last executing test programs: 15.324130142s ago: executing program 2 (id=784): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_clone(0x83124100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4060, &(0x7f0000004080)="$eJzszzEuBGEYBuB3dg1DJtlIqCRio9DJ6FRzi+1lz6BSIOYmSnEA93AHpTNIMCOLZgvC5nmq75s37/z/H/6JapiKJA/z++0kB9N0TfMWrvX55kepOUm5VY1SJzkfvq7/4rUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/qljYrpJ0jxdH/V4NyXwv3WWb0zqpdifJzThlu19kJ5kef/PfcfKU0ev4nGQ2+clHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACr42xh2/gc1/1w/bV6e5iuLd/Tcrljq2R2t1wFgBd24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOJABAAAAEOZvnUf7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwIAAP//MisQVg==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioprio_set$pid(0x1, r0, 0x0) 11.793902156s ago: executing program 2 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x191) 10.435278343s ago: executing program 2 (id=793): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x8) syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x49c, &(0x7f0000000580)="$eJzs3U9rXOUaAPDnnCRN2qY36b2F+2dze9ve2wulM5lIChXEigsFLYj9ADUm0xgyyYTMpCahYPsVVLTgQkRw5UbQfRFxqxtRF+LGlSBaKiK4GDlnJmmaZpJo0wxkfj84nPOeM5nnfTOc95k8SeYNoGsdj4jrEXEgIl6IiKHW+aS1xYXmlj3uzu1rE9mWRKNx6cckv561Y93XZA63nnMgIp5/KuLF5P64teWVmfFKpbzQahfrs/PF2vLK2enZ8anyVHludGTs/FjpXKlU2rWxvvrL4N9PfHzhsbefffez9z5cWsq6Ndi6tn4cu6k59L61OJneiHjmYQTrgJ7WeA50uiP8KWlE/DUiTuT3/1D05K8mALCfNRpD0Rha3wYA9rs0r4ElaaFVCxiMNC0UmjW8Y3EorVRr9TNXqotzk81a2XD0pVemK+WRVq1wOPqSrF3Kj++2Rze0H4mIoxHxev/BvF2YqFYmO/nGBwC62OEN+f/n/mb+BwD2uYFOdwAA2HPyPwB0H/kfALqP/A8A3Uf+B4DuI/8DQPeR/wGgqzx38WK2NVY//3ry6vLiTPXq2clybaYwuzhRmKguzBemqtWp/DN7Zrd7vkq1On8u5haXivVyrV6sLa9cnq0uztUv55/rfbnctyejAgC2cvTft75OIuL6owfzLdat5SBXw/6WdroDQMf0dLoDQMdY7Qu6l5/xgU2W6L1H2z8Rurn7fQH2xul/qv9Dt1L/h+6l/g/dS/0fulejkVjzHwC6jBo/4Pf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8McN5luSFlprgQ9GmhYKEUciYjj6kivTlfJIRPwlIr7q7+vP2qVOdxoAeEDp90lr/a/TQ6cGN149kPzan+8j4uW3Lr25NF6vL5Sy8z+tna/fbJ0f7UT/AYDtrObp1Ty+6s7taxOr217254cnmouL3h+/N3rz/UD0RcShO0mr3ZS9X+nZhfjXb0TEPzaLn+S1keHWyqcb42exj+xp/PSe+Gl+rbnPvhd/24W+QLe5lc0/Fza7/9I4nu83v/8H8hnqwbWf/9K1+a+nzfx3fKdj/HTo6bbxb0T8q3fz+Wc1ftIm/qkdxv+u+s1r7a413ok4vWn+Se6JVazPzhdryytnp2fHp8pT5bnRkbHzY6VzpVKpmNeoi6uV6vs9/saXr2w1/kNt4g9sM/7/7nD8337+5Cf/2SL+/09u/vof2yJ+lhP/t8P475/86KV217L4k23Gv93rf2aH8W998cFvO3woALAHassrM+OVSnnBgQMHDtYOOj0zAQ/b3Zu+0z0BAAAAAAAAAAAAAADa2Yt/J+r0GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANi/fg8AAP//Uunccw==") socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000b80)={0xf97cff8c, 0x8}, 0x10) 9.598055387s ago: executing program 4 (id=794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8200, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x30, r3, 0x82858000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) dup(r1) syz_genetlink_get_family_id$l2tp(0x0, r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x20008000) 9.573907409s ago: executing program 1 (id=795): syz_open_dev$evdev(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000003c0)={0x0, 'veth1_to_team\x00', {0x2}, 0x101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8.332994184s ago: executing program 1 (id=796): syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) userfaultfd(0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000bc0)='bpf_lsm_fs_context_dup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x19, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xc, 0x4, 0x2}, 0x10, r1, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x5aa7bac0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x10000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 8.323007215s ago: executing program 0 (id=797): truncate(&(0x7f0000000040)='./file1\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000150001000000", @ANYRES32=0x0], 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x80002, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000c40)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) lstat(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000406, &(0x7f0000000740)={[{@errors_continue}, {@noblock_validity}, {@inlinecrypt}, {@resgid={'resgid', 0x3d, r5}}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val}, {@bh}, {@grpid}], [{@appraise_type}, {@dont_measure}], 0x2c}, 0x1, 0x4d9, &(0x7f0000000180)="$eJzs3M1vFOUfAPDvTOkLry38yO/340WporERbWlB5eBBjSZcNCZ6wGMtlSALGFoTIUSKMXg0/gXq0cTEkxdPmhijXtR41bsxIYYL6MGsmd2Zdpd96W4LrbCfTzK7zzPzzMv3mXlmZ/bZnQB61mj2kkRsiYhfImK4mq0vMFp9u3Ht4syf1y7OJFEuv/RHUil3/drFmaJoMd/mPDOWRqTvJrGn3LjeufMXTk2XSrPn8vzE/Ok3JubOX3j05OnpE7MnZs9MHTly+NDkE49PPdZRHJeWmZ7FdX3322f37jr6ygfPz5Tj1e8+zbZ3Sz69No6qkY7W285ojEY5tzR2oPL64KqX/u+yNSIG83SyYZ03ho71RUS2u/or7X84+mJp5w3Hc+8sZr5epw0Ebpvss2l7w9i+/D1d/PwC7kaJNg49qvjEz+5/i2Etrz/W29Wns9fZSvw38uGHF6p1k2b3siPVO/a+FvP/t8m4oaVkeXiZ9W+JiGMLf32YDdH0e4g2ko5LAgAs+jK7/nmk2fVfWndtsy3vQxmJiAMRsSMi/hMROyNdLPO/iPh/l+sfvSnfeP3z08YuF9mV7PrvybxvqxiqU4q4ksXc1kr8/clrJ0uzB/M6GYv+wSw/2WYdXz378/utpo3WXP9lQ7b+4low347fNwzWz3N8en56FSHXuXo5ktjQLP5ksScgq4FdEbF7BcvP6uzkw5/szdLbNjdOXz7+Nm5BP1P544iHqvt/IW6Kv5BU19Sqf3JiKEqzByeKo6LR9z9eebE231+Trot/qLOYhlYabBNXL0dsanr85/EXzaDor53rfh1Xfn2v5T1N4/5P4thCbYn8+N+4VG3Z8T+QvFxJD+Tj3pqenz83GTGQj6gbP7W0tCJflM/iH9tfH3/1vjjNznF/f5TPtycisoP4noi4NyL25dt+X0TcHxH728T/7TMPvN6+hlZ4/N8CWfzH2+3/iJGktr9+BYm+U9980Wr9nZ3/DldSY/mY2vPfQIvldrqBq60/AAAAuBOklT7oJB2v+f12YWdsSktn5+YPjMabZ45X+6pHoj8tvukarvk+dDL/brjIT92UPxQR2yu/NNpYyY/PnC1tXaeYgarNNe2/ei5I0/Hx6rTfWv3oBbh7dNWPVvujs88+v/UbA6wp/9eE3qX9Q+/S/qF3af/Qu5q1/0sRN9ZhU4A15vMfepf2D71L+4fepf1DT2r8S3z+uJXsnLDyv/yXdhxdzRMDbn+iPLzy2aP1pIXuF9jXWeHi6RcdL7mzwklEm3DaJSJtX2ag801d+0S6bJmnlquW/q6eiTHUpDb25YnBiOh0OZfWrFaLM0TiKZMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAd7Z8AAAD//1dd41U=") 8.226216404s ago: executing program 4 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x1d, @rand_addr=0x64010100, 0x4e22, 0x1, 'lblc\x00', 0xe, 0x8ea, 0x3d}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r2, 0x81ff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095", @ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.213985846s ago: executing program 3 (id=799): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@nouser_xattr}, {@nojournal_checksum}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@nombcache}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x40000, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000808}, 0x0) 7.226247045s ago: executing program 3 (id=800): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pppl2tp(0x18, 0x1, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) clock_gettime(0x0, 0x0) 7.225312505s ago: executing program 1 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) clock_nanosleep(0xfffffff4, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10c}}, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$ASHMEM_GET_NAME(r5, 0x81007702, &(0x7f0000000300)=""/193) 7.127525334s ago: executing program 0 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffd}, 0xd) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 4.926012476s ago: executing program 1 (id=803): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_clone(0xc2164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x0, 0x4, 0x8, r1}}, 0x1e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) 4.153710184s ago: executing program 3 (id=804): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x24000, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f00000fd000/0x4000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3f1}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)=@delsa={0x28, 0x11, 0x1, 0x70bd25, 0x25dfdbfb, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xa, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$eJzsmb2LE0EYxp+Z3eydhyg2FjYWHniit9ndqFxzxQmWgnCKWgZvPU73LpKskAQEg42NpYVga2NpYWFl4V9gq4UKgoUp7YSR+djdyWYT4gdG9P3BzT7z9c68L9yzsAFBEP8tHz98ff/w3NqlUwD2YxkLZvyzo5/i4Oj6d4/vnHy0fv7J87dPX+8duPuyHI/JPWL28z0ArzYcpGCuOXFk93IRNtO4DI4TRl8Bg6/lN6HQnRgM18yam5Zu7TMiif3rrWTrxk4SB7IJZRPJpmGfLy81HDBsAVhUtxOCWfOdXv9WM0nidlnURHbO2NSPimn1U/fb4FhHVj0hOICrD+4PZN/UBgF4Xr8QHKHRDTBsGr2GBfi+X5TEyv+IW8R3Zsl/vuKZEodW/9Sh4Locf0Pu/7Co/ZY4rDwi/6HzkcPDzAPtNZ/mnvvPC2VcAMam3iwlyYVfiOxVFCoXhT9JZz9u+ZMLN/ePerp7u97p9Vd3dpvb8Xa8F0WNs8HpIDgT1ZUR6XaK/y0qf1qy4tcmrPWYh24zTdthF0jbYd6PdGs57uaL1he1hyv/41g5pmMw887KX5QlmPnj6inVilO98t7EnAiCIAiCIAiCIAiCIAiCIKo5Cgb9S5hg5oNoFdFF9YXyewAAAP//L0Rm/Q==") r3 = getuid() lchown(&(0x7f0000000100)='./file0\x00', r3, 0xee00) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1204001, 0x0) 4.098889369s ago: executing program 0 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) 4.08243476s ago: executing program 4 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_open_dev$loop(0x0, 0x4, 0x50000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000008, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 3.472728322s ago: executing program 1 (id=807): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 3.374785362s ago: executing program 2 (id=808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r3, r2, 0x0, 0x8010002b) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x65) io_uring_setup(0x40b0, &(0x7f0000000080)={0x0, 0xe9ce, 0x2, 0x20001, 0x175}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000400)}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000003c0), 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0x8, 0x702, 0x0, 0x0) 3.151805604s ago: executing program 0 (id=809): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x8) unshare(0x42000000) 3.148394314s ago: executing program 4 (id=810): syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) userfaultfd(0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000bc0)='bpf_lsm_fs_context_dup\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x19, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xc, 0x4, 0x2}, 0x10, r1, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, 0x0, 0x0, 0x5aa7bac0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x10000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 3.084015811s ago: executing program 3 (id=811): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xd5, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 2.250484524s ago: executing program 0 (id=812): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@nouser_xattr}, {@nojournal_checksum}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@nombcache}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x40000, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000808}, 0x0) 2.250212935s ago: executing program 2 (id=813): open(0x0, 0x8060, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x5d, 0x0, 0x0, 0x2}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x120) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 2.177284151s ago: executing program 3 (id=814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x10000000000700, 0xfffffd65) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x4004080}, 0x8800) syz_open_procfs$namespace(r0, &(0x7f0000000500)='ns/net\x00') 1.353590215s ago: executing program 4 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000366, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000400)={0x10002000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120020000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000300)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x28) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 1.242999075s ago: executing program 3 (id=816): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x3, 0x1, 0xff, 0x4, 0x2, 0x5}, 0x20) unshare(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e700"/137], 0x190) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x280c413, &(0x7f0000000100)={[{@nouid32}, {@noinit_itable}]}, 0x0, 0x576, &(0x7f0000001280)="$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") setsockopt$inet_opts(r4, 0x0, 0x80000000000008, &(0x7f0000000180)='{', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/113, 0x71}], 0x1, 0xc002a0, 0x0) 1.19557994s ago: executing program 0 (id=817): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socket$netlink(0x10, 0x3, 0x1) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) 1.150406645s ago: executing program 1 (id=818): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) fallocate(r0, 0x0, 0x0, 0x10000) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc613, 0x39ed, 0x0) 1.124778757s ago: executing program 2 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, r7, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5721}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 0s ago: executing program 4 (id=820): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x0) mkdir(0x0, 0x108) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) sendmsg(r6, 0x0, 0x44004) ioctl$KDSKBMETA(r1, 0x4b3d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) kernel console output (not intermixed with test programs): 350: inode #18: comm syz.3.340: mark_inode_dirty error [ 166.849260][ T283] EXT4-fs (loop0): unmounting filesystem. [ 166.855473][ T1927] EXT4-fs (loop3): Remounting filesystem read-only [ 166.862190][ T1927] EXT4-fs error (device loop3) in __ext4_new_inode:1352: Corrupt filesystem [ 166.871062][ T1927] EXT4-fs (loop3): Remounting filesystem read-only [ 166.877661][ T1927] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz.3.340: Invalid inode table block 1 in block_group 0 [ 166.908026][ T1927] EXT4-fs (loop3): Remounting filesystem read-only [ 166.914630][ T1927] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 166.929317][ T1927] EXT4-fs (loop3): Remounting filesystem read-only [ 166.935980][ T1927] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #18: comm syz.3.340: mark_inode_dirty error [ 166.947671][ T1927] EXT4-fs (loop3): Remounting filesystem read-only [ 166.954459][ T1927] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 167.065646][ T1953] loop4: detected capacity change from 0 to 256 [ 167.418417][ T28] audit: type=1400 audit(1762956393.853:284): avc: denied { mounton } for pid=1943 comm="syz.4.343" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 167.569962][ T28] audit: type=1400 audit(1762956394.233:285): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 167.823687][ T1927] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz.3.340: Invalid inode table block 1 in block_group 0 [ 167.836383][ T28] audit: type=1400 audit(1762956394.603:286): avc: denied { setattr } for pid=1926 comm="syz.3.340" path="/70/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.960984][ T1927] EXT4-fs (loop3): Remounting filesystem read-only [ 167.967610][ T1927] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 168.201711][ T1964] tipc: Invalid UDP bearer configuration [ 168.201805][ T1964] tipc: Enabling of bearer rejected, failed to enable media [ 168.418509][ T1966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.348'. [ 168.523009][ T1927] EXT4-fs (loop3): Remounting filesystem read-only [ 168.844234][ T1968] loop0: detected capacity change from 0 to 1024 [ 168.870666][ T1968] EXT4-fs: Ignoring removed orlov option [ 168.887812][ T1968] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.998244][ T1956] loop2: detected capacity change from 0 to 2048 [ 169.023274][ T1975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.037825][ T1927] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.340: Invalid inode bitmap blk 1 in block_group 0 [ 169.103285][ T1956] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 169.139916][ T1981] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 169.214115][ T285] EXT4-fs (loop2): unmounting filesystem. [ 169.296074][ T1987] loop1: detected capacity change from 0 to 2048 [ 169.456847][ T1987] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 169.508095][ T1987] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.836308][ T1996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.353'. [ 170.060436][ T283] EXT4-fs (loop0): unmounting filesystem. [ 170.212624][ T286] EXT4-fs (loop1): unmounting filesystem. [ 170.253610][ T2005] loop2: detected capacity change from 0 to 128 [ 173.629377][ T2028] syz.4.359[2028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.629450][ T2028] syz.4.359[2028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.643913][ T2028] loop4: detected capacity change from 0 to 256 [ 173.661655][ T2028] exfat: Deprecated parameter 'utf8' [ 173.675670][ T2028] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 173.777396][ T2029] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.036154][ T28] audit: type=1400 audit(1762956401.813:287): avc: denied { read write } for pid=2034 comm="syz.2.373" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 175.076962][ T2035] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 175.146923][ T28] audit: type=1400 audit(1762956401.853:288): avc: denied { open } for pid=2034 comm="syz.2.373" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 175.230282][ T2047] loop4: detected capacity change from 0 to 128 [ 175.346589][ T28] audit: type=1400 audit(1762956402.123:289): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.378707][ T2050] loop0: detected capacity change from 0 to 512 [ 175.402575][ T2050] EXT4-fs (loop0): 1 orphan inode deleted [ 175.408406][ T2050] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.417794][ T2050] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.424345][ T2038] loop1: detected capacity change from 0 to 2048 [ 175.434736][ T1333] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 175.456419][ T1333] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:116: Failed to release dquot type 1 [ 175.809269][ T2038] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.103446][ T1332] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 176.117282][ T1332] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:115: Failed to release dquot type 1 [ 176.144528][ T286] EXT4-fs (loop1): unmounting filesystem. [ 176.381304][ T2071] syz.1.369[2071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.382603][ T2071] syz.1.369[2071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.042937][ T283] EXT4-fs (loop0): unmounting filesystem. [ 179.086417][ T2076] loop1: detected capacity change from 0 to 1024 [ 179.105367][ T2076] EXT4-fs: Ignoring removed bh option [ 179.111062][ T2076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.283496][ T2076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 179.580831][ T476] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 179.802629][ T476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.853445][ T476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.873571][ T476] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 179.887854][ T476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.904330][ T476] usb 5-1: config 0 descriptor?? [ 180.022864][ T28] audit: type=1400 audit(1762956406.803:290): avc: denied { read write } for pid=2106 comm="syz.3.379" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 180.075199][ T28] audit: type=1400 audit(1762956406.853:291): avc: denied { open } for pid=2106 comm="syz.3.379" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 180.314015][ T2078] bridge0: port 3(gretap0) entered blocking state [ 180.323605][ T2078] bridge0: port 3(gretap0) entered disabled state [ 180.330959][ T2078] device gretap0 entered promiscuous mode [ 180.337544][ T286] EXT4-fs (loop1): unmounting filesystem. [ 180.345410][ T28] audit: type=1400 audit(1762956407.123:292): avc: denied { mount } for pid=2106 comm="syz.3.379" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 180.372723][ T2078] bridge0: port 3(gretap0) entered blocking state [ 180.379185][ T2078] bridge0: port 3(gretap0) entered forwarding state [ 180.448301][ T2115] device gretap0 left promiscuous mode [ 180.460543][ T2115] bridge0: port 3(gretap0) entered disabled state [ 180.473810][ T476] usbhid 5-1:0.0: can't add hid device: -71 [ 180.490398][ T476] usbhid: probe of 5-1:0.0 failed with error -71 [ 180.516253][ T476] usb 5-1: USB disconnect, device number 7 [ 180.920896][ T28] audit: type=1400 audit(1762956407.703:293): avc: denied { map } for pid=2124 comm="syz.3.384" path="/newroot/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 180.945425][ T2127] device veth0 entered promiscuous mode [ 180.956638][ T2127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 182.528794][ T2142] loop4: detected capacity change from 0 to 512 [ 182.556588][ T2142] EXT4-fs: Ignoring removed nobh option [ 182.690591][ T2161] loop0: detected capacity change from 0 to 4096 [ 182.697274][ T2161] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.751520][ T2161] EXT4-fs (loop0): Test dummy encryption mode enabled [ 182.794094][ T2142] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.388: corrupted inode contents [ 182.866000][ T2161] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 182.982446][ T2163] loop3: detected capacity change from 0 to 1024 [ 183.087569][ T2163] EXT4-fs: Ignoring removed bh option [ 183.193217][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 183.242982][ T2163] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.390: lblock 2 mapped to illegal pblock 2 (length 1) [ 183.312796][ T2142] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #3: comm syz.4.388: mark_inode_dirty error [ 183.770255][ T2163] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 183.778738][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 183.790563][ T283] EXT4-fs (loop0): unmounting filesystem. [ 183.796540][ T2142] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #3: comm syz.4.388: corrupted inode contents [ 183.809064][ T2163] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.390: lblock 0 mapped to illegal pblock 48 (length 1) [ 183.823307][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 183.829918][ T2142] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.388: mark_inode_dirty error [ 183.866522][ T2163] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 183.875375][ T2163] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.390: Failed to acquire dquot type 0 [ 183.886735][ T2163] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 183.896306][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 183.910346][ T2163] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.390: mark_inode_dirty error [ 183.951846][ T2142] Quota error (device loop4): write_blk: dquota write failed [ 183.959292][ T2142] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 183.969364][ T2163] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 183.986579][ T2163] EXT4-fs (loop3): 1 orphan inode deleted [ 183.992400][ T2163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 184.001341][ T1331] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:114: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.140569][ T28] audit: type=1400 audit(1762956410.853:294): avc: denied { map } for pid=2169 comm="syz.0.391" path="socket:[20369]" dev="sockfs" ino=20369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 184.170498][ T2142] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.388: Failed to acquire dquot type 0 [ 184.295331][ T1331] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 184.295629][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 184.304302][ T1331] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:114: Failed to release dquot type 0 [ 184.326602][ T2142] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.388: corrupted inode contents [ 184.343362][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 184.365204][ T2142] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.388: mark_inode_dirty error [ 184.387470][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 184.394914][ T2142] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.388: corrupted inode contents [ 184.418864][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 184.431288][ T2142] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.388: mark_inode_dirty error [ 184.432067][ T287] EXT4-fs (loop3): unmounting filesystem. [ 184.442832][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 184.455037][ T2142] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.388: corrupted inode contents [ 184.467041][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 184.469980][ T287] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 184.473826][ T2142] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 184.495234][ T287] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 184.504898][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 184.518450][ T287] EXT4-fs error (device loop3): ext4_quota_off:7109: inode #3: comm syz-executor: mark_inode_dirty error [ 184.529796][ T2142] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.388: corrupted inode contents [ 184.551013][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 184.557753][ T2142] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.388: mark_inode_dirty error [ 184.569785][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 184.577151][ T2142] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 184.586448][ T2142] EXT4-fs (loop4): Remounting filesystem read-only [ 184.593258][ T2142] EXT4-fs (loop4): 1 truncate cleaned up [ 184.598952][ T2142] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.608033][ T2142] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.650044][ T28] audit: type=1400 audit(1762956411.423:295): avc: denied { bind } for pid=2139 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.033267][ T284] EXT4-fs (loop4): unmounting filesystem. [ 187.724552][ T288] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 187.733357][ T2198] device veth0 entered promiscuous mode [ 187.742282][ T2198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 187.791994][ T2191] loop2: detected capacity change from 0 to 40427 [ 187.848577][ T2191] F2FS-fs (loop2): fault_injection options not supported [ 187.863804][ T2191] F2FS-fs (loop2): fault_type options not supported [ 187.870579][ T2191] F2FS-fs (loop2): Image doesn't support compression [ 187.878039][ T2191] F2FS-fs (loop2): invalid crc value [ 187.884670][ T2191] F2FS-fs (loop2): Found nat_bits in checkpoint [ 188.983181][ T2211] loop3: detected capacity change from 0 to 256 [ 189.068967][ T2212] bridge0: port 3(gretap0) entered blocking state [ 189.119599][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 189.119692][ T28] audit: type=1326 audit(1762956415.183:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.4.400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x0 [ 189.911286][ T2212] bridge0: port 3(gretap0) entered disabled state [ 189.918601][ T2212] device gretap0 entered promiscuous mode [ 189.924674][ T2212] bridge0: port 3(gretap0) entered blocking state [ 189.926146][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.931126][ T2212] bridge0: port 3(gretap0) entered forwarding state [ 189.938717][ T2191] F2FS-fs (loop2): Start checkpoint disabled! [ 190.518061][ T2216] device gretap0 left promiscuous mode [ 190.627498][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.062615][ T288] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 191.072029][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.104036][ T2216] bridge0: port 3(gretap0) entered disabled state [ 191.191969][ T288] usb 1-1: config 0 descriptor?? [ 191.215426][ T288] usb 1-1: can't set config #0, error -71 [ 191.245293][ T2227] loop3: detected capacity change from 0 to 1024 [ 191.252558][ T2227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.260459][ T2227] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.275879][ T2227] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 191.280183][ T288] usb 1-1: USB disconnect, device number 2 [ 191.284031][ T2227] System zones: 0-1, 3-36 [ 191.298601][ T2226] loop4: detected capacity change from 0 to 1024 [ 191.305609][ T2227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.320249][ T2226] EXT4-fs: Ignoring removed orlov option [ 191.469056][ T2226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.875396][ T2238] tipc: Started in network mode [ 191.881134][ T2238] tipc: Node identity ac14140f, cluster identity 4711 [ 191.888049][ T2238] tipc: New replicast peer: 255.255.255.255 [ 191.894215][ T2238] tipc: Enabled bearer , priority 10 [ 192.113886][ T287] EXT4-fs (loop3): unmounting filesystem. [ 192.127742][ T2241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.296317][ T284] EXT4-fs (loop4): unmounting filesystem. [ 193.360612][ T19] tipc: Node number set to 2886997007 [ 195.273694][ T28] audit: type=1400 audit(2000000004.070:298): avc: denied { read } for pid=2267 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.902928][ T2294] loop1: detected capacity change from 0 to 512 [ 197.130638][ T2292] loop0: detected capacity change from 0 to 512 [ 197.185757][ T2294] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 197.523615][ T19] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 200.745021][ T2292] EXT4-fs: failed to create workqueue [ 200.750452][ T2292] EXT4-fs (loop0): mount failed [ 200.775296][ T2294] EXT4-fs (loop1): 1 truncate cleaned up [ 200.781015][ T2294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 200.844435][ T286] EXT4-fs (loop1): unmounting filesystem. [ 200.850588][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 200.857876][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 200.865223][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 200.872360][ T19] usb 4-1: device descriptor read/all, error -32 [ 201.061949][ T2316] device veth0 entered promiscuous mode [ 201.112147][ T2316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 201.155245][ T28] audit: type=1400 audit(2000000009.950:299): avc: denied { create } for pid=2322 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.278027][ T2329] loop2: detected capacity change from 0 to 128 [ 202.242045][ T28] audit: type=1400 audit(2000000009.970:300): avc: denied { bind } for pid=2322 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.274569][ T2329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 202.284020][ T2329] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.320767][ T2336] loop4: detected capacity change from 0 to 1024 [ 202.872319][ T2336] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 202.910386][ T2336] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 202.950416][ T2336] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.430: Failed to acquire dquot type 0 [ 203.000860][ T2336] EXT4-fs error (device loop4): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 203.020574][ T285] EXT4-fs (loop2): unmounting filesystem. [ 203.080363][ T2336] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.430: corrupted inode contents [ 203.112225][ T2336] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #13: comm syz.4.430: mark_inode_dirty error [ 203.141642][ T2336] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.430: corrupted inode contents [ 203.170194][ T2336] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.430: mark_inode_dirty error [ 203.190995][ T2336] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.430: corrupted inode contents [ 203.244012][ T2336] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 203.262481][ T2336] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #13: comm syz.4.430: corrupted inode contents [ 203.309373][ T2336] EXT4-fs error (device loop4): ext4_truncate:4314: inode #13: comm syz.4.430: mark_inode_dirty error [ 203.358834][ T2336] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 203.386887][ T2336] EXT4-fs (loop4): 1 truncate cleaned up [ 203.392688][ T2336] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.656456][ T2355] loop0: detected capacity change from 0 to 512 [ 205.702379][ T2355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.732493][ T284] EXT4-fs (loop4): unmounting filesystem. [ 205.748005][ T2355] EXT4-fs (loop0): 1 truncate cleaned up [ 205.754325][ T2355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 205.793542][ T28] audit: type=1400 audit(2000000014.590:301): avc: denied { create } for pid=2348 comm="syz.0.434" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 205.987142][ T283] EXT4-fs (loop0): unmounting filesystem. [ 206.938685][ T2362] loop4: detected capacity change from 0 to 512 [ 206.952618][ T2362] EXT4-fs: Ignoring removed i_version option [ 206.958790][ T2368] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.966010][ T2368] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.555510][ T2374] loop1: detected capacity change from 0 to 256 [ 207.569279][ T2368] device bridge_slave_1 left promiscuous mode [ 207.578456][ T2362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 207.590936][ T2368] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.600608][ T453] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.610998][ T2368] device bridge_slave_0 left promiscuous mode [ 207.617137][ T2368] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.929808][ T28] audit: type=1326 audit(2000000016.720:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2360 comm="syz.4.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x0 [ 208.199617][ T284] EXT4-fs (loop4): unmounting filesystem. [ 209.602836][ T2391] loop4: detected capacity change from 0 to 4096 [ 209.623410][ T2398] loop2: detected capacity change from 0 to 1024 [ 209.676232][ T2398] EXT4-fs: Ignoring removed nobh option [ 209.683922][ T2391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 209.700613][ T2398] EXT4-fs: Ignoring removed bh option [ 209.746612][ T2398] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.710273][ T284] EXT4-fs (loop4): unmounting filesystem. [ 211.734931][ T2398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.018514][ T285] EXT4-fs (loop2): unmounting filesystem. [ 213.030907][ T2414] loop4: detected capacity change from 0 to 256 [ 213.076098][ T2414] exfat: Deprecated parameter 'namecase' [ 213.082697][ T2414] exfat: Deprecated parameter 'utf8' [ 213.088049][ T2414] exfat: Deprecated parameter 'namecase' [ 213.093992][ T2414] exfat: Deprecated parameter 'utf8' [ 213.101442][ T2414] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 215.561418][ T2435] loop4: detected capacity change from 0 to 512 [ 215.571680][ T2435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.668865][ T2435] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.678631][ T2435] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.453: bg 0: block 248: padding at end of block bitmap is not set [ 215.694457][ T2435] Quota error (device loop4): write_blk: dquota write failed [ 215.702063][ T2435] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 215.712062][ T2435] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.453: Failed to acquire dquot type 1 [ 215.725361][ T2435] EXT4-fs (loop4): 1 truncate cleaned up [ 215.732657][ T2435] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 215.743882][ T2435] EXT4-fs (loop4): unmounting filesystem. [ 215.869168][ T2437] can0: slcan on ttyS3. [ 215.931932][ T28] audit: type=1400 audit(2000000007.760:303): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 216.223073][ T28] audit: type=1400 audit(2000000007.810:304): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.422321][ T28] audit: type=1400 audit(2000000007.810:305): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=4071 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.516002][ T28] audit: type=1400 audit(2000000007.810:306): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4071 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.584901][ T28] audit: type=1400 audit(2000000007.810:307): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4071 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.608197][ T28] audit: type=1400 audit(2000000008.250:308): avc: denied { read } for pid=2440 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.633253][ T28] audit: type=1400 audit(2000000008.250:309): avc: denied { open } for pid=2440 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.660572][ T28] audit: type=1400 audit(2000000008.250:310): avc: denied { getattr } for pid=2440 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.800818][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 218.185931][ T2464] xt_bpf: check failed: parse error [ 218.844976][ T2475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.458'. [ 218.941817][ T2427] can0 (unregistered): slcan off ttyS3. [ 219.392688][ T2489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 220.099648][ T2493] loop0: detected capacity change from 0 to 2048 [ 220.146618][ T2493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.211506][ T2493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 220.289175][ T2503] overlayfs: statfs failed on './file0' [ 220.402857][ T2510] device veth1_macvtap left promiscuous mode [ 220.408902][ T2510] device macsec0 entered promiscuous mode [ 220.870072][ T2535] loop1: detected capacity change from 0 to 512 [ 220.878614][ T2535] EXT4-fs: Ignoring removed nobh option [ 221.347431][ T2535] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 221.543379][ T2535] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.466: iget: bad i_size value: 38620345925642 [ 221.556834][ T2535] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.466: couldn't read orphan inode 15 (err -117) [ 221.569949][ T2535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.651688][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 221.651742][ T28] audit: type=1400 audit(2000000002.300:320): avc: denied { read append open } for pid=2528 comm="syz.1.466" path="/86/file1/blkio.bfq.io_service_time_recursive" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 222.008254][ T2541] loop3: detected capacity change from 0 to 512 [ 223.129948][ T28] audit: type=1400 audit(2000000003.800:321): avc: denied { read } for pid=87 comm="acpid" name="mouse0" dev="devtmpfs" ino=905 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 223.130231][ T1272] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:55: bg 0: block 5: invalid block bitmap [ 223.160386][ T28] audit: type=1400 audit(2000000003.800:322): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=905 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 223.187531][ T2541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.196652][ T2541] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.249162][ T2540] fuse: Bad value for 'fd' [ 223.273020][ T1272] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 223.293604][ T28] audit: type=1400 audit(2000000003.800:323): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=905 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 223.317767][ T1272] EXT4-fs (loop1): This should not happen!! Data will be lost [ 223.317767][ T1272] [ 223.328643][ T1272] EXT4-fs (loop1): Total free blocks count 0 [ 223.334886][ T1272] EXT4-fs (loop1): Free/Dirty block details [ 223.340974][ T1272] EXT4-fs (loop1): free_blocks=0 [ 223.345965][ T1272] EXT4-fs (loop1): dirty_blocks=64 [ 223.351270][ T1272] EXT4-fs (loop1): Block reservation details [ 223.384003][ T1272] EXT4-fs (loop1): i_reserved_data_blocks=64 [ 223.391461][ T286] EXT4-fs (loop1): unmounting filesystem. [ 223.501583][ T287] EXT4-fs (loop3): unmounting filesystem. [ 224.412677][ T2500] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 224.528627][ T2567] loop3: detected capacity change from 0 to 1024 [ 224.562754][ T2571] tipc: Started in network mode [ 224.567959][ T2571] tipc: Node identity ac14140f, cluster identity 4711 [ 224.575260][ T2571] tipc: New replicast peer: 255.255.255.255 [ 224.581743][ T2571] tipc: Enabled bearer , priority 10 [ 224.685865][ T2567] EXT4-fs: Ignoring removed bh option [ 224.781266][ T2567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.815956][ T2567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.496534][ T28] audit: type=1400 audit(2000000006.170:324): avc: denied { write } for pid=2566 comm="syz.3.472" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 225.701969][ T288] tipc: Node number set to 2886997007 [ 225.764763][ T2589] loop2: detected capacity change from 0 to 2048 [ 225.844611][ T2589] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 225.853244][ T2589] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.437332][ T2599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'. [ 227.947155][ T285] EXT4-fs (loop2): unmounting filesystem. [ 228.014271][ T287] EXT4-fs (loop3): unmounting filesystem. [ 228.532153][ T2615] overlayfs: failed to resolve './file1': -2 [ 235.035494][ T2673] loop4: detected capacity change from 0 to 1024 [ 235.043854][ T2673] EXT4-fs: Ignoring removed i_version option [ 235.067352][ T2673] EXT4-fs (loop4): Test dummy encryption mode enabled [ 235.078698][ T2673] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 236.794603][ T2691] loop2: detected capacity change from 0 to 512 [ 236.825477][ T2691] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 236.833771][ T2691] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 238.095099][ T2691] EXT4-fs (loop2): 1 truncate cleaned up [ 238.100848][ T2691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.793677][ T2691] kthread_run failed with err -4 [ 239.991942][ T285] EXT4-fs (loop2): unmounting filesystem. [ 240.024070][ T28] audit: type=1400 audit(2000000020.700:325): avc: denied { create } for pid=2695 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 240.066140][ T284] EXT4-fs (loop4): unmounting filesystem. [ 240.398051][ T2731] overlayfs: failed to resolve './file1': -2 [ 241.860876][ T2735] loop1: detected capacity change from 0 to 256 [ 242.035908][ T2735] FAT-fs (loop1): Directory bread(block 64) failed [ 242.042833][ T2735] FAT-fs (loop1): Directory bread(block 65) failed [ 242.049587][ T2735] FAT-fs (loop1): Directory bread(block 66) failed [ 242.056247][ T2735] FAT-fs (loop1): Directory bread(block 67) failed [ 242.062966][ T2735] FAT-fs (loop1): Directory bread(block 68) failed [ 242.069539][ T2735] FAT-fs (loop1): Directory bread(block 69) failed [ 242.076417][ T2735] FAT-fs (loop1): Directory bread(block 70) failed [ 242.083028][ T2735] FAT-fs (loop1): Directory bread(block 71) failed [ 242.089707][ T2735] FAT-fs (loop1): Directory bread(block 72) failed [ 242.096286][ T2735] FAT-fs (loop1): Directory bread(block 73) failed [ 244.668461][ T2752] netlink: 165 bytes leftover after parsing attributes in process `syz.1.512'. [ 244.718873][ T2752] netlink: 277 bytes leftover after parsing attributes in process `syz.1.512'. [ 244.754123][ T2752] loop1: detected capacity change from 0 to 1024 [ 244.782053][ T2752] EXT4-fs: Ignoring removed orlov option [ 244.787736][ T2752] EXT4-fs: quotafile must be on filesystem root [ 244.884054][ T2764] loop1: detected capacity change from 0 to 1024 [ 244.896722][ T2764] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.515: Invalid block bitmap block 0 in block_group 0 [ 244.910473][ T2764] Quota error (device loop1): write_blk: dquota write failed [ 244.917870][ T2764] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 244.928025][ T2764] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.515: Failed to acquire dquot type 0 [ 244.939692][ T2764] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.515: Freeing blocks not in datazone - block = 0, count = 4096 [ 244.954628][ T2764] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.515: Invalid inode bitmap blk 0 in block_group 0 [ 244.968596][ T2764] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 244.984305][ T1305] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 244.993780][ T2764] EXT4-fs (loop1): 1 orphan inode deleted [ 244.999578][ T2764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 245.072142][ T1305] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:88: Failed to release dquot type 0 [ 245.898210][ T2770] loop4: detected capacity change from 0 to 16 [ 245.922966][ T2770] erofs: (device loop4): mounted with root inode @ nid 36. [ 245.944710][ T28] audit: type=1400 audit(2000000026.620:326): avc: denied { map } for pid=2756 comm="syz.4.514" path="/106/file2/file2" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.948258][ T2773] loop2: detected capacity change from 0 to 1024 [ 245.972181][ T2758] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 245.976300][ T2773] EXT4-fs: Ignoring removed i_version option [ 245.989595][ T2758] bio_check_eod: 3570 callbacks suppressed [ 245.989611][ T2758] syz.4.514: attempt to access beyond end of device [ 245.989611][ T2758] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 245.990498][ T2773] EXT4-fs (loop2): Test dummy encryption mode enabled [ 245.998613][ T2758] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 246.012030][ T2773] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 246.016395][ T2758] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 246.052479][ T286] EXT4-fs (loop1): unmounting filesystem. [ 246.088658][ T2758] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 246.099505][ T2758] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4096] [ 246.120553][ T2765] syz.4.514: attempt to access beyond end of device [ 246.120553][ T2765] loop4: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 246.138824][ T2778] xt_hashlimit: size too large, truncated to 1048576 [ 246.157330][ T2765] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 246.184390][ T2765] syz.4.514: attempt to access beyond end of device [ 246.184390][ T2765] loop4: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 246.241167][ T2765] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 246.260937][ T28] audit: type=1400 audit(2000000026.940:327): avc: denied { map } for pid=2772 comm="syz.2.517" path="/101/file0/cpuacct.usage_percpu_sys" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 246.273785][ T2765] syz.4.514: attempt to access beyond end of device [ 246.273785][ T2765] loop4: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 246.786287][ T2765] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 246.822987][ T285] EXT4-fs (loop2): unmounting filesystem. [ 246.876490][ T2789] loop2: detected capacity change from 0 to 256 [ 247.018674][ T2789] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 247.280254][ T2797] xt_l2tp: unknown flags: 17 [ 249.946113][ T2819] syz.3.527[2819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.946439][ T2819] syz.3.527[2819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.048065][ T2820] loop3: detected capacity change from 0 to 128 [ 251.018917][ T2824] device wireguard0 entered promiscuous mode [ 251.066392][ T28] audit: type=1400 audit(2000000031.730:328): avc: denied { watch watch_reads } for pid=2821 comm="syz.1.529" path="/101/file0" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 251.157717][ T2831] loop3: detected capacity change from 0 to 512 [ 252.158398][ T2831] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 252.167206][ T2831] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 252.178334][ T2831] EXT4-fs (loop3): 1 truncate cleaned up [ 252.184181][ T2831] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 253.049618][ T2831] kthread_run failed with err -4 [ 253.118609][ T287] EXT4-fs (loop3): unmounting filesystem. [ 253.479237][ T2848] loop1: detected capacity change from 0 to 1024 [ 253.510624][ T2848] EXT4-fs: Ignoring removed i_version option [ 253.532752][ T2849] loop4: detected capacity change from 0 to 4096 [ 253.539740][ T2848] EXT4-fs (loop1): Test dummy encryption mode enabled [ 253.563276][ T2849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 253.572532][ T2848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 253.690793][ T286] EXT4-fs (loop1): unmounting filesystem. [ 254.115871][ T2864] loop3: detected capacity change from 0 to 256 [ 254.134121][ T2864] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 256.419918][ T284] EXT4-fs (loop4): unmounting filesystem. [ 257.074326][ T2882] loop7: detected capacity change from 0 to 7 [ 258.080912][ T2878] loop2: detected capacity change from 0 to 512 [ 258.087612][ T2878] EXT4-fs: Ignoring removed nobh option [ 258.123840][ T2878] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 258.346782][ T2878] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.540: iget: bad i_size value: 38620345925642 [ 258.360202][ T2878] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.540: couldn't read orphan inode 15 (err -117) [ 258.373216][ T2878] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.909973][ T2887] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 258.930492][ T2889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 258.949443][ T28] audit: type=1400 audit(2000000039.620:329): avc: denied { read } for pid=2886 comm="syz.0.543" path="socket:[22194]" dev="sockfs" ino=22194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.041104][ T2892] bridge1: port 1(veth1) entered blocking state [ 259.069045][ T2892] bridge1: port 1(veth1) entered disabled state [ 259.086922][ T2892] device veth1 entered promiscuous mode [ 259.116684][ T2889] bridge1: port 2(veth0_to_bond) entered blocking state [ 259.144815][ T2889] bridge1: port 2(veth0_to_bond) entered disabled state [ 259.162469][ T1314] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 259.186443][ T2889] device veth0_to_bond entered promiscuous mode [ 259.208038][ T2900] bridge1: port 3(vlan2) entered blocking state [ 259.215104][ T1314] EXT4-fs (loop2): This should not happen!! Data will be lost [ 259.215104][ T1314] [ 259.224892][ T1314] EXT4-fs (loop2): Total free blocks count 0 [ 259.235650][ T1314] EXT4-fs (loop2): Free/Dirty block details [ 259.241661][ T1314] EXT4-fs (loop2): free_blocks=0 [ 259.243667][ T2900] bridge1: port 3(vlan2) entered disabled state [ 259.246679][ T1314] EXT4-fs (loop2): dirty_blocks=64 [ 259.258063][ T1314] EXT4-fs (loop2): Block reservation details [ 259.263704][ T2900] device vlan2 entered promiscuous mode [ 259.264133][ T1314] EXT4-fs (loop2): i_reserved_data_blocks=64 [ 259.276045][ T2900] device veth0_to_hsr entered promiscuous mode [ 259.283040][ T285] EXT4-fs (loop2): unmounting filesystem. [ 259.444692][ T2910] loop4: detected capacity change from 0 to 512 [ 259.694592][ T2912] xt_l2tp: unknown flags: 17 [ 260.547588][ T2910] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 260.555802][ T2910] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 260.571261][ T2910] EXT4-fs (loop4): 1 truncate cleaned up [ 260.577006][ T2910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 261.876145][ T2907] loop1: detected capacity change from 0 to 2048 [ 261.893516][ T2907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.910385][ T2907] EXT4-fs: Ignoring removed nobh option [ 261.956455][ T2923] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 261.991677][ T2907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 262.089872][ T28] audit: type=1400 audit(2000000042.700:330): avc: denied { write } for pid=2906 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 262.170649][ T284] EXT4-fs (loop4): unmounting filesystem. [ 262.984883][ T2937] device wireguard0 entered promiscuous mode [ 263.050949][ T2939] loop2: detected capacity change from 0 to 256 [ 263.057657][ T2939] exfat: Deprecated parameter 'namecase' [ 263.063552][ T2939] exfat: Deprecated parameter 'utf8' [ 263.101587][ T2939] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 265.096658][ T2951] overlayfs: missing 'lowerdir' [ 265.114637][ T2951] loop2: detected capacity change from 0 to 256 [ 265.154401][ T2951] FAT-fs (loop2): Directory bread(block 64) failed [ 265.161298][ T2951] FAT-fs (loop2): Directory bread(block 65) failed [ 265.168045][ T2951] FAT-fs (loop2): Directory bread(block 66) failed [ 265.174804][ T2951] FAT-fs (loop2): Directory bread(block 67) failed [ 265.181614][ T2951] FAT-fs (loop2): Directory bread(block 68) failed [ 265.188213][ T2951] FAT-fs (loop2): Directory bread(block 69) failed [ 265.195038][ T2951] FAT-fs (loop2): Directory bread(block 70) failed [ 265.201656][ T2951] FAT-fs (loop2): Directory bread(block 71) failed [ 265.208411][ T2951] FAT-fs (loop2): Directory bread(block 72) failed [ 265.215019][ T2951] FAT-fs (loop2): Directory bread(block 73) failed [ 265.241099][ T2916] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 265.538095][ T2916] EXT4-fs (loop1): Remounting filesystem read-only [ 265.562607][ T286] EXT4-fs (loop1): unmounting filesystem. [ 265.695365][ T2958] loop4: detected capacity change from 0 to 512 [ 265.702309][ T2958] EXT4-fs: Ignoring removed nobh option [ 266.197022][ T28] audit: type=1400 audit(2000000046.730:331): avc: denied { remount } for pid=2952 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 266.273950][ T2958] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 269.923454][ T2958] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.557: iget: bad i_size value: 38620345925642 [ 269.936468][ T2958] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.557: couldn't read orphan inode 15 (err -117) [ 269.948649][ T2958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 269.987676][ T284] EXT4-fs (loop4): unmounting filesystem. [ 270.138990][ T2977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 270.159380][ T2977] device bridge0 entered promiscuous mode [ 270.167475][ T2977] bridge0: port 3(macsec1) entered blocking state [ 270.173999][ T2977] bridge0: port 3(macsec1) entered disabled state [ 270.190441][ T2977] device bridge0 left promiscuous mode [ 270.221779][ T2976] loop4: detected capacity change from 0 to 512 [ 270.309782][ T2976] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.331222][ T2976] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 270.354704][ T2976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 270.363528][ T2976] EXT4-fs (loop4): orphan cleanup on readonly fs [ 270.371487][ T2976] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.563: bg 0: block 361: padding at end of block bitmap is not set [ 270.386035][ T2976] EXT4-fs (loop4): Remounting filesystem read-only [ 270.392704][ T2976] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 270.401742][ T2976] EXT4-fs (loop4): Remounting filesystem read-only [ 270.408324][ T2976] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.563: attempt to clear invalid blocks 33619980 len 1 [ 270.422196][ T2976] EXT4-fs (loop4): Remounting filesystem read-only [ 270.429089][ T2976] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.563: invalid indirect mapped block 1811939328 (level 0) [ 270.443382][ T2976] EXT4-fs (loop4): Remounting filesystem read-only [ 270.450010][ T2976] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.563: invalid indirect mapped block 2185560079 (level 1) [ 270.464290][ T2976] EXT4-fs (loop4): Remounting filesystem read-only [ 270.471044][ T2976] EXT4-fs (loop4): 1 truncate cleaned up [ 270.476818][ T2976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 270.701400][ T2983] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.563: dx entry: limit 0 != root limit 125 [ 270.713304][ T2983] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.563: Corrupt directory, running e2fsck is recommended [ 271.491945][ T2989] loop2: detected capacity change from 0 to 512 [ 271.645619][ T2989] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.566: casefold flag without casefold feature [ 271.692070][ T284] EXT4-fs (loop4): unmounting filesystem. [ 271.866108][ T2989] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.566: couldn't read orphan inode 15 (err -117) [ 271.990653][ T2989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 273.093330][ T285] EXT4-fs (loop2): unmounting filesystem. [ 273.129583][ T3015] netlink: 'syz.4.567': attribute type 4 has an invalid length. [ 273.846843][ T3012] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 273.992703][ T3021] loop2: detected capacity change from 0 to 512 [ 274.334138][ T3021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 274.343451][ T3021] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.393221][ T285] EXT4-fs (loop2): unmounting filesystem. [ 275.561161][ T28] audit: type=1400 audit(2000000056.240:332): avc: denied { nlmsg_read } for pid=3033 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.561165][ T3036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 276.588101][ T28] audit: type=1400 audit(2000000057.260:333): avc: denied { mounton } for pid=3045 comm="syz.0.586" path="/118/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 276.609321][ T3046] incfs_lookup_dentry err:-14 [ 276.616458][ T3046] incfs: Can't find or create .index dir in ./file0 [ 276.630468][ T3046] incfs: mount failed -14 [ 277.357817][ T3055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 277.400125][ T3055] device bridge0 entered promiscuous mode [ 277.412986][ T3055] bridge0: port 3(macsec1) entered blocking state [ 277.419546][ T3055] bridge0: port 3(macsec1) entered disabled state [ 278.494954][ T3055] device bridge0 left promiscuous mode [ 278.960614][ T28] audit: type=1400 audit(2000000059.630:334): avc: denied { mount } for pid=3059 comm="syz.0.579" name="/" dev="configfs" ino=12708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 278.983733][ T28] audit: type=1400 audit(2000000059.630:335): avc: denied { search } for pid=3059 comm="syz.0.579" name="/" dev="configfs" ino=12708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 279.007815][ T28] audit: type=1400 audit(2000000059.630:336): avc: denied { read } for pid=3059 comm="syz.0.579" name="/" dev="configfs" ino=12708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 279.035825][ T28] audit: type=1400 audit(2000000059.630:337): avc: denied { open } for pid=3059 comm="syz.0.579" path="/" dev="configfs" ino=12708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 279.773204][ T3084] loop3: detected capacity change from 0 to 128 [ 279.954568][ T3085] loop4: detected capacity change from 0 to 256 [ 281.017449][ T3084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 281.036150][ T3084] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 281.225639][ T287] EXT4-fs (loop3): unmounting filesystem. [ 281.406332][ T3110] loop2: detected capacity change from 0 to 256 [ 281.413538][ T3110] exfat: Unknown parameter 'iochar' [ 282.438254][ T3110] netlink: 9 bytes leftover after parsing attributes in process `syz.2.589'. [ 282.449355][ T3110] device gretap0 entered promiscuous mode [ 283.574700][ T3121] loop2: detected capacity change from 0 to 512 [ 283.616201][ T3121] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 283.659131][ T3121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 283.695755][ T3121] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.761332][ T285] EXT4-fs (loop2): unmounting filesystem. [ 284.099017][ T3140] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 284.195391][ T3142] loop3: detected capacity change from 0 to 512 [ 284.434577][ T3142] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 284.443972][ T3142] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.264539][ T3132] loop4: detected capacity change from 0 to 2048 [ 285.317943][ T28] audit: type=1400 audit(2000000065.990:338): avc: denied { mounton } for pid=3131 comm="syz.4.597" path="/file0" dev="ramfs" ino=22785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 285.343041][ T287] EXT4-fs (loop3): unmounting filesystem. [ 285.379154][ T3132] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 285.485638][ T3132] EXT4-fs (loop4): unmounting filesystem. [ 287.070481][ T3154] overlayfs: missing 'lowerdir' [ 287.928749][ T3170] loop3: detected capacity change from 0 to 512 [ 290.695823][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 290.705254][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 290.714704][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 290.724131][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 290.733530][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 290.742971][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 290.752342][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 290.761702][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 290.771082][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 290.780347][ T3173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 290.790923][ T3173] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 291.167532][ T3170] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 291.176614][ T3170] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.472991][ T287] EXT4-fs (loop3): unmounting filesystem. [ 292.568514][ T3185] loop1: detected capacity change from 0 to 128 [ 292.600058][ T3185] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 292.676854][ T3185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 294.842779][ T3185] ext2 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.878431][ T28] audit: type=1400 audit(2000000075.550:339): avc: denied { create } for pid=3184 comm="syz.1.609" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 294.896317][ T3190] loop4: detected capacity change from 0 to 8192 [ 296.124128][ T286] EXT4-fs (loop1): unmounting filesystem. [ 297.286708][ T3222] syz.4.615[3222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.288239][ T3222] syz.4.615[3222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.567449][ T3223] loop4: detected capacity change from 0 to 128 [ 301.286422][ T3222] tty tty29: ldisc open failed (-12), clearing slot 28 [ 301.336999][ T3227] loop3: detected capacity change from 0 to 128 [ 301.362110][ T3230] loop2: detected capacity change from 0 to 2048 [ 301.493310][ T3230] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 303.436740][ T3252] loop4: detected capacity change from 0 to 512 [ 304.147360][ T3252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 304.156878][ T3252] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.459829][ T3260] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 304.690992][ T284] EXT4-fs (loop4): unmounting filesystem. [ 304.721252][ T1304] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 305.053385][ T1304] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 305.092158][ T1304] EXT4-fs (loop2): This should not happen!! Data will be lost [ 305.092158][ T1304] [ 305.102026][ T1304] EXT4-fs (loop2): Total free blocks count 0 [ 305.108096][ T1304] EXT4-fs (loop2): Free/Dirty block details [ 305.132707][ T1304] EXT4-fs (loop2): free_blocks=4096 [ 305.138073][ T1304] EXT4-fs (loop2): dirty_blocks=944 [ 305.149804][ T1304] EXT4-fs (loop2): Block reservation details [ 305.161104][ T1304] EXT4-fs (loop2): i_reserved_data_blocks=59 [ 305.183046][ T1304] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 912 with error 28 [ 305.281900][ T3276] loop2: detected capacity change from 0 to 512 [ 305.299802][ T3276] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 305.309189][ T3276] EXT4-fs (loop2): orphan cleanup on readonly fs [ 305.315832][ T3276] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.623: bad orphan inode 15 [ 305.326217][ T3276] ext4_test_bit(bit=14, block=18) = 1 [ 305.332916][ T3276] is_bad_inode(inode)=0 [ 305.426001][ T3279] __nla_validate_parse: 46 callbacks suppressed [ 305.426017][ T3279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 305.592266][ T3276] NEXT_ORPHAN(inode)=1023 [ 305.596815][ T3276] max_ino=32 [ 305.620427][ T3276] i_nlink=0 [ 305.643614][ T3276] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2934: inode #15: comm syz.2.623: corrupted xattr block 19 [ 305.702668][ T3276] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 305.711998][ T3276] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 307.553644][ T28] audit: type=1400 audit(2000000087.330:340): avc: denied { accept } for pid=3283 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 307.598989][ T28] audit: type=1400 audit(2000000087.950:341): avc: denied { append } for pid=3283 comm="syz.4.630" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 307.889809][ T3298] syz.0.632[3298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.890468][ T3298] syz.0.632[3298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.883826][ T1754] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 308.980439][ T3301] loop4: detected capacity change from 0 to 512 [ 308.991959][ T3301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 309.090665][ T3310] loop3: detected capacity change from 0 to 512 [ 309.097273][ T3310] EXT4-fs: Ignoring removed nobh option [ 309.121412][ T3310] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 309.424231][ T3313] loop1: detected capacity change from 0 to 256 [ 311.285130][ T3301] EXT4-fs (loop4): 1 truncate cleaned up [ 311.291130][ T3301] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 311.641643][ T3310] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.634: iget: bad i_size value: 38620345925642 [ 311.656723][ T3310] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.634: couldn't read orphan inode 15 (err -117) [ 311.671789][ T3310] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 312.591409][ T1302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:85: bg 0: block 5: invalid block bitmap [ 312.731828][ T284] EXT4-fs (loop4): unmounting filesystem. [ 312.734765][ T1302] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 312.770672][ T1302] EXT4-fs (loop3): This should not happen!! Data will be lost [ 312.770672][ T1302] [ 313.006343][ T1302] EXT4-fs (loop3): Total free blocks count 0 [ 313.035207][ T1302] EXT4-fs (loop3): Free/Dirty block details [ 313.041239][ T1302] EXT4-fs (loop3): free_blocks=0 [ 313.046278][ T1302] EXT4-fs (loop3): dirty_blocks=64 [ 313.051505][ T1302] EXT4-fs (loop3): Block reservation details [ 313.057564][ T1302] EXT4-fs (loop3): i_reserved_data_blocks=64 [ 313.068299][ T287] EXT4-fs (loop3): unmounting filesystem. [ 313.096896][ T3330] loop3: detected capacity change from 0 to 128 [ 313.125090][ T3330] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 313.135141][ T3330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 313.144114][ T3330] ext2 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.630435][ T28] audit: type=1400 audit(2000000094.280:342): avc: denied { read } for pid=3329 comm="syz.3.640" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 313.883056][ T3341] loop4: detected capacity change from 0 to 256 [ 314.350716][ T3341] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.365215][ T287] EXT4-fs (loop3): unmounting filesystem. [ 314.367360][ T3341] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 314.383097][ T3341] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 314.431012][ T28] audit: type=1400 audit(2000000095.110:343): avc: denied { read append open } for pid=3339 comm="syz.4.643" path="/131/file0/memory.events.local" dev="loop4" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 314.472150][ T285] EXT4-fs (loop2): unmounting filesystem. [ 315.478958][ T3350] loop3: detected capacity change from 0 to 1024 [ 315.646943][ T3350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 316.369234][ T287] EXT4-fs (loop3): unmounting filesystem. [ 316.669850][ T3365] overlayfs: failed to resolve './bus': -2 [ 317.131734][ T3370] loop1: detected capacity change from 0 to 512 [ 317.140226][ T3370] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.238027][ T3371] loop3: detected capacity change from 0 to 256 [ 318.401263][ T3373] netlink: 552 bytes leftover after parsing attributes in process `syz.0.652'. [ 318.419358][ T3373] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 318.586480][ T3370] EXT4-fs (loop1): 1 truncate cleaned up [ 318.962692][ T3370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 318.990165][ T3382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.652'. [ 319.066414][ T3383] device bridge0 entered promiscuous mode [ 319.369099][ T3393] loop2: detected capacity change from 0 to 128 [ 319.382133][ T3393] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 319.399130][ T3393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.407984][ T3393] ext2 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.703217][ T3400] tipc: Started in network mode [ 319.708141][ T3400] tipc: Node identity 4, cluster identity 4711 [ 319.714363][ T3400] tipc: Node number set to 4 [ 319.858283][ T3401] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 320.599640][ T285] EXT4-fs (loop2): unmounting filesystem. [ 320.930304][ T1754] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 321.049741][ T3408] loop3: detected capacity change from 0 to 1024 [ 321.059696][ T3408] EXT4-fs: Ignoring removed i_version option [ 321.075888][ T3412] loop4: detected capacity change from 0 to 512 [ 321.079455][ T3410] loop2: detected capacity change from 0 to 4096 [ 321.088896][ T3408] EXT4-fs (loop3): Test dummy encryption mode enabled [ 321.102138][ T3410] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 321.120317][ T1754] usb 1-1: Using ep0 maxpacket: 8 [ 321.131551][ T1754] usb 1-1: config index 0 descriptor too short (expected 17188, got 36) [ 321.158098][ T3408] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 321.158734][ T1754] usb 1-1: config 214 has too many interfaces: 223, using maximum allowed: 32 [ 321.176474][ T1754] usb 1-1: config 214 has 1 interface, different from the descriptor's value: 223 [ 321.187256][ T3412] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.661: casefold flag without casefold feature [ 321.210174][ T1754] usb 1-1: config 214 has no interface number 0 [ 321.218068][ T1754] usb 1-1: config 214 interface 60 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 321.228426][ T1754] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 321.254163][ T3412] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.661: couldn't read orphan inode 15 (err -117) [ 321.269865][ T1754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.278486][ T3412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 322.685243][ T3424] loop2: detected capacity change from 0 to 256 [ 322.717631][ T3424] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 323.280781][ T1754] usb 1-1: string descriptor 0 read error: -71 [ 323.287826][ T284] EXT4-fs (loop4): unmounting filesystem. [ 323.290828][ T1754] ftdi_sio 1-1:214.60: FTDI USB Serial Device converter detected [ 323.305917][ T286] EXT4-fs (loop1): unmounting filesystem. [ 323.317535][ T1754] usb 1-1: Detected SIO [ 323.329127][ T1754] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 11 [ 323.340165][ T1754] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 323.360962][ T1754] usb 1-1: USB disconnect, device number 3 [ 323.368189][ T1754] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 323.379731][ T1754] ftdi_sio 1-1:214.60: device disconnected [ 323.393792][ T3431] loop4: detected capacity change from 0 to 512 [ 323.403848][ T3431] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 323.425572][ T3431] EXT4-fs (loop4): orphan cleanup on readonly fs [ 323.470187][ T3431] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.663: Block bitmap for bg 0 marked uninitialized [ 323.483794][ T3431] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 323.494051][ T3431] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.663: Block bitmap for bg 0 marked uninitialized [ 323.507651][ T3431] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 324.393615][ T3431] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.663: Block bitmap for bg 0 marked uninitialized [ 324.417267][ T3431] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 324.430507][ T28] audit: type=1400 audit(2000000105.100:344): avc: denied { mount } for pid=3435 comm="syz.2.665" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 324.453037][ T3436] tmpfs: Bad value for 'nr_blocks' [ 324.461579][ T3431] EXT4-fs (loop4): 1 orphan inode deleted [ 324.467389][ T3431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 324.470311][ T28] audit: type=1400 audit(2000000105.130:345): avc: denied { remount } for pid=3435 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 324.654986][ T284] EXT4-fs (loop4): unmounting filesystem. [ 324.802719][ T287] EXT4-fs (loop3): unmounting filesystem. [ 325.890493][ T3465] loop3: detected capacity change from 0 to 256 [ 326.182004][ T28] audit: type=1400 audit(2000000106.820:346): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 326.422402][ T451] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 326.874077][ T3475] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 326.942524][ T451] usb 4-1: config 0 has an invalid interface number: 203 but max is 0 [ 326.983385][ T451] usb 4-1: config 0 has no interface number 0 [ 327.048333][ T451] usb 4-1: config 0 interface 203 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 327.174302][ T451] usb 4-1: New USB device found, idVendor=0cde, idProduct=0027, bcdDevice=18.50 [ 327.183549][ T451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.282889][ T451] usb 4-1: Product: syz [ 328.287140][ T451] usb 4-1: Manufacturer: syz [ 328.294702][ T3484] loop4: detected capacity change from 0 to 128 [ 328.307516][ T451] usb 4-1: SerialNumber: syz [ 328.440547][ T28] audit: type=1400 audit(2000000109.040:347): avc: denied { bind } for pid=3479 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.538128][ T451] usb 4-1: config 0 descriptor?? [ 328.972265][ T3491] loop2: detected capacity change from 0 to 512 [ 328.983908][ T3491] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 329.010211][ T3491] EXT4-fs (loop2): orphan cleanup on readonly fs [ 329.016816][ T3491] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.679: Block bitmap for bg 0 marked uninitialized [ 329.030498][ T3491] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 329.039607][ T3491] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.679: Block bitmap for bg 0 marked uninitialized [ 329.053184][ T3491] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 329.062421][ T3491] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.679: Block bitmap for bg 0 marked uninitialized [ 329.082051][ T3491] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 329.091459][ T3491] EXT4-fs (loop2): 1 orphan inode deleted [ 329.099583][ T3491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 329.132592][ T3497] loop1: detected capacity change from 0 to 256 [ 329.147571][ T3497] FAT-fs (loop1): Directory bread(block 64) failed [ 329.154393][ T3497] FAT-fs (loop1): Directory bread(block 65) failed [ 329.193853][ T3497] FAT-fs (loop1): Directory bread(block 66) failed [ 329.202146][ T3497] FAT-fs (loop1): Directory bread(block 67) failed [ 329.208741][ T3497] FAT-fs (loop1): Directory bread(block 68) failed [ 329.215487][ T3497] FAT-fs (loop1): Directory bread(block 69) failed [ 329.222103][ T3497] FAT-fs (loop1): Directory bread(block 70) failed [ 329.228637][ T3497] FAT-fs (loop1): Directory bread(block 71) failed [ 329.235816][ T3497] FAT-fs (loop1): Directory bread(block 72) failed [ 329.242388][ T3497] FAT-fs (loop1): Directory bread(block 73) failed [ 329.279100][ T28] audit: type=1400 audit(2000000109.950:348): avc: denied { write } for pid=3495 comm="syz.1.680" name="sockstat" dev="proc" ino=4026532574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 329.422416][ T285] EXT4-fs (loop2): unmounting filesystem. [ 329.632064][ T3504] loop2: detected capacity change from 0 to 256 [ 330.780392][ T603] usb 4-1: USB disconnect, device number 6 [ 330.795372][ T3504] syz.2.682 (3504) used greatest stack depth: 19520 bytes left [ 330.880401][ T3506] loop4: detected capacity change from 0 to 1024 [ 330.919733][ T3506] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 331.040750][ T3516] tipc: Started in network mode [ 331.045752][ T3516] tipc: Node identity 4, cluster identity 4711 [ 331.052161][ T3516] tipc: Node number set to 4 [ 332.491311][ T3506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 332.499951][ T3506] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.100047][ T284] EXT4-fs (loop4): unmounting filesystem. [ 333.163978][ T3526] loop2: detected capacity change from 0 to 256 [ 334.674965][ T28] audit: type=1400 audit(2000000114.550:349): avc: denied { setopt } for pid=3527 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 335.125052][ T28] audit: type=1400 audit(2000000115.800:350): avc: denied { read } for pid=3525 comm="syz.2.689" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 335.149323][ T28] audit: type=1400 audit(2000000115.800:351): avc: denied { open } for pid=3525 comm="syz.2.689" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 335.803017][ T3548] netlink: 'syz.3.694': attribute type 27 has an invalid length. [ 335.874809][ T3548] device sit0 left promiscuous mode [ 335.884059][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.891250][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.964200][ T3548] device macsec0 left promiscuous mode [ 335.997110][ T3552] capability: warning: `syz.1.696' uses deprecated v2 capabilities in a way that may be insecure [ 336.471133][ T3571] loop1: detected capacity change from 0 to 1024 [ 336.496922][ T3571] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 336.522097][ T3571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 336.531216][ T3571] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.614876][ T28] audit: type=1400 audit(2000000117.280:352): avc: denied { write } for pid=3567 comm="syz.4.701" path="socket:[23404]" dev="sockfs" ino=23404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 336.679183][ T3566] loop3: detected capacity change from 0 to 40427 [ 336.689247][ T3566] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 336.805509][ T3566] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 336.831707][ T3566] F2FS-fs (loop3): invalid crc value [ 336.868790][ T3566] F2FS-fs (loop3): Found nat_bits in checkpoint [ 336.954323][ T3566] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 336.961547][ T3566] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 338.919727][ T28] audit: type=1400 audit(2000000119.130:353): avc: denied { create } for pid=3576 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 338.954057][ T286] EXT4-fs (loop1): unmounting filesystem. [ 339.099998][ T28] audit: type=1400 audit(2000000119.140:354): avc: denied { sys_admin } for pid=3576 comm="syz.2.702" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 339.268445][ T3599] netlink: 552 bytes leftover after parsing attributes in process `syz.1.703'. [ 339.322548][ T3599] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 339.362771][ T3603] netlink: 32 bytes leftover after parsing attributes in process `syz.1.703'. [ 339.418670][ T3605] loop1: detected capacity change from 0 to 1024 [ 339.472770][ T3605] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 339.732764][ T3601] loop4: detected capacity change from 0 to 32768 [ 340.339061][ T3624] loop2: detected capacity change from 0 to 512 [ 340.354796][ T3624] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.711: casefold flag without casefold feature [ 340.443381][ T3627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.710'. [ 340.505550][ T3624] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.711: couldn't read orphan inode 15 (err -117) [ 340.640483][ T3624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 340.668581][ T3631] loop3: detected capacity change from 0 to 512 [ 340.693032][ T3631] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.714: casefold flag without casefold feature [ 340.706008][ T3631] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.714: couldn't read orphan inode 15 (err -117) [ 340.718714][ T3631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 341.175346][ T28] audit: type=1400 audit(2000000121.850:355): avc: denied { read } for pid=3637 comm="syz.0.715" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 341.209076][ T28] audit: type=1400 audit(2000000121.870:356): avc: denied { open } for pid=3637 comm="syz.0.715" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 341.233617][ T28] audit: type=1400 audit(2000000121.900:357): avc: denied { ioctl } for pid=3637 comm="syz.0.715" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 345.576649][ T28] audit: type=1326 audit(2000000126.250:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76d98f6c9 code=0x7ffc0000 [ 345.652331][ T28] audit: type=1326 audit(2000000126.310:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe76d98f6c9 code=0x7ffc0000 [ 345.697815][ T28] audit: type=1326 audit(2000000126.310:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76d98f6c9 code=0x7ffc0000 [ 345.728689][ T28] audit: type=1326 audit(2000000126.310:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76d98f6c9 code=0x7ffc0000 [ 345.766155][ T287] EXT4-fs (loop3): unmounting filesystem. [ 345.772446][ T28] audit: type=1326 audit(2000000126.310:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe76d98f6c9 code=0x7ffc0000 [ 346.073921][ T3666] netlink: 552 bytes leftover after parsing attributes in process `syz.3.720'. [ 346.100506][ T28] audit: type=1326 audit(2000000126.310:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76d98f6c9 code=0x7ffc0000 [ 346.124028][ T28] audit: type=1326 audit(2000000126.310:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76d98f6c9 code=0x7ffc0000 [ 346.148916][ T3667] netlink: 32 bytes leftover after parsing attributes in process `syz.3.720'. [ 346.171928][ T3666] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 346.180920][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 346.180934][ T28] audit: type=1326 audit(2000000126.860:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe76d986567 code=0x7ffc0000 [ 346.213492][ T28] audit: type=1326 audit(2000000126.860:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe76d92b779 code=0x7ffc0000 [ 346.249133][ T28] audit: type=1326 audit(2000000126.860:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe76d98f6c9 code=0x7ffc0000 [ 346.286827][ T28] audit: type=1326 audit(2000000126.860:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe76d986567 code=0x7ffc0000 [ 346.311997][ T28] audit: type=1326 audit(2000000126.860:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe76d92b779 code=0x7ffc0000 [ 346.335368][ T28] audit: type=1326 audit(2000000126.860:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe76d98f6c9 code=0x7ffc0000 [ 346.336864][ T3665] loop3: detected capacity change from 0 to 1024 [ 346.410123][ T3665] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 346.425595][ T28] audit: type=1326 audit(2000000126.860:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe76d986567 code=0x7ffc0000 [ 346.452151][ T28] audit: type=1326 audit(2000000126.860:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe76d92b779 code=0x7ffc0000 [ 346.475439][ T28] audit: type=1326 audit(2000000126.860:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe76d98f6c9 code=0x7ffc0000 [ 346.509316][ T28] audit: type=1326 audit(2000000126.860:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe76d986567 code=0x7ffc0000 [ 346.560650][ T285] EXT4-fs (loop2): unmounting filesystem. [ 348.287929][ T3683] loop1: detected capacity change from 0 to 1024 [ 348.416045][ T3682] device gretap0 left promiscuous mode [ 348.432710][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.439882][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.561761][ T3683] EXT4-fs: failed to create workqueue [ 349.567192][ T3683] EXT4-fs (loop1): mount failed [ 351.671837][ T3714] loop1: detected capacity change from 0 to 256 [ 351.680909][ T3714] exfat: Deprecated parameter 'utf8' [ 351.796700][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 351.796740][ T28] audit: type=1400 audit(2000000132.470:492): avc: denied { ioctl } for pid=3706 comm="syz.3.741" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 351.843262][ T3714] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011d93, chksum : 0x8501cc5b, utbl_chksum : 0xe619d30d) [ 351.879191][ T28] audit: type=1400 audit(2000000132.530:493): avc: denied { set_context_mgr } for pid=3706 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 351.992202][ T28] audit: type=1400 audit(2000000132.670:494): avc: denied { write } for pid=3703 comm="syz.1.728" path="/140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 352.096340][ T3717] binder: 3706:3717 unknown command 0 [ 352.101838][ T3717] binder: 3706:3717 ioctl c0306201 200000000080 returned -22 [ 352.174994][ T3719] netlink: 'syz.1.731': attribute type 27 has an invalid length. [ 352.304015][ T3719] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.311290][ T3719] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.634495][ T28] audit: type=1326 audit(2000000133.310:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 356.390086][ T28] audit: type=1326 audit(2000000136.720:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 356.537853][ T28] audit: type=1326 audit(2000000136.720:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 356.609008][ T28] audit: type=1326 audit(2000000136.720:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 356.714589][ T28] audit: type=1326 audit(2000000136.720:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 356.797781][ T28] audit: type=1326 audit(2000000136.720:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 356.993235][ T28] audit: type=1326 audit(2000000136.720:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 357.092306][ T3738] loop2: detected capacity change from 0 to 1024 [ 357.114426][ T3744] loop4: detected capacity change from 0 to 512 [ 357.131054][ T3738] EXT4-fs: Ignoring removed i_version option [ 357.720466][ T3746] loop1: detected capacity change from 0 to 1024 [ 357.795545][ T3746] EXT4-fs: Ignoring removed i_version option [ 357.943757][ T28] audit: type=1326 audit(2000000136.720:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 358.462032][ T3738] EXT4-fs (loop2): Test dummy encryption mode enabled [ 358.485089][ T28] audit: type=1326 audit(2000000136.720:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 358.510484][ T28] audit: type=1326 audit(2000000136.720:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 358.534159][ T28] audit: type=1326 audit(2000000136.720:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 358.597037][ T28] audit: type=1326 audit(2000000136.720:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 358.615214][ T3744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 358.628811][ T28] audit: type=1326 audit(2000000136.720:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 358.630088][ T3738] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 358.652697][ T28] audit: type=1326 audit(2000000136.720:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3722 comm="syz.4.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 358.680638][ T3744] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.684887][ T3746] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.749: Invalid block bitmap block 0 in block_group 0 [ 358.708622][ T3746] Quota error (device loop1): write_blk: dquota write failed [ 358.716083][ T3746] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 358.726889][ T3746] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.749: Failed to acquire dquot type 0 [ 358.738328][ T3746] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.749: Freeing blocks not in datazone - block = 0, count = 4096 [ 358.752278][ T3746] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.749: Invalid inode bitmap blk 0 in block_group 0 [ 358.755631][ T1252] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:35: Failed to release dquot type 0 [ 358.778176][ T3746] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 358.786897][ T3746] EXT4-fs (loop1): 1 orphan inode deleted [ 358.792736][ T3746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 358.824501][ T3746] device lo entered promiscuous mode [ 358.830656][ T3746] device tunl0 entered promiscuous mode [ 358.836716][ T3746] device gre0 entered promiscuous mode [ 358.843373][ T3746] device gretap0 entered promiscuous mode [ 358.849651][ T3746] device erspan0 entered promiscuous mode [ 358.855964][ T3746] device ip_vti0 entered promiscuous mode [ 358.863682][ T3746] device ip6_vti0 entered promiscuous mode [ 358.870029][ T3746] device sit0 entered promiscuous mode [ 358.877208][ T3746] device ip6tnl0 entered promiscuous mode [ 358.883504][ T3746] device ip6gre0 entered promiscuous mode [ 358.889830][ T3746] device syz_tun entered promiscuous mode [ 358.896201][ T3746] device ip6gretap0 entered promiscuous mode [ 358.902838][ T3746] device bridge0 entered promiscuous mode [ 358.909055][ T3746] device vcan0 entered promiscuous mode [ 358.914884][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.922147][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.929448][ T3746] device dummy0 entered promiscuous mode [ 358.936629][ T3746] device wg0 entered promiscuous mode [ 358.942884][ T3746] device wg1 entered promiscuous mode [ 358.948783][ T3746] device veth0_to_bridge entered promiscuous mode [ 358.956305][ T3746] device veth1_to_bridge entered promiscuous mode [ 358.964252][ T3746] device bond_slave_0 entered promiscuous mode [ 358.970749][ T3746] device veth1_to_bond entered promiscuous mode [ 358.977594][ T3746] device bond_slave_1 entered promiscuous mode [ 358.984047][ T3746] device veth0_to_team entered promiscuous mode [ 358.990903][ T3746] device team_slave_0 entered promiscuous mode [ 358.997440][ T3746] device veth1_to_team entered promiscuous mode [ 359.005574][ T3746] device team_slave_1 entered promiscuous mode [ 359.012026][ T3746] device veth0_to_batadv entered promiscuous mode [ 359.018972][ T3746] device batadv_slave_0 entered promiscuous mode [ 359.025782][ T3746] device veth1_to_batadv entered promiscuous mode [ 359.032765][ T3746] device batadv_slave_1 entered promiscuous mode [ 359.039481][ T3746] device xfrm0 entered promiscuous mode [ 359.047381][ T3746] device hsr_slave_0 entered promiscuous mode [ 359.053908][ T3746] device veth1_to_hsr entered promiscuous mode [ 359.060751][ T3746] device hsr_slave_1 entered promiscuous mode [ 359.067052][ T3746] device veth1_virt_wifi entered promiscuous mode [ 359.074041][ T3746] device veth0_virt_wifi entered promiscuous mode [ 359.080986][ T3746] device veth1_vlan entered promiscuous mode [ 359.087508][ T3746] device veth0_vlan left promiscuous mode [ 359.093387][ T3746] device veth0_vlan entered promiscuous mode [ 359.100873][ T3746] device vlan0 entered promiscuous mode [ 359.106758][ T3746] device vlan1 entered promiscuous mode [ 359.112810][ T3746] device veth1_macvtap left promiscuous mode [ 359.118818][ T3746] device veth1_macvtap entered promiscuous mode [ 359.125638][ T3746] device veth0_macvtap entered promiscuous mode [ 359.132408][ T3746] device macsec0 entered promiscuous mode [ 359.138787][ T3746] device veth2 entered promiscuous mode [ 359.144988][ T3746] device veth3 entered promiscuous mode [ 359.150882][ T3746] device veth4 entered promiscuous mode [ 359.156874][ T3746] device veth5 entered promiscuous mode [ 359.157137][ T3760] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #19: comm syz.4.740: corrupted inode contents [ 359.162793][ T3746] bridge1: port 3(vlan2) entered blocking state [ 359.180559][ T3746] bridge1: port 3(vlan2) entered forwarding state [ 359.187234][ T3746] device bridge1 entered promiscuous mode [ 359.193330][ T3746] device veth0 entered promiscuous mode [ 359.200512][ T3746] device syztnl1 entered promiscuous mode [ 359.206747][ T3746] device veth6 entered promiscuous mode [ 359.212750][ T3746] device veth7 entered promiscuous mode [ 359.218593][ T3738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.234629][ T3760] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #19: comm syz.4.740: mark_inode_dirty error [ 359.236815][ T286] EXT4-fs (loop1): unmounting filesystem. [ 359.267346][ T3760] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #19: comm syz.4.740: corrupted inode contents [ 359.282843][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.291223][ T3760] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2963: inode #19: comm syz.4.740: mark_inode_dirty error [ 359.297058][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.310190][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.340291][ T3760] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2966: inode #19: comm syz.4.740: mark inode dirty (error -117) [ 359.370398][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.389536][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.390365][ T3760] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 359.419249][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.426352][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.447493][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.467975][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 359.490994][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.510835][ T1277] bridge1: port 2(veth0_to_bond) entered blocking state [ 359.517820][ T1277] bridge1: port 2(veth0_to_bond) entered forwarding state [ 359.545431][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 359.556237][ T284] EXT4-fs (loop4): unmounting filesystem. [ 359.560779][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.580488][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.588807][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.620950][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.629247][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.647827][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.773489][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.895811][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.980123][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 360.091547][ T1277] bridge1: port 3(vlan2) entered disabled state [ 360.157128][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 360.258914][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 360.348752][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.435291][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.920768][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.929302][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.956101][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.998692][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 361.015620][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 361.033851][ T3764] loop1: detected capacity change from 0 to 40427 [ 361.043301][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 361.051182][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.059480][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.067795][ T3764] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 361.078559][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.086426][ T3764] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 361.105930][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 361.115073][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 361.124107][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 361.133852][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 361.142350][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 361.150982][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.158896][ T1277] bridge1: port 1(veth1) entered blocking state [ 361.165188][ T1277] bridge1: port 1(veth1) entered forwarding state [ 361.214143][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.222965][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 361.232587][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 361.263233][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.274834][ T1277] bridge1: port 3(vlan2) entered blocking state [ 361.281153][ T1277] bridge1: port 3(vlan2) entered forwarding state [ 361.296419][ T3764] F2FS-fs (loop1): Found nat_bits in checkpoint [ 361.356992][ T1035] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 361.364793][ T1035] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 361.373684][ T285] EXT4-fs (loop2): unmounting filesystem. [ 361.379846][ T3764] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 361.380707][ T1035] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 361.388163][ T3764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 361.442342][ T3780] loop2: detected capacity change from 0 to 1024 [ 361.466573][ T3780] EXT4-fs: Ignoring removed i_version option [ 361.491625][ T3780] EXT4-fs (loop2): Test dummy encryption mode enabled [ 361.537171][ T3780] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 362.282659][ T1035] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 362.290901][ T1035] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 363.551624][ T3795] netlink: 'syz.4.751': attribute type 27 has an invalid length. [ 363.759821][ T285] EXT4-fs (loop2): unmounting filesystem. [ 364.820186][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.827568][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.400339][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 367.272150][ T3820] loop2: detected capacity change from 0 to 128 [ 370.639953][ T3827] loop1: detected capacity change from 0 to 512 [ 370.667911][ T3827] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.758: casefold flag without casefold feature [ 370.680921][ T3827] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.758: couldn't read orphan inode 15 (err -117) [ 371.060832][ T3837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 371.166988][ T3827] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 372.154764][ T286] EXT4-fs (loop1): unmounting filesystem. [ 372.251485][ T3839] loop4: detected capacity change from 0 to 128 [ 372.306054][ T3839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 372.365570][ T3839] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 372.410434][ T284] EXT4-fs (loop4): unmounting filesystem. [ 373.730384][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 374.957917][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 374.957937][ T28] audit: type=1326 audit(2000000154.780:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 375.735959][ T3871] loop4: detected capacity change from 0 to 256 [ 375.798619][ T3871] FAT-fs (loop4): Directory bread(block 64) failed [ 375.825528][ T3871] FAT-fs (loop4): Directory bread(block 65) failed [ 375.835599][ T28] audit: type=1326 audit(2000000154.780:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 375.879417][ T3871] FAT-fs (loop4): Directory bread(block 66) failed [ 375.896296][ T3871] FAT-fs (loop4): Directory bread(block 67) failed [ 375.913120][ T3871] FAT-fs (loop4): Directory bread(block 68) failed [ 375.923243][ T3875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 375.936857][ T28] audit: type=1326 audit(2000000154.800:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 375.965387][ T3871] FAT-fs (loop4): Directory bread(block 69) failed [ 375.988953][ T28] audit: type=1326 audit(2000000154.810:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 376.012313][ T28] audit: type=1326 audit(2000000154.820:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 376.036570][ T28] audit: type=1326 audit(2000000154.880:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 376.041179][ T3871] FAT-fs (loop4): Directory bread(block 70) failed [ 376.059967][ T28] audit: type=1326 audit(2000000154.960:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 376.102457][ T28] audit: type=1326 audit(2000000154.960:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9c78f6c9 code=0x7ffc0000 [ 376.126080][ T28] audit: type=1326 audit(2000000154.980:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc9c78df10 code=0x7ffc0000 [ 376.149519][ T3871] FAT-fs (loop4): Directory bread(block 71) failed [ 376.157443][ T28] audit: type=1326 audit(2000000154.990:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fdc9c790ef7 code=0x7ffc0000 [ 376.184895][ T3871] FAT-fs (loop4): Directory bread(block 72) failed [ 376.191776][ T3871] FAT-fs (loop4): Directory bread(block 73) failed [ 377.719339][ T3885] loop2: detected capacity change from 0 to 1024 [ 377.763273][ T3885] ext4: Unknown parameter 'nouser_xattr' [ 378.204388][ T3891] loop1: detected capacity change from 0 to 4096 [ 379.551910][ T3897] netlink: 'syz.2.773': attribute type 16 has an invalid length. [ 379.559756][ T3897] netlink: 'syz.2.773': attribute type 17 has an invalid length. [ 379.743838][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 379.751181][ T3897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 379.837621][ T3897] device veth0_vlan left promiscuous mode [ 379.843894][ T3897] device veth0_vlan entered promiscuous mode [ 379.851438][ T3897] device veth1_macvtap left promiscuous mode [ 379.858067][ T3897] device veth1_macvtap entered promiscuous mode [ 379.911404][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.919032][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.926894][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.935746][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.942838][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.950429][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.958929][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.967932][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.975017][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.016420][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.024941][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 380.033334][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.042284][ T1277] bridge1: port 2(veth0_to_bond) entered blocking state [ 380.049258][ T1277] bridge1: port 2(veth0_to_bond) entered forwarding state [ 380.062539][ T3908] loop3: detected capacity change from 0 to 1024 [ 380.069791][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 380.081328][ T3891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 380.133001][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.141808][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.149962][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.194466][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.246512][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.271237][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.298127][ T3908] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 380.300121][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.367175][ T3908] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.380028][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.666260][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.698051][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.707120][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.717075][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.737732][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.755761][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.769270][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 380.808895][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.817299][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 380.825447][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.833008][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.840733][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.848977][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.857274][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.865001][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 380.876829][ T1277] bridge1: port 1(veth3) entered blocking state [ 380.883188][ T1277] bridge1: port 1(veth3) entered forwarding state [ 380.892276][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 380.902279][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 380.914045][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 380.940896][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 380.949894][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 380.985170][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.025351][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 381.115024][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 381.122607][ T1277] bridge1: port 3(vlan2) entered blocking state [ 381.128880][ T1277] bridge1: port 3(vlan2) entered forwarding state [ 381.139418][ T3912] device bridge0 entered promiscuous mode [ 381.145236][ T3912] device macsec1 entered promiscuous mode [ 381.151529][ T3912] bridge0: port 3(macsec1) entered blocking state [ 381.157973][ T3912] bridge0: port 3(macsec1) entered disabled state [ 381.165725][ T3912] device bridge0 left promiscuous mode [ 381.239495][ T286] EXT4-fs (loop1): unmounting filesystem. [ 381.248602][ T287] EXT4-fs (loop3): unmounting filesystem. [ 381.350859][ T3932] tmpfs: Bad value for 'nr_blocks' [ 382.253548][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 382.253566][ T28] audit: type=1400 audit(2000000162.560:569): avc: denied { create } for pid=3922 comm="syz.0.781" name="#26" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 383.283369][ T28] audit: type=1400 audit(2000000162.560:570): avc: denied { link } for pid=3922 comm="syz.0.781" name="#26" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 384.301308][ T28] audit: type=1400 audit(2000000162.560:571): avc: denied { rename } for pid=3922 comm="syz.0.781" name="#27" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 385.092918][ T3957] ip6t_REJECT: ECHOREPLY is not supported [ 385.175976][ T3957] overlayfs: failed to resolve './file0': -2 [ 385.672670][ T3958] loop2: detected capacity change from 0 to 128 [ 385.702204][ T3960] loop3: detected capacity change from 0 to 512 [ 385.732275][ T28] audit: type=1400 audit(2000000166.410:572): avc: denied { accept } for pid=3962 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.000881][ T3958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 386.009625][ T3958] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 386.026105][ T3960] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.790: casefold flag without casefold feature [ 386.038936][ T3960] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.790: couldn't read orphan inode 15 (err -117) [ 386.056982][ T3960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 386.070542][ T28] audit: type=1400 audit(2000000166.730:573): avc: denied { read } for pid=3962 comm="syz.1.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.201200][ T285] EXT4-fs (loop2): unmounting filesystem. [ 387.075018][ T3973] device ip6erspan0 entered promiscuous mode [ 388.391582][ T3985] loop2: detected capacity change from 0 to 512 [ 388.422898][ T287] EXT4-fs (loop3): unmounting filesystem. [ 388.495098][ T3987] loop4: detected capacity change from 0 to 1024 [ 388.506170][ T3990] loop3: detected capacity change from 0 to 1024 [ 388.513635][ T3985] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 388.521895][ T3990] ext4: Unknown parameter 'nouser_xattr' [ 388.528290][ T3985] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.532677][ T3987] EXT4-fs: Ignoring removed i_version option [ 388.547826][ T3985] SELinux: failed to load policy [ 388.553491][ T28] audit: type=1400 audit(2000000169.220:574): avc: denied { load_policy } for pid=3970 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 388.608836][ T3987] EXT4-fs (loop4): Test dummy encryption mode enabled [ 388.724619][ T3987] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 388.825258][ T3996] netlink: 'syz.3.799': attribute type 16 has an invalid length. [ 388.833094][ T3996] netlink: 'syz.3.799': attribute type 17 has an invalid length. [ 388.896970][ T3996] device bridge0 left promiscuous mode [ 388.905958][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 388.913624][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 388.988786][ T3996] device veth0_vlan left promiscuous mode [ 388.996111][ T3996] device veth0_vlan entered promiscuous mode [ 389.013528][ T3996] device veth1_macvtap entered promiscuous mode [ 389.021986][ T3996] device bridge0 entered promiscuous mode [ 389.029528][ T451] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 389.037461][ T451] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 389.057851][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 389.067034][ T451] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 389.103710][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.110841][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.148308][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 389.163958][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 389.192980][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.200053][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.246733][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 389.263533][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 389.280923][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 389.299505][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 389.307835][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 389.320816][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 389.329069][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 389.337358][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 389.345668][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 389.353967][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.362427][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.415325][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.432274][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 389.511216][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.519319][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.527768][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.538898][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.547146][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.555683][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 389.574359][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 390.360673][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 391.729209][ T39] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 392.211942][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.224225][ T603] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 392.238757][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.255701][ T4010] loop1: detected capacity change from 0 to 1024 [ 392.265417][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.283238][ T4010] EXT4-fs: Ignoring removed bh option [ 392.294556][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.303150][ T4010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.316255][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.330014][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 392.343846][ T4010] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 392.355491][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 392.394186][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 392.543054][ T284] EXT4-fs (loop4): unmounting filesystem. [ 392.686669][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 392.705197][ T1305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 392.736345][ T4023] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 392.745528][ T4023] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 392.786269][ T4021] loop3: detected capacity change from 0 to 16 [ 392.825097][ T4021] erofs: (device loop3): mounted with root inode @ nid 36. [ 392.855101][ T4021] syz.3.804: attempt to access beyond end of device [ 392.855101][ T4021] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 393.020655][ T4021] syz.3.804: attempt to access beyond end of device [ 393.020655][ T4021] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 393.160817][ T286] EXT4-fs (loop1): unmounting filesystem. [ 393.250348][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 393.258993][ T285] EXT4-fs (loop2): unmounting filesystem. [ 394.937255][ T4056] netlink: 'syz.0.812': attribute type 16 has an invalid length. [ 394.945047][ T4056] netlink: 'syz.0.812': attribute type 17 has an invalid length. [ 394.957163][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 394.964487][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.052069][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 395.061984][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 395.380405][ T1056] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 395.476099][ T4063] loop3: detected capacity change from 0 to 512 [ 395.484066][ T4063] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 395.499124][ T28] audit: type=1400 audit(2000000176.170:575): avc: denied { setopt } for pid=4060 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 395.513118][ T4063] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 395.602647][ T4070] loop4: detected capacity change from 0 to 512 [ 395.611008][ T4070] EXT4-fs: Ignoring removed oldalloc option [ 395.626266][ T4069] loop1: detected capacity change from 0 to 1024 [ 395.730626][ T4070] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 395.847964][ T4074] loop2: detected capacity change from 0 to 1024 [ 395.857571][ T4074] EXT4-fs: Ignoring removed i_version option [ 395.958229][ T4070] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.815: invalid indirect mapped block 4294967295 (level 0) [ 395.975740][ T4070] EXT4-fs (loop4): Remounting filesystem read-only [ 395.982509][ T4070] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.815: invalid indirect mapped block 4294967295 (level 1) [ 395.999839][ T4074] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.819: Invalid block bitmap block 0 in block_group 0 [ 396.015249][ T4074] Quota error (device loop2): write_blk: dquota write failed [ 396.022789][ T4074] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 396.033007][ T4074] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.819: Failed to acquire dquot type 0 [ 396.045633][ T4070] EXT4-fs (loop4): Remounting filesystem read-only [ 396.053206][ T4070] EXT4-fs (loop4): 1 orphan inode deleted [ 396.059005][ T4070] EXT4-fs (loop4): 1 truncate cleaned up [ 396.064740][ T4070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 396.198132][ T4074] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz.2.819: Freeing blocks not in datazone - block = 0, count = 4096 [ 396.214117][ T4074] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.819: Invalid inode bitmap blk 0 in block_group 0 [ 396.228058][ T4074] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 396.238244][ T4074] EXT4-fs (loop2): 1 orphan inode deleted [ 396.244245][ T4074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 396.529699][ T4074] device lo entered promiscuous mode [ 396.535384][ T4074] device tunl0 entered promiscuous mode [ 396.541290][ T4074] device gre0 entered promiscuous mode [ 396.547075][ T4074] device gretap0 entered promiscuous mode [ 396.553258][ T4074] device erspan0 entered promiscuous mode [ 396.559550][ T4074] device ip_vti0 entered promiscuous mode [ 396.565649][ T4074] device ip6_vti0 entered promiscuous mode [ 396.571857][ T4074] device sit0 entered promiscuous mode [ 396.577640][ T4074] device ip6tnl0 entered promiscuous mode [ 396.583700][ T4074] device ip6gre0 entered promiscuous mode [ 396.589710][ T4074] device syz_tun entered promiscuous mode [ 396.595734][ T4074] device bridge0 entered promiscuous mode [ 396.601825][ T4074] device vcan0 entered promiscuous mode [ 396.607484][ T4074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.614793][ T4074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.615006][ T4069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 396.622116][ T4074] device dummy0 entered promiscuous mode [ 396.636586][ T4074] device veth0 entered promiscuous mode [ 396.643769][ T4074] device veth1 entered promiscuous mode [ 396.649691][ T4074] device wg0 entered promiscuous mode [ 396.655487][ T4074] device wg1 entered promiscuous mode [ 396.661250][ T4074] device wg2 entered promiscuous mode [ 396.667024][ T4074] device veth0_to_bridge entered promiscuous mode [ 396.674261][ T4074] device veth1_to_bridge entered promiscuous mode [ 396.682127][ T4074] device bond_slave_0 entered promiscuous mode [ 396.688717][ T4074] device veth1_to_bond entered promiscuous mode [ 396.690446][ T2498] ------------[ cut here ]------------ [ 396.695406][ T4074] device bond_slave_1 entered promiscuous mode [ 396.700505][ T2498] kernel BUG at fs/buffer.c:2714! [ 396.712200][ T4074] device veth0_to_team entered promiscuous mode [ 396.718795][ T4074] device team_slave_0 entered promiscuous mode [ 396.725647][ T4074] device veth1_to_team entered promiscuous mode [ 396.732252][ T4074] device team_slave_1 entered promiscuous mode [ 396.738900][ T4074] device veth0_to_batadv entered promiscuous mode [ 396.741832][ T2498] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 396.746164][ T4074] device batadv_slave_0 entered promiscuous mode [ 396.751416][ T2498] CPU: 0 PID: 2498 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 396.751439][ T2498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.758069][ T4074] device veth1_to_batadv entered promiscuous mode [ 396.765213][ T2498] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 396.765247][ T2498] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 a8 34 e8 ff e9 b0 fe ff ff e8 6e c1 a3 ff 0f 0b e8 67 c1 a3 ff <0f> 0b e8 60 c1 a3 ff 0f 0b e8 59 c1 a3 ff 0f 0b e8 52 c1 a3 ff 0f [ 396.775695][ T4074] device batadv_slave_1 entered promiscuous mode [ 396.781709][ T2498] RSP: 0018:ffffc9000f1c7ca0 EFLAGS: 00010293 [ 396.781729][ T2498] RAX: ffffffff81cc5e99 RBX: 0000000000000000 RCX: ffff88811e24e540 [ 396.787442][ T4074] device xfrm0 entered promiscuous mode [ 396.806695][ T2498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.806711][ T2498] RBP: ffffc9000f1c7cf0 R08: dffffc0000000000 R09: ffffed1026640855 [ 396.806725][ T2498] R10: ffffed1026640855 R11: 1ffff11026640854 R12: 0000000000000000 [ 396.806739][ T2498] R13: 1ffff11026640854 R14: ffff8881332042a0 R15: 0000000000003801 [ 396.806754][ T2498] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 396.806769][ T2498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.806783][ T2498] CR2: 0000001b2ea05ff8 CR3: 00000001195f4000 CR4: 00000000003506b0 [ 396.806800][ T2498] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.806812][ T2498] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.806824][ T2498] Call Trace: [ 396.806830][ T2498] [ 396.806838][ T2498] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 396.806867][ T2498] submit_bh+0x1f/0x30 [ 396.806890][ T2498] write_mmp_block_thawed+0x34a/0x4c0 [ 396.806916][ T2498] ? read_mmp_block+0x6d0/0x6d0 [ 396.806938][ T2498] ? __cfi_process_timeout+0x10/0x10 [ 396.806965][ T2498] write_mmp_block+0x138/0x2b0 [ 396.806989][ T2498] kmmpd+0x3ce/0x950 [ 396.807016][ T2498] kthread+0x281/0x320 [ 396.807044][ T2498] ? __cfi_kmmpd+0x10/0x10 [ 396.807066][ T2498] ? __cfi_kthread+0x10/0x10 [ 396.807086][ T2498] ret_from_fork+0x1f/0x30 [ 396.807113][ T2498] [ 396.807127][ T2498] Modules linked in: [ 396.810635][ T1252] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 396.814270][ T4074] device veth0_to_hsr entered promiscuous mode [ 396.819940][ T1252] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:35: Failed to release dquot type 0 [ 396.828291][ T4074] device hsr_slave_0 entered promiscuous mode [ 396.850727][ T2498] ---[ end trace 0000000000000000 ]--- [ 396.857996][ T4074] device veth1_to_hsr entered promiscuous mode [ 396.871208][ T4063] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 396.875200][ T4074] device hsr_slave_1 entered promiscuous mode [ 396.891566][ T4063] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=6040e01c, mo2=0000] [ 396.897599][ T4074] device veth1_virt_wifi entered promiscuous mode [ 396.933448][ T2498] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 396.937177][ T4074] device veth0_virt_wifi entered promiscuous mode [ 396.951512][ T284] EXT4-fs (loop4): unmounting filesystem. [ 396.957448][ T4074] device veth1_vlan entered promiscuous mode [ 396.959061][ T4063] EXT4-fs (loop3): failed to initialize system zone (-117) [ 396.964154][ T4074] device vlan0 entered promiscuous mode [ 397.005052][ T2498] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 a8 34 e8 ff e9 b0 fe ff ff e8 6e c1 a3 ff 0f 0b e8 67 c1 a3 ff <0f> 0b e8 60 c1 a3 ff 0f 0b e8 59 c1 a3 ff 0f 0b e8 52 c1 a3 ff 0f [ 397.008677][ T4074] device vlan1 entered promiscuous mode [ 397.022329][ T4063] EXT4-fs (loop3): mount failed [ 397.029212][ T4074] device veth0_macvtap entered promiscuous mode [ 397.101165][ T2498] RSP: 0018:ffffc9000f1c7ca0 EFLAGS: 00010293 [ 397.104692][ T4074] device macsec0 entered promiscuous mode [ 397.121615][ T2498] [ 397.129955][ T4074] device bridge1 entered promiscuous mode [ 397.130163][ T2498] RAX: ffffffff81cc5e99 RBX: 0000000000000000 RCX: ffff88811e24e540 [ 397.130183][ T2498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.130196][ T2498] RBP: ffffc9000f1c7cf0 R08: dffffc0000000000 R09: ffffed1026640855 [ 397.130421][ T2498] R10: ffffed1026640855 R11: 1ffff11026640854 R12: 0000000000000000 [ 397.130437][ T2498] R13: 1ffff11026640854 R14: ffff8881332042a0 R15: 0000000000003801 [ 397.130451][ T2498] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 397.130469][ T2498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.130482][ T2498] CR2: 0000001b2e9ffff8 CR3: 0000000134aa9000 CR4: 00000000003506a0 [ 397.130500][ T2498] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 397.130511][ T2498] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 397.130525][ T2498] Kernel panic - not syncing: Fatal exception [ 397.130920][ T2498] Kernel Offset: disabled [ 397.226086][ T2498] Rebooting in 86400 seconds..