ 235.923806][T17903] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 235.969853][T19241] team0: Port device team_slave_0 removed [ 235.981665][T19249] loop6: detected capacity change from 0 to 128 [ 235.990504][T19241] team0: Port device team_slave_1 removed [ 235.998583][T19241] bond0: (slave batadv_slave_0): Releasing backup interface [ 236.068732][T19162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.079218][T19162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.096218][T19251] pim6reg1: entered promiscuous mode [ 236.101772][T19251] pim6reg1: entered allmulticast mode [ 236.212831][T19162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.258751][T19264] tipc: Started in network mode [ 236.263700][T19264] tipc: Node identity 961f36fc0376, cluster identity 4711 [ 236.270984][T19264] tipc: Enabled bearer , priority 0 [ 236.285450][T19263] tipc: Resetting bearer [ 236.314989][T19263] tipc: Disabling bearer [ 236.322885][T19269] veth1_to_bond: entered allmulticast mode [ 236.351552][T19269] veth1_to_bond: left allmulticast mode [ 236.473079][T19162] veth0_vlan: entered promiscuous mode [ 236.484281][T19162] veth1_vlan: entered promiscuous mode [ 236.508556][T19162] veth0_macvtap: entered promiscuous mode [ 236.516309][T19162] veth1_macvtap: entered promiscuous mode [ 236.532886][T19162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.543462][T19162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.553402][T19162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.563983][T19162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.573875][T19162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.584551][T19162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.595569][T19162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.606065][T19162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.616627][T19162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.626532][T19162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.637207][T19162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.647076][T19162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.657535][T19162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.675792][T19162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.718466][T19162] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.727439][T19162] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.736194][T19162] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.745078][T19162] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.753659][T19313] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 236.764900][T19313] SELinux: failed to load policy [ 236.784559][T19314] pimreg: entered allmulticast mode [ 236.805855][T19314] pimreg: left allmulticast mode [ 236.856582][T19325] loop4: detected capacity change from 0 to 2048 [ 236.868344][T19325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.889055][T19325] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.904444][T19325] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 236.916941][T19325] EXT4-fs (loop4): This should not happen!! Data will be lost [ 236.916941][T19325] [ 236.926707][T19325] EXT4-fs (loop4): Total free blocks count 0 [ 236.932843][T19325] EXT4-fs (loop4): Free/Dirty block details [ 236.938845][T19325] EXT4-fs (loop4): free_blocks=2415919104 [ 236.944638][T19325] EXT4-fs (loop4): dirty_blocks=32 [ 236.949806][T19325] EXT4-fs (loop4): Block reservation details [ 236.955916][T19325] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 236.964319][T19332] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 237.109742][T19347] loop6: detected capacity change from 0 to 2048 [ 237.121765][T19347] EXT4-fs: Mount option(s) incompatible with ext3 [ 237.188296][T19349] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 237.198870][T19349] SELinux: failed to load policy [ 237.802699][T19367] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 237.813181][T19367] SELinux: failed to load policy [ 237.980336][T19375] loop4: detected capacity change from 0 to 2048 [ 238.037412][T19375] loop4: p3 p4 < > [ 238.133512][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6748'. [ 238.142581][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6748'. [ 238.178925][T19384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.196941][T19384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.239216][T19384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.253569][T19384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.273966][T19384] pimreg: entered allmulticast mode [ 238.286225][T19384] pimreg: left allmulticast mode [ 238.428787][T19400] loop7: detected capacity change from 0 to 512 [ 238.439278][T19400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.453124][T19400] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.506661][T19400] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #19: comm syz.7.6757: corrupted inode contents [ 238.520558][T19400] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #19: comm syz.7.6757: mark_inode_dirty error [ 238.532364][T19400] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #19: comm syz.7.6757: corrupted inode contents [ 238.544804][T19400] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3006: inode #19: comm syz.7.6757: mark_inode_dirty error [ 238.557243][T19400] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3009: inode #19: comm syz.7.6757: mark inode dirty (error -117) [ 238.571098][T19400] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -117) [ 238.600792][T19162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.704715][T19412] loop6: detected capacity change from 0 to 128 [ 238.723579][T19412] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.736143][T19412] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.160001][T19419] ================================================================== [ 239.168215][T19419] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 239.177714][T19419] [ 239.180054][T19419] read-write to 0xffff8881066a9cb8 of 4 bytes by task 19412 on cpu 0: [ 239.188226][T19419] __writeback_single_inode+0x1f4/0x850 [ 239.193884][T19419] writeback_single_inode+0x16c/0x3f0 [ 239.199405][T19419] sync_inode_metadata+0x5c/0x90 [ 239.204384][T19419] generic_buffers_fsync_noflush+0xd8/0x120 [ 239.210323][T19419] ext4_sync_file+0x1ff/0x6c0 [ 239.215026][T19419] vfs_fsync_range+0x116/0x130 [ 239.219845][T19419] ext4_buffered_write_iter+0x358/0x3c0 [ 239.225465][T19419] ext4_file_write_iter+0x383/0xf20 [ 239.230715][T19419] iter_file_splice_write+0x5f1/0x980 [ 239.236095][T19419] direct_splice_actor+0x160/0x2c0 [ 239.241388][T19419] splice_direct_to_actor+0x302/0x670 [ 239.246775][T19419] do_splice_direct+0xd7/0x150 [ 239.251569][T19419] do_sendfile+0x398/0x660 [ 239.256078][T19419] __x64_sys_sendfile64+0x110/0x150 [ 239.261315][T19419] x64_sys_call+0xfbd/0x2dc0 [ 239.265946][T19419] do_syscall_64+0xc9/0x1c0 [ 239.270466][T19419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.276484][T19419] [ 239.278819][T19419] read to 0xffff8881066a9cb8 of 4 bytes by task 19419 on cpu 1: [ 239.286467][T19419] generic_buffers_fsync_noflush+0x83/0x120 [ 239.292404][T19419] ext4_sync_file+0x1ff/0x6c0 [ 239.297110][T19419] vfs_fsync_range+0x116/0x130 [ 239.301890][T19419] ext4_buffered_write_iter+0x358/0x3c0 [ 239.307492][T19419] ext4_file_write_iter+0x383/0xf20 [ 239.312723][T19419] iter_file_splice_write+0x5f1/0x980 [ 239.318132][T19419] direct_splice_actor+0x160/0x2c0 [ 239.323259][T19419] splice_direct_to_actor+0x302/0x670 [ 239.328764][T19419] do_splice_direct+0xd7/0x150 [ 239.333904][T19419] do_sendfile+0x398/0x660 [ 239.338332][T19419] __x64_sys_sendfile64+0x110/0x150 [ 239.343560][T19419] x64_sys_call+0xfbd/0x2dc0 [ 239.348200][T19419] do_syscall_64+0xc9/0x1c0 [ 239.352732][T19419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.358753][T19419] [ 239.361086][T19419] value changed: 0x00000022 -> 0x00000000 [ 239.366810][T19419] [ 239.369145][T19419] Reported by Kernel Concurrency Sanitizer on: [ 239.375304][T19419] CPU: 1 UID: 0 PID: 19419 Comm: syz.6.6762 Tainted: G W 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 239.387566][T19419] Tainted: [W]=WARN [ 239.391371][T19419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.401456][T19419] ================================================================== [ 239.482455][T18476] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.