last executing test programs: 2m4.88318297s ago: executing program 32 (id=98): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x101a301, &(0x7f0000000840)={[{@test_dummy_encryption}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@sb={'sb', 0x3d, 0x3}}, {@nombcache}, {@noblock_validity}, {@init_itable_val}, {@grpquota}, {@inlinecrypt}, {@mblk_io_submit}, {@dax}]}, 0x1, 0x479, &(0x7f0000000280)="$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") r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000400)=""/17, 0x11}, 0x8000}], 0x1, 0x2102, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 1m5.319598159s ago: executing program 33 (id=1634): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148c5, &(0x7f00000002c0)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x30a}}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@fat=@check_strict}, {@fat=@quiet}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@errors_continue}, {@fat=@discard}, {@shortname_win95}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$eJzs3UFr02AYwPFn7dZ2HVt7GIKC+KAXvYStfoIiG4gFZVvFeRAyl2ppbEZTKxVxu3n1E/gBht48Kah32cWbd/Gyi+BlB7WyNLFdF7FVttTt/4ORd++bp3nT9015Etpk+8bTe5WSa5TMusRSKjGRDdkRye6WfCP+MuaVE9JtQy5MfP14enH55pV8oTC3oDqfX7qYU9WpM28ePHp+9l194vrLqddJ2cre2v6S+7R1Yuvk9o+l4NUdEVNXHKdurtiWrpbdiqF6zbZM19Jy1bVqde1qL9nO2lpTzerqZHqtZrmumtWmVqym1h2t15pq3jHLVTUMQyfTvd0/8uIDRxS/J0TyB9IZRGE8rLJWy5vx0Mbi5mF0CgAADJeo8v+7ZVfLrladPfn9/vw/JgPk/yJh+T9+q7i5sGCS/x9xu/l/2j9+9yL/BwAAAAAAAAAAAAAAAAAAAADgf7Ajkmm1WpmdVstbBn9JEUmJSPB/1P3EwQjGnfE/nhaXR8T/4V5KxH7SKDaK7WW7PV+SsthiycyYyDdvPvja5fnLhbkZ9WTlrb3ux683inFJBvGBbHj8bDteu+PXZUzS3dvPSUamw+NzIfGNYkLOn2sl/S1bYkhGPtwWR2xZ9eZ1J/7xrOqlq4We+HFvPQAAAAAAjgJDf9l3/u61GxrcNqSnvV3ZuT4gmc71gbmw6wM959ejcmo0uv0GAAAAAOA4cZsPK6ZtW7U/FVKdmvf9Rw1VIXj+wcDh8ZCm4Bsx0e1Oqt+VR0XEr3k1LGPRTyH2D29vfIBRHts/nxMisqdm+vDn/ItnAxye/RU+3+9/0kb1iQQAAADgoARJ/7F5SCYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEOo35uHBev/zb3HujYXj2YvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOHwMwAA//8VhA3+") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x2) 1m2.375161822s ago: executing program 34 (id=1686): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x22020400) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @local, 0xa1}, 0x1c) 56.986747342s ago: executing program 35 (id=1782): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x3043}, {0x20, 0x4, 0x0, 0xfbfff00c}, {0x6}]}, 0x10) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1cb27e, 0x5b106eb4042e09fe) fallocate(r2, 0x0, 0x0, 0x1000f4) sendfile(r0, r2, 0x0, 0x800000a1a) 44.899084518s ago: executing program 6 (id=2052): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x5e, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.475149723s ago: executing program 6 (id=2057): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x100) 44.394801776s ago: executing program 6 (id=2060): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x34000}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x9}, 0x106206, 0x1000, 0x20da, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) shutdown(r0, 0x1) 44.117350006s ago: executing program 6 (id=2066): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 44.084219357s ago: executing program 6 (id=2067): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 43.807216186s ago: executing program 6 (id=2074): unshare(0x20040600) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 43.806918876s ago: executing program 36 (id=2074): unshare(0x20040600) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 43.790740537s ago: executing program 3 (id=2076): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffb000/0x4000)=nil) 43.741386359s ago: executing program 3 (id=2077): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x41, 0x2, {{0x29, [0x5, 0x1, 0x9, 0x9, 0x0, 0x0, 0x8, 0xa, 0x1, 0x8, 0xc, 0x2, 0x5, 0x6, 0xb, 0xb], 0x0, [0x8, 0x7fff, 0x9, 0xfc00, 0x7f, 0x0, 0x8834, 0x40, 0x4, 0xc445, 0x5, 0x8, 0x6, 0xb840, 0x9, 0x7], [0x1, 0xde, 0x1ff, 0x4, 0x5d, 0x4, 0x8, 0x4, 0xc5de, 0x1, 0x0, 0x7, 0x7, 0x265, 0x7ff, 0xd]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2c004041}, 0x0) 43.69215251s ago: executing program 3 (id=2078): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xb164c, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x3}, 0x8084, 0xa2, 0xffffffff, 0x0, 0x7f, 0xa, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) unshare(0x6020400) acct(&(0x7f0000000040)='./file0\x00') unshare(0x22060600) 43.445968429s ago: executing program 3 (id=2080): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 43.382431681s ago: executing program 3 (id=2081): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0), 0x4) 42.243666512s ago: executing program 3 (id=2093): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.243508842s ago: executing program 37 (id=2093): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.00037267s ago: executing program 7 (id=2114): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) 39.966166452s ago: executing program 7 (id=2115): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x2}, 0x8) 39.089461933s ago: executing program 7 (id=2126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c60133", 0x7}, {&(0x7f00000001c0)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a33d1", 0x23}], 0x2}, 0x20008b88) 39.011733965s ago: executing program 7 (id=2127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 38.939783508s ago: executing program 7 (id=2129): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 38.846260641s ago: executing program 7 (id=2133): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x40000) poll(&(0x7f00000003c0)=[{r1, 0x4280}, {r0, 0x2}], 0x2, 0xfdfd) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xa) 37.691546732s ago: executing program 8 (id=2156): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000a00)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 37.527224518s ago: executing program 8 (id=2157): fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 37.414623911s ago: executing program 8 (id=2161): r0 = socket$inet6(0xa, 0x80802, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x4000010) 37.287757586s ago: executing program 8 (id=2165): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x457, &(0x7f0000000dc0)="$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") open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8000000000000003, 0x8005, 0x0, 0x0, 0x12, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a391ef54ec32d71e14ef3dc177e9b48b00", "e28359738e229a4c668000eac575fc00000100", [0x204]}) 37.122469602s ago: executing program 8 (id=2169): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x25dedbfd, {0x0, 0x0, 0x0, r1, {0xc, 0xd}, {0xc}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) 36.837858222s ago: executing program 8 (id=2182): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 36.806169923s ago: executing program 38 (id=2182): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 23.824450891s ago: executing program 39 (id=2133): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x40000) poll(&(0x7f00000003c0)=[{r1, 0x4280}, {r0, 0x2}], 0x2, 0xfdfd) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xa) 16.488489589s ago: executing program 5 (id=2584): pipe(&(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x280000, 0x23) r0 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r0, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) 16.419910761s ago: executing program 5 (id=2595): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x100000002}) 15.848029672s ago: executing program 5 (id=2594): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x400, @private1, 0x400009}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 15.707190156s ago: executing program 5 (id=2598): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 15.634216909s ago: executing program 5 (id=2609): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4204, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x106a, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) 15.521493883s ago: executing program 5 (id=2601): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pivot_root(0x0, 0x0) 15.484200534s ago: executing program 40 (id=2601): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pivot_root(0x0, 0x0) 1.907475713s ago: executing program 9 (id=2929): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) exit(0x0) unshare(0x6a040000) 1.010328434s ago: executing program 9 (id=2948): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@deltfilter={0x103c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1004, 0x2, [@TCA_CGROUP_ACT={0x1000, 0x1, [@m_connmark={0xe0, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}]}, {0x1d, 0x6, "091574d9000173335e5beb79fe5c3f08f569883f9e847a92ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x48, 0xf, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cb, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x40, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x103c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 948.078176ms ago: executing program 9 (id=2951): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000580)='dirsync\x00', 0x0, 0x0) 924.886377ms ago: executing program 0 (id=2952): r0 = socket(0x1, 0x5, 0x0) close(r0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80000004}) 892.781208ms ago: executing program 9 (id=2953): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 862.05828ms ago: executing program 0 (id=2954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000}, {0x0, 0x7ffffffffffffffd, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x2b}, 0x2, @in6=@private2, 0x3503, 0x4, 0x3, 0x0, 0x0, 0x0, 0x113b}]}]}, 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) 801.580772ms ago: executing program 0 (id=2956): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000001c0)=0x8) 763.435733ms ago: executing program 2 (id=2958): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffeb6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xb7a3, 0xc000, 0xc, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 755.253183ms ago: executing program 0 (id=2959): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 667.929726ms ago: executing program 0 (id=2963): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) rt_sigprocmask(0xd126795177e80a7e, &(0x7f0000005ec0)={[0x100]}, 0x0, 0x8) 664.308727ms ago: executing program 4 (id=2964): setreuid(0xffffffffffffffff, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) 660.463587ms ago: executing program 2 (id=2965): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x4008001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 622.904308ms ago: executing program 4 (id=2966): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 615.136288ms ago: executing program 1 (id=2967): syz_read_part_table(0x604, &(0x7f0000000000)="$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") r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00000001000100"], 0x264d81) 604.622969ms ago: executing program 2 (id=2968): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 585.521929ms ago: executing program 0 (id=2969): r0 = socket(0xa, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r2}, 0x8) 550.611571ms ago: executing program 1 (id=2970): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x401}, 0x1c) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 523.536272ms ago: executing program 1 (id=2971): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x11}]}, 0x20}}, 0x4008000) 461.999914ms ago: executing program 2 (id=2972): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 453.985404ms ago: executing program 1 (id=2973): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r2, 0x0, 0x1) 442.457754ms ago: executing program 4 (id=2974): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x5}, 0x2002, 0x32, 0x5, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)={0x4}, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) 414.677665ms ago: executing program 1 (id=2975): unshare(0x2040400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 401.198086ms ago: executing program 1 (id=2976): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) timer_delete(r1) 382.830857ms ago: executing program 2 (id=2977): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x7], 0xfffffffffffffffe, 0x39, 0x1, 0x0, r1}}, 0x40) 360.369627ms ago: executing program 4 (id=2978): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") syz_open_procfs(r1, &(0x7f00000000c0)='attr/keycreate\x00') 302.702229ms ago: executing program 2 (id=2979): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000008c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 302.265349ms ago: executing program 9 (id=2980): unshare(0x6020480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) unshare(0x60600) close(r0) 265.565481ms ago: executing program 9 (id=2981): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 3.04041ms ago: executing program 4 (id=2982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0xc7, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) 0s ago: executing program 4 (id=2983): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kernel console output (not intermixed with test programs): 170675][ T918] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.170675][ T918] [ 108.184679][ T918] EXT4-fs (loop3): Total free blocks count 0 [ 108.192694][ T918] EXT4-fs (loop3): Free/Dirty block details [ 108.201815][ T918] EXT4-fs (loop3): free_blocks=0 [ 108.209018][ T918] EXT4-fs (loop3): dirty_blocks=14528 [ 108.216045][ T918] EXT4-fs (loop3): Block reservation details [ 108.224935][ T918] EXT4-fs (loop3): i_reserved_data_blocks=14528 [ 108.256914][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 108.306143][ T3313] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 108.372081][ T7612] veth0_vlan: entered promiscuous mode [ 108.395417][ T7612] veth1_vlan: entered promiscuous mode [ 108.488039][ T7612] veth0_macvtap: entered promiscuous mode [ 108.497242][ T7880] loop7: detected capacity change from 0 to 7 [ 108.501502][ T7612] veth1_macvtap: entered promiscuous mode [ 108.556269][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.575048][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.612856][ T54] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.638786][ T54] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.650009][ T54] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.671280][ T54] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.765669][ T7900] netlink: 'syz.7.1687': attribute type 3 has an invalid length. [ 108.777792][ T7900] netlink: 'syz.7.1687': attribute type 1 has an invalid length. [ 108.790215][ T7900] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.1687'. [ 108.887564][ T7913] loop6: detected capacity change from 0 to 128 [ 108.898396][ T7913] EXT4-fs: Ignoring removed nobh option [ 108.916456][ T7913] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.930880][ T7913] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.987719][ T7918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.015498][ T7442] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.397118][ T7939] loop7: detected capacity change from 0 to 8192 [ 109.604106][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.604156][ T3601] Bluetooth: hci0: command 0x1003 tx timeout [ 109.881031][ T7968] loop6: detected capacity change from 0 to 1024 [ 109.921053][ T7968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.989034][ T7442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.066907][ T7977] netlink: 'syz.6.1780': attribute type 1 has an invalid length. [ 110.224658][ T7986] syzkaller1: entered promiscuous mode [ 110.231032][ T7986] syzkaller1: entered allmulticast mode [ 110.240979][ T54] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.335417][ T54] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.402228][ T54] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.465313][ T54] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.659517][ T7984] chnl_net:caif_netlink_parms(): no params data found [ 110.712763][ T54] bridge_slave_1: left allmulticast mode [ 110.742532][ T54] bridge_slave_1: left promiscuous mode [ 110.762042][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.791926][ T54] bridge_slave_0: left allmulticast mode [ 110.802690][ T54] bridge_slave_0: left promiscuous mode [ 110.815966][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.824831][ T8049] blktrace: Concurrent blktraces are not allowed on loop4 [ 111.006167][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.011920][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1815'. [ 111.097932][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.112546][ T54] bond0 (unregistering): Released all slaves [ 111.164110][ T54] tipc: Left network mode [ 111.230268][ T54] hsr_slave_0: left promiscuous mode [ 111.245244][ T54] hsr_slave_1: left promiscuous mode [ 111.261074][ T54] veth1_macvtap: left promiscuous mode [ 111.268053][ T54] veth0_macvtap: left promiscuous mode [ 111.274258][ T54] veth1_vlan: left promiscuous mode [ 111.280625][ T54] veth0_vlan: left promiscuous mode [ 111.406641][ T8095] loop7: detected capacity change from 0 to 128 [ 111.490563][ T54] team0 (unregistering): Port device team_slave_1 removed [ 111.503381][ T54] team0 (unregistering): Port device team_slave_0 removed [ 111.547035][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.554627][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.562400][ T7984] bridge_slave_0: entered allmulticast mode [ 111.569537][ T7984] bridge_slave_0: entered promiscuous mode [ 111.593086][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.601457][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.610936][ T7984] bridge_slave_1: entered allmulticast mode [ 111.619211][ T7984] bridge_slave_1: entered promiscuous mode [ 111.665616][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.689806][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1826'. [ 111.700213][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.745372][ T7984] team0: Port device team_slave_0 added [ 111.764783][ T7984] team0: Port device team_slave_1 added [ 111.818614][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.842876][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.873350][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.887163][ T54] IPVS: stop unused estimator thread 0... [ 111.893825][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.905003][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.959893][ T8131] loop6: detected capacity change from 0 to 512 [ 111.965265][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.001466][ T7984] hsr_slave_0: entered promiscuous mode [ 112.008546][ T7984] hsr_slave_1: entered promiscuous mode [ 112.019271][ T8131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.035645][ T8131] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.054474][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 112.054493][ T28] audit: type=1400 audit(1775042034.864:836): avc: denied { create } for pid=8130 comm="syz.6.1832" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 112.075274][ T8131] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #2: comm syz.6.1832: corrupted inode contents [ 112.100813][ T8131] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #2: comm syz.6.1832: mark_inode_dirty error [ 112.129870][ T8131] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #2: comm syz.6.1832: corrupted inode contents [ 112.152797][ T8131] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1832: mark_inode_dirty error [ 112.157087][ T7984] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 112.177340][ T8141] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.1832: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 112.177340][ T8141] [ 112.203060][ T7984] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 112.212867][ T8141] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #2: comm syz.6.1832: corrupted inode contents [ 112.216603][ T8147] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1834'. [ 112.239984][ T8141] EXT4-fs error (device loop6): ext4_append:88: inode #2: comm syz.6.1832: mark_inode_dirty error [ 112.240758][ T7984] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 112.265674][ T8141] EXT4-fs error (device loop6) in ext4_append:100: Corrupt filesystem [ 112.276310][ T7984] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 112.343637][ T8131] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #2: comm syz.6.1832: corrupted inode contents [ 112.354476][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.377302][ T8131] EXT4-fs error (device loop6): add_dirent_to_buf:2151: inode #2: comm syz.6.1832: mark_inode_dirty error [ 112.417756][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.436000][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.443604][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.488235][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.495757][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.545305][ T7984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.559297][ T7984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.621290][ T7442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.698397][ T28] audit: type=1400 audit(1775042035.504:837): avc: denied { append } for pid=8184 comm="syz.6.1840" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.738743][ T8189] loop7: detected capacity change from 0 to 128 [ 112.797956][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.868553][ T28] audit: type=1400 audit(1775042035.664:838): avc: denied { setopt } for pid=8200 comm="syz.7.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.176731][ T7984] veth0_vlan: entered promiscuous mode [ 113.198432][ T7984] veth1_vlan: entered promiscuous mode [ 113.221940][ T7984] veth0_macvtap: entered promiscuous mode [ 113.258852][ T7984] veth1_macvtap: entered promiscuous mode [ 113.282932][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.316478][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.360086][ T54] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.414938][ T54] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.427529][ T28] audit: type=1400 audit(1775042036.234:839): avc: denied { lock } for pid=8254 comm="syz.7.1861" path="socket:[22542]" dev="sockfs" ino=22542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 113.434210][ T54] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.502319][ T8262] gretap0: entered promiscuous mode [ 113.516789][ T54] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.825253][ T8284] loop3: detected capacity change from 0 to 512 [ 113.865105][ T8284] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.910877][ T8284] EXT4-fs error (device loop3): __ext4_iget:5393: inode #11: block 1: comm syz.3.1871: invalid block [ 113.973583][ T8284] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 113.974209][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 113.978380][ T8284] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1871: couldn't read orphan inode 11 (err -117) [ 113.984192][ C1] EXT4-fs (loop3): initial error at time 1775042036: __ext4_iget:5393: inode 11: block 1 [ 113.984233][ C1] EXT4-fs (loop3): last error at time 1775042036: __ext4_iget:5393: inode 11: block 1 [ 113.984900][ T28] audit: type=1400 audit(1775042036.784:840): avc: denied { setopt } for pid=8290 comm="syz.7.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.027861][ T8284] loop3: lost filesystem error report for type 5 error -117 [ 114.097662][ T8284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.508096][ T8314] bpf: Bad value for 'gid' [ 114.510463][ T28] audit: type=1400 audit(1775042037.314:841): avc: denied { create } for pid=8310 comm="syz.7.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 114.595189][ T28] audit: type=1400 audit(1775042037.314:842): avc: denied { getopt } for pid=8310 comm="syz.7.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 114.682335][ T8324] loop8: detected capacity change from 0 to 128 [ 114.704830][ T8324] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.754634][ T8324] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.118376][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1898'. [ 115.256383][ T8364] tipc: Enabling of bearer rejected, already enabled [ 115.352526][ T8373] loop6: detected capacity change from 0 to 128 [ 115.500017][ T28] audit: type=1400 audit(1775042038.304:843): avc: denied { create } for pid=8389 comm="syz.6.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.540021][ T28] audit: type=1400 audit(1775042038.304:844): avc: denied { write } for pid=8389 comm="syz.6.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.612019][ T8397] tipc: Started in network mode [ 115.613336][ T28] audit: type=1326 audit(1775042038.414:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.8.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66bdbcc819 code=0x7ffc0000 [ 115.644986][ T8397] tipc: Node identity ac14140f, cluster identity 4711 [ 115.653442][ T8397] tipc: New replicast peer: 255.255.255.255 [ 115.660925][ T8397] tipc: Enabled bearer , priority 10 [ 115.932910][ T8424] loop6: detected capacity change from 0 to 512 [ 115.993559][ T8424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.226814][ T7442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.363554][ T8444] loop6: detected capacity change from 0 to 512 [ 116.401421][ T8444] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.415289][ T8444] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 116.474136][ T8444] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1939: Corrupt directory, running e2fsck is recommended [ 116.516024][ T8457] loop2: detected capacity change from 0 to 128 [ 116.534673][ T8457] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.584856][ T8457] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.626519][ T8444] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 116.641829][ T8444] EXT4-fs error (device loop6): ext4_iget_extra_inode:5040: inode #15: comm syz.6.1939: corrupted in-inode xattr: invalid ea_ino [ 116.662093][ T8444] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.662356][ T8444] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1939: couldn't read orphan inode 15 (err -117) [ 116.673257][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 116.673279][ C1] EXT4-fs (loop6): initial error at time 1775042039: ext4_iget_extra_inode:5040: inode 15 [ 116.673312][ C1] EXT4-fs (loop6): last error at time 1775042039: ext4_iget_extra_inode:5040: inode 15 [ 116.724909][ T8444] loop6: lost filesystem error report for type 5 error -117 [ 116.748320][ T8444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.773144][ T8444] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #2: comm syz.6.1939: corrupted xattr block 255: invalid header [ 116.787672][ T7875] tipc: Node number set to 2886997007 [ 116.793864][ T8444] SELinux: (dev loop6, type ext4) getxattr errno 117 [ 116.804865][ T8444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.948861][ T8444] loop6: detected capacity change from 0 to 512 [ 117.036121][ T8444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.094667][ T8444] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.275283][ T7442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.346605][ T8503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1961'. [ 117.382651][ T8506] loop7: detected capacity change from 0 to 512 [ 117.431868][ T8506] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.451124][ T8503] bond2: option primary_reselect: invalid value (8) [ 117.644703][ T8503] bond2 (unregistering): Released all slaves [ 117.694940][ T8506] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.740355][ T8506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.784304][ T8506] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.925653][ T7612] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.777342][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 118.777359][ T28] audit: type=1326 audit(1775042041.584:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.6.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5752e9c819 code=0x7ffc0000 [ 118.823165][ T28] audit: type=1326 audit(1775042041.584:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.6.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5752e9c819 code=0x7ffc0000 [ 118.848545][ T28] audit: type=1326 audit(1775042041.584:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.6.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5752e9c819 code=0x7ffc0000 [ 118.931986][ T28] audit: type=1326 audit(1775042041.584:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.6.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f5752e9c819 code=0x7ffc0000 [ 118.968411][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.976595][ T28] audit: type=1326 audit(1775042041.584:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.6.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5752e9c819 code=0x7ffc0000 [ 118.980148][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1982'. [ 119.030901][ T28] audit: type=1326 audit(1775042041.584:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.6.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5752e9c819 code=0x7ffc0000 [ 119.052007][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.103911][ T28] audit: type=1326 audit(1775042041.624:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.6.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5752e9c819 code=0x7ffc0000 [ 119.164211][ T28] audit: type=1326 audit(1775042041.704:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.6.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5752e9c819 code=0x7ffc0000 [ 119.678156][ T28] audit: type=1400 audit(1775042042.484:909): avc: denied { ioctl } for pid=8678 comm="syz.3.2002" path="socket:[22490]" dev="sockfs" ino=22490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.759289][ T28] audit: type=1326 audit(1775042042.564:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8686 comm="syz.3.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1367f3c819 code=0x7ffc0000 [ 120.344200][ T8734] loop8: detected capacity change from 0 to 2048 [ 120.404862][ T3305] Alternate GPT is invalid, using primary GPT. [ 120.412320][ T3305] loop8: p1 p2 p3 [ 120.426955][ T8734] Alternate GPT is invalid, using primary GPT. [ 120.442918][ T8734] loop8: p1 p2 p3 [ 120.583891][ T8757] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.597698][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 120.602225][ T6350] udevd[6350]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 120.611163][ T6349] udevd[6349]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 120.697995][ T8757] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.750322][ T8757] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.806023][ T8757] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.910234][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.958692][ T8779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.969365][ T918] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.984154][ T918] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.012501][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.666116][ T8799] loop2: detected capacity change from 0 to 512 [ 121.673172][ T8799] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.681769][ T8799] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.700065][ T8799] EXT4-fs error (device loop2): ext4_map_blocks:786: inode #2: block 4: comm syz.2.2042: lblock 0 mapped to illegal pblock 4 (length 1) [ 121.721651][ T8799] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 121.722166][ T8799] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.2042: error -117 reading directory block [ 121.732339][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 121.732359][ C0] EXT4-fs (loop2): initial error at time 1775042044: ext4_map_blocks:786: inode 2: block 4 [ 121.732402][ C0] EXT4-fs (loop2): last error at time 1775042044: ext4_map_blocks:786: inode 2: block 4 [ 121.771736][ T8799] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 121.780611][ T8799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.817913][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.487335][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'. [ 122.506002][ T8831] dummy0: entered promiscuous mode [ 122.511590][ T8831] macsec1: entered promiscuous mode [ 122.520032][ T8831] macsec1: entered allmulticast mode [ 122.526043][ T8831] dummy0: entered allmulticast mode [ 122.545550][ T8831] dummy0: left allmulticast mode [ 122.581800][ T8835] loop7: detected capacity change from 0 to 764 [ 122.584521][ T8831] dummy0: left promiscuous mode [ 122.601540][ T8833] loop2: detected capacity change from 0 to 1764 [ 122.629874][ T8833] ISOFS: Unable to identify CD-ROM format. [ 122.770621][ T8848] loop2: detected capacity change from 0 to 512 [ 122.892045][ T8848] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.916384][ T8848] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 122.926677][ T8848] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 122.937134][ T8848] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 122.945310][ T8848] System zones: 0-2, 18-18, 34-35 [ 122.951973][ T8848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.977725][ T8856] Invalid argument reading file caps for ./file0 [ 123.040632][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.064541][ T8861] netlink: 'syz.2.2069': attribute type 3 has an invalid length. [ 123.079034][ T8861] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2069'. [ 123.252352][ T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.327255][ T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.365070][ T8877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2077'. [ 123.398600][ T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.420200][ T9] Process accounting resumed [ 123.457558][ T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.611814][ T8873] chnl_net:caif_netlink_parms(): no params data found [ 123.626580][ T30] bridge_slave_1: left allmulticast mode [ 123.650744][ T30] bridge_slave_1: left promiscuous mode [ 123.661419][ T8890] Invalid argument reading file caps for ./file0 [ 123.674486][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.692896][ T30] bridge_slave_0: left allmulticast mode [ 123.703302][ T30] bridge_slave_0: left promiscuous mode [ 123.722110][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.775402][ T6090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.826598][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.837343][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.847798][ T30] bond0 (unregistering): Released all slaves [ 123.856272][ T30] bond1 (unregistering): Released all slaves [ 123.899226][ T30] tipc: Disabling bearer [ 123.910310][ T30] tipc: Left network mode [ 123.945293][ T30] hsr_slave_0: left promiscuous mode [ 123.953957][ T30] hsr_slave_1: left promiscuous mode [ 123.961354][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.985843][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.995780][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.003508][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.016244][ T30] veth1_macvtap: left promiscuous mode [ 124.021996][ T30] veth0_macvtap: left promiscuous mode [ 124.027953][ T30] veth1_vlan: left promiscuous mode [ 124.034003][ T30] veth0_vlan: left promiscuous mode [ 124.120407][ T8914] loop2: detected capacity change from 0 to 512 [ 124.137101][ T8914] EXT4-fs: Ignoring removed oldalloc option [ 124.145389][ T30] team0 (unregistering): Port device team_slave_1 removed [ 124.156306][ T30] team0 (unregistering): Port device team_slave_0 removed [ 124.173948][ T8914] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.2084: corrupted in-inode xattr: invalid ea_ino [ 124.187915][ T8914] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.188122][ T8914] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2084: couldn't read orphan inode 15 (err -117) [ 124.197433][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 124.197457][ C0] EXT4-fs (loop2): initial error at time 1775042046: ext4_iget_extra_inode:5040: inode 15 [ 124.197506][ C0] EXT4-fs (loop2): last error at time 1775042046: ext4_iget_extra_inode:5040: inode 15 [ 124.237291][ T8914] loop2: lost filesystem error report for type 5 error -117 [ 124.237970][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.253143][ T8914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.266080][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.273637][ T8873] bridge_slave_0: entered allmulticast mode [ 124.280613][ T8873] bridge_slave_0: entered promiscuous mode [ 124.288813][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.296217][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.303730][ T8873] bridge_slave_1: entered allmulticast mode [ 124.311916][ T8873] bridge_slave_1: entered promiscuous mode [ 124.334990][ T8873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.345725][ T8873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.374092][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.387261][ T8873] team0: Port device team_slave_0 added [ 124.393989][ T8873] team0: Port device team_slave_1 added [ 124.409505][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.460076][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.474162][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.536511][ T8873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.555061][ T8873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.578013][ T8873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.624944][ T8873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.706127][ T8873] hsr_slave_0: entered promiscuous mode [ 124.714261][ T8873] hsr_slave_1: entered promiscuous mode [ 124.721005][ T8873] debugfs: 'hsr0' already exists in 'hsr' [ 124.728030][ T8873] Cannot create hsr debugfs directory [ 124.899993][ T8873] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 124.926579][ T8873] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 124.958128][ T8873] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 124.974900][ T8873] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 125.034631][ T8873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.054411][ T8873] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.065800][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.072899][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.087443][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.094634][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.191583][ T8966] chnl_net:caif_netlink_parms(): no params data found [ 125.248483][ T8966] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.255972][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.263419][ T8966] bridge_slave_0: entered allmulticast mode [ 125.272278][ T8966] bridge_slave_0: entered promiscuous mode [ 125.280049][ T8966] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.288013][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.297049][ T8966] bridge_slave_1: entered allmulticast mode [ 125.303988][ T8966] bridge_slave_1: entered promiscuous mode [ 125.327734][ T8966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.339275][ T8966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.363152][ T8873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.372406][ T8966] team0: Port device team_slave_0 added [ 125.379664][ T8966] team0: Port device team_slave_1 added [ 125.403951][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.413960][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.440519][ T8966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.452445][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.459969][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.486988][ T8966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.519021][ T8966] hsr_slave_0: entered promiscuous mode [ 125.526542][ T8966] hsr_slave_1: entered promiscuous mode [ 125.532633][ T8966] debugfs: 'hsr0' already exists in 'hsr' [ 125.539147][ T8966] Cannot create hsr debugfs directory [ 125.689944][ T8873] veth0_vlan: entered promiscuous mode [ 125.702215][ T8873] veth1_vlan: entered promiscuous mode [ 125.729419][ T8873] veth0_macvtap: entered promiscuous mode [ 125.739050][ T8873] veth1_macvtap: entered promiscuous mode [ 125.757463][ T8873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.770404][ T8873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.782684][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.792365][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.802641][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.813295][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.857113][ T8966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.884262][ T8966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.916158][ T8966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.954423][ T8966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.022928][ T8966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.036396][ T8966] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.047302][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.054854][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.114542][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.121962][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.329266][ T9114] Process accounting resumed [ 126.415101][ T7875] hid_parser_main: 7 callbacks suppressed [ 126.415186][ T7875] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.461992][ T9126] xt_hashlimit: size too large, truncated to 1048576 [ 126.484409][ T7875] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.495469][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.848889][ T8966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.960715][ T9150] hid-generic 0000:0000:0000.0004: pid 9150 passed too short report [ 127.066449][ T9156] xt_CT: No such helper "snmp_trap" [ 127.106756][ T8966] veth0_vlan: entered promiscuous mode [ 127.149554][ T8966] veth1_vlan: entered promiscuous mode [ 127.197465][ T8966] veth0_macvtap: entered promiscuous mode [ 127.216826][ T8966] veth1_macvtap: entered promiscuous mode [ 127.240457][ T8966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.261748][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 127.261797][ T28] audit: type=1400 audit(1775042050.064:926): avc: denied { setopt } for pid=9179 comm="syz.8.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.298963][ T8966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.345399][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.355350][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.364789][ T28] audit: type=1400 audit(1775042050.164:927): avc: denied { append } for pid=9185 comm="syz.2.2118" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 127.399248][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.412084][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.806110][ T28] audit: type=1400 audit(1775042050.614:928): avc: denied { read } for pid=9226 comm="syz.0.2124" path="socket:[25743]" dev="sockfs" ino=25743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.857400][ T9229] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2124'. [ 128.004485][ T9238] loop8: detected capacity change from 0 to 512 [ 128.039375][ T9238] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.052484][ T9238] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.075081][ T9238] EXT4-fs (loop8): shut down requested (0) [ 128.190855][ T7984] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.204168][ T309] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 128.723819][ T28] audit: type=1326 audit(1775042051.524:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9306 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66bdbcc819 code=0x7ffc0000 [ 128.764410][ T9304] 9pnet: p9_errstr2errno: server reported unknown error [ 128.822176][ T28] audit: type=1326 audit(1775042051.524:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9306 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66bdbcc819 code=0x7ffc0000 [ 128.880800][ T28] audit: type=1326 audit(1775042051.524:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9306 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66bdbcc819 code=0x7ffc0000 [ 128.944091][ T28] audit: type=1326 audit(1775042051.534:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9306 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66bdbcc819 code=0x7ffc0000 [ 128.997770][ T9327] batadv_slave_1: entered promiscuous mode [ 129.001335][ T28] audit: type=1326 audit(1775042051.534:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9306 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f66bdbcc819 code=0x7ffc0000 [ 129.029830][ T9326] batadv_slave_1: left promiscuous mode [ 129.040114][ T28] audit: type=1326 audit(1775042051.534:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9306 comm="syz.8.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66bdbcc819 code=0x7ffc0000 [ 129.160454][ T9348] loop9: detected capacity change from 0 to 512 [ 129.177971][ T9348] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 129.222280][ T9348] EXT4-fs (loop9): 1 truncate cleaned up [ 129.265938][ T9348] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.787252][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.809212][ T9415] loop8: detected capacity change from 0 to 512 [ 129.866190][ T9415] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 129.886537][ T9415] EXT4-fs (loop8): 1 truncate cleaned up [ 129.902019][ T9415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.966701][ T7984] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 129.988891][ T7984] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 130.001521][ T9428] sctp: [Deprecated]: syz.2.2170 (pid 9428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.001521][ T9428] Use struct sctp_sack_info instead [ 130.050746][ T9433] loop2: detected capacity change from 0 to 128 [ 130.085012][ T9433] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 130.117376][ T9433] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 130.125812][ T9433] FAT-fs (loop2): Filesystem has been set read-only [ 130.133930][ T9433] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 130.209878][ T7984] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.222526][ T50] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.304609][ T50] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.364904][ T9465] loop2: detected capacity change from 0 to 512 [ 130.385057][ T50] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.388266][ T9465] EXT4-fs: Ignoring removed nobh option [ 130.425037][ T9465] EXT4-fs: Ignoring removed orlov option [ 130.449941][ T9465] EXT4-fs error (device loop2): __ext4_iget:5393: inode #11: block 1: comm syz.2.2188: invalid block [ 130.470274][ T9477] loop9: detected capacity change from 0 to 1024 [ 130.490951][ T50] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.494198][ T9465] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.502605][ T9477] EXT4-fs: Ignoring removed orlov option [ 130.504090][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 130.524881][ C0] EXT4-fs (loop2): initial error at time 1775042053: __ext4_iget:5393: inode 11: block 1 [ 130.526698][ T9465] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2188: couldn't read orphan inode 11 (err -117) [ 130.534895][ C0] EXT4-fs (loop2): last error at time 1775042053: __ext4_iget:5393: inode 11: block 1 [ 130.547868][ T9465] loop2: lost filesystem error report for type 5 error -117 [ 130.559232][ T9465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.601176][ T9477] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.620930][ T9482] netlink: 'syz.0.2193': attribute type 21 has an invalid length. [ 130.663260][ T9465] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 130.691012][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.705025][ T9482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2193'. [ 130.724906][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.764787][ T50] bridge_slave_1: left allmulticast mode [ 130.770842][ T50] bridge_slave_1: left promiscuous mode [ 130.792696][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.813977][ T50] bridge_slave_0: left allmulticast mode [ 130.820491][ T50] bridge_slave_0: left promiscuous mode [ 130.826488][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.001404][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.030441][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.042464][ T50] bond0 (unregistering): Released all slaves [ 131.126720][ T50] hsr_slave_0: left promiscuous mode [ 131.134458][ T50] hsr_slave_1: left promiscuous mode [ 131.155408][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.163289][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.218136][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.248139][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.275016][ T50] veth1_macvtap: left promiscuous mode [ 131.280597][ T50] veth0_macvtap: left promiscuous mode [ 131.296600][ T50] veth1_vlan: left promiscuous mode [ 131.312091][ T50] veth0_vlan: left promiscuous mode [ 131.477561][ T50] team0 (unregistering): Port device team_slave_1 removed [ 131.499653][ T50] team0 (unregistering): Port device team_slave_0 removed [ 131.671518][ T9469] chnl_net:caif_netlink_parms(): no params data found [ 131.744201][ T9547] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 131.854160][ T9469] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.861265][ T9469] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.871829][ T9469] bridge_slave_0: entered allmulticast mode [ 131.879163][ T9469] bridge_slave_0: entered promiscuous mode [ 131.886642][ T9469] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.894429][ T9469] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.902033][ T9469] bridge_slave_1: entered allmulticast mode [ 131.909076][ T9469] bridge_slave_1: entered promiscuous mode [ 131.978912][ T9469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.990939][ T9561] netlink: 'syz.2.2213': attribute type 3 has an invalid length. [ 132.001141][ T9469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.011314][ T9561] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2213'. [ 132.021864][ T9561] netlink: 'syz.2.2213': attribute type 3 has an invalid length. [ 132.029937][ T9561] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2213'. [ 132.061723][ T9469] team0: Port device team_slave_0 added [ 132.072631][ T9469] team0: Port device team_slave_1 added [ 132.135064][ T9469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.142488][ T9469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.167467][ T9573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9573 comm=syz.0.2216 [ 132.170842][ T9469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.208297][ T9572] all (unregistering): Released all slaves [ 132.229332][ T9469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.236605][ T9469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.265894][ T9469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.316606][ T9469] hsr_slave_0: entered promiscuous mode [ 132.343303][ T9469] hsr_slave_1: entered promiscuous mode [ 132.384700][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 132.384717][ T28] audit: type=1400 audit(1775042055.184:1019): avc: denied { map_create } for pid=9581 comm="syz.9.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.432341][ T28] audit: type=1400 audit(1775042055.224:1020): avc: denied { map_read map_write } for pid=9581 comm="syz.9.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.503726][ T28] audit: type=1400 audit(1775042055.224:1021): avc: denied { create } for pid=9585 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.583430][ T28] audit: type=1400 audit(1775042055.224:1022): avc: denied { bind } for pid=9585 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.654882][ T28] audit: type=1400 audit(1775042055.224:1023): avc: denied { setopt } for pid=9585 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.728703][ T28] audit: type=1400 audit(1775042055.224:1024): avc: denied { read } for pid=9585 comm="syz.0.2223" path="socket:[26368]" dev="sockfs" ino=26368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.777399][ T28] audit: type=1400 audit(1775042055.264:1025): avc: denied { ioctl } for pid=9583 comm="syz.2.2222" path="socket:[26371]" dev="sockfs" ino=26371 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.805583][ T28] audit: type=1400 audit(1775042055.284:1026): avc: denied { write } for pid=9585 comm="syz.0.2223" path="socket:[26368]" dev="sockfs" ino=26368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.832584][ T28] audit: type=1400 audit(1775042055.304:1027): avc: denied { create } for pid=9594 comm="syz.0.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.856613][ T28] audit: type=1400 audit(1775042055.304:1028): avc: denied { getopt } for pid=9594 comm="syz.0.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.188123][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 133.233563][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 133.265246][ T9469] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.306548][ T9469] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.330225][ T9469] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.339940][ T9469] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.493637][ T9469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.536042][ T9469] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.559374][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.566887][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.626937][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.634325][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.704894][ T9469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.811225][ T9692] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2247'. [ 133.888302][ T9469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.253974][ T9469] veth0_vlan: entered promiscuous mode [ 134.287609][ T9469] veth1_vlan: entered promiscuous mode [ 134.337692][ T9469] veth0_macvtap: entered promiscuous mode [ 134.369877][ T9469] veth1_macvtap: entered promiscuous mode [ 134.401399][ T9469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.429747][ T9469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.458248][ T309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.486928][ T309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.547105][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.574206][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.588037][ T9761] loop2: detected capacity change from 0 to 128 [ 135.047039][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 135.064953][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 135.257255][ T9806] syz.2.2257: attempt to access beyond end of device [ 135.257255][ T9806] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 136.043321][ T9894] Cannot find add_set index 0 as target [ 136.127638][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2286'. [ 136.272665][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.439802][ T9941] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=9941 comm=syz.0.2297 [ 137.299295][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.314633][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.762760][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 137.762776][ T28] audit: type=1400 audit(1775042060.564:1110): avc: denied { read write } for pid=10035 comm="syz.9.2316" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.813440][ T28] audit: type=1400 audit(1775042060.564:1111): avc: denied { open } for pid=10035 comm="syz.9.2316" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.840041][ T28] audit: type=1400 audit(1775042060.604:1112): avc: denied { create } for pid=10035 comm="syz.9.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.862933][ T28] audit: type=1400 audit(1775042060.604:1113): avc: denied { write } for pid=10035 comm="syz.9.2316" path="socket:[27249]" dev="sockfs" ino=27249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.889470][ T28] audit: type=1400 audit(1775042060.614:1114): avc: denied { create } for pid=10037 comm="syz.4.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.910769][ T28] audit: type=1400 audit(1775042060.614:1115): avc: denied { read } for pid=10037 comm="syz.4.2317" path="socket:[28203]" dev="sockfs" ino=28203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.962438][ T28] audit: type=1400 audit(1775042060.764:1116): avc: denied { create } for pid=10042 comm="syz.4.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.014564][ T28] audit: type=1400 audit(1775042060.764:1117): avc: denied { write } for pid=10042 comm="syz.4.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.035535][ T28] audit: type=1400 audit(1775042060.764:1118): avc: denied { read } for pid=10042 comm="syz.4.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.185455][ T28] audit: type=1326 audit(1775042060.974:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10051 comm="syz.0.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9f2fc819 code=0x7ffc0000 [ 138.324372][ T3601] Bluetooth: hci0: command 0x1003 tx timeout [ 138.332047][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.262273][ T9926] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 139.307973][T10126] loop2: detected capacity change from 0 to 512 [ 139.337768][T10126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.360801][T10126] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.383296][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2347'. [ 139.406256][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.433068][T10132] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2350'. [ 139.456114][T10132] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2350'. [ 139.833897][T10166] bridge1: entered promiscuous mode [ 139.840273][T10166] bridge1: entered allmulticast mode [ 139.855745][T10166] team0: Port device bridge1 added [ 139.867864][T10166] bridge0: port 3(team0) entered blocking state [ 139.875489][T10166] bridge0: port 3(team0) entered disabled state [ 139.882180][T10166] team0: entered allmulticast mode [ 139.889081][T10166] team_slave_0: entered allmulticast mode [ 139.895971][T10166] team_slave_1: entered allmulticast mode [ 139.908989][T10166] team0: entered promiscuous mode [ 139.916012][T10166] team_slave_0: entered promiscuous mode [ 139.922683][T10166] team_slave_1: entered promiscuous mode [ 139.939216][T10166] bridge0: port 3(team0) entered blocking state [ 139.945635][T10166] bridge0: port 3(team0) entered forwarding state [ 140.133905][T10187] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2373'. [ 140.231697][T10198] loop9: detected capacity change from 0 to 512 [ 140.242444][T10198] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2378: invalid indirect mapped block 256 (level 2) [ 140.273673][T10198] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 140.274248][T10198] EXT4-fs (loop9): 2 truncates cleaned up [ 140.290199][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 140.290226][ C1] EXT4-fs (loop9): initial error at time 1775042063: ext4_free_branches:1023: inode 11 [ 140.290274][ C1] EXT4-fs (loop9): last error at time 1775042063: ext4_free_branches:1023: inode 11 [ 140.317981][T10198] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.365859][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.380769][T10205] loop2: detected capacity change from 0 to 1024 [ 140.420908][T10205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.422097][T10209] loop9: detected capacity change from 0 to 512 [ 140.452638][T10209] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2382: inode has both inline data and extents flags [ 140.475560][T10205] IPVS: persistence engine module ip_vs_pe_€ not found [ 140.489203][T10209] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.489339][T10209] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2382: couldn't read orphan inode 15 (err -117) [ 140.498563][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 140.498592][ C0] EXT4-fs (loop9): initial error at time 1775042063: ext4_orphan_get:1397: inode 15 [ 140.498619][ C0] EXT4-fs (loop9): last error at time 1775042063: ext4_orphan_get:1397: inode 15 [ 140.542653][T10209] loop9: lost filesystem error report for type 5 error -117 [ 140.543746][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.561748][T10209] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.582794][T10209] EXT4-fs error (device loop9): ext4_check_dx_root:2201: inode #2: comm syz.9.2382: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 140.641036][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.842070][T10233] loop4: detected capacity change from 0 to 1024 [ 140.860627][T10233] EXT4-fs: Ignoring removed orlov option [ 140.902274][ T1034] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 140.910837][T10233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.937511][ T1034] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.074880][ T9469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.487558][T10295] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2406'. [ 141.585039][T10307] loop4: detected capacity change from 0 to 256 [ 141.674736][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10314 comm=syz.4.2414 [ 141.708074][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10314 comm=syz.4.2414 [ 141.722604][T10316] loop2: detected capacity change from 0 to 512 [ 141.742511][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10314 comm=syz.4.2414 [ 141.758996][T10316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.774605][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10314 comm=syz.4.2414 [ 141.794571][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10314 comm=syz.4.2414 [ 141.844317][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10314 comm=syz.4.2414 [ 141.858342][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10314 comm=syz.4.2414 [ 141.868133][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.872091][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10314 comm=syz.4.2414 [ 141.894738][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10314 comm=syz.4.2414 [ 141.908022][T10323] geneve2: entered promiscuous mode [ 141.908215][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10314 comm=syz.4.2414 [ 142.024972][T10326] xt_hashlimit: size too large, truncated to 1048576 [ 142.375546][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.485486][T10364] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 142.493648][T10364] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.732839][T10381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.741403][T10381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.761004][T10381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.774424][T10381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.791117][T10381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.814582][T10380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.837421][T10384] tipc: Started in network mode [ 142.842338][T10384] tipc: Node identity ac14142f, cluster identity 4711 [ 142.869383][T10384] tipc: New replicast peer: 0.0.0.0 [ 142.881548][T10384] tipc: Enabled bearer , priority 10 [ 142.891038][T10386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2435'. [ 142.904458][T10384] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 142.938641][T10386] netlink: 'syz.0.2435': attribute type 7 has an invalid length. [ 142.984286][T10386] netlink: 'syz.0.2435': attribute type 8 has an invalid length. [ 143.003518][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2435'. [ 143.016387][T10386] erspan0: entered promiscuous mode [ 143.022902][T10386] gretap0: entered promiscuous mode [ 143.032979][T10386] erspan0: left promiscuous mode [ 143.039685][T10386] gretap0: left promiscuous mode [ 143.111750][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 143.111769][ T28] audit: type=1326 audit(1775042065.914:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9f2fc819 code=0x7ffc0000 [ 143.142838][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.152585][ T28] audit: type=1326 audit(1775042065.964:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f2a9f2fc819 code=0x7ffc0000 [ 143.177643][ T28] audit: type=1326 audit(1775042065.964:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9f2fc819 code=0x7ffc0000 [ 143.201693][ T28] audit: type=1326 audit(1775042065.964:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.0.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a9f2fc819 code=0x7ffc0000 [ 143.305186][ T28] audit: type=1400 audit(1775042066.104:1247): avc: denied { mounton } for pid=10402 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 143.426696][T10402] chnl_net:caif_netlink_parms(): no params data found [ 143.452506][T10419] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2443'. [ 143.479355][ T309] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.492067][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.499363][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.507151][T10402] bridge_slave_0: entered allmulticast mode [ 143.514162][T10402] bridge_slave_0: entered promiscuous mode [ 143.523854][ T309] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.538181][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.545942][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.553489][T10402] bridge_slave_1: entered allmulticast mode [ 143.560943][T10402] bridge_slave_1: entered promiscuous mode [ 143.582354][ T309] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.596422][T10402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.607329][T10402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.620823][ T28] audit: type=1400 audit(1775042066.424:1248): avc: denied { bind } for pid=10426 comm="syz.0.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.629003][T10402] team0: Port device team_slave_0 added [ 143.644443][ T28] audit: type=1400 audit(1775042066.454:1249): avc: denied { setopt } for pid=10426 comm="syz.0.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.650306][T10402] team0: Port device team_slave_1 added [ 143.679883][ T309] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.703254][T10402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.710578][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.738173][T10402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.749929][T10402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.758120][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.789874][T10402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.836382][T10402] hsr_slave_0: entered promiscuous mode [ 143.854885][T10402] hsr_slave_1: entered promiscuous mode [ 143.870902][T10402] debugfs: 'hsr0' already exists in 'hsr' [ 143.877844][T10402] Cannot create hsr debugfs directory [ 143.930717][ T35] tipc: Node number set to 2886997039 [ 143.944283][ T309] bridge_slave_1: left allmulticast mode [ 143.949968][ T309] bridge_slave_1: left promiscuous mode [ 143.964298][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.972640][ T309] bridge_slave_0: left allmulticast mode [ 143.998407][ T309] bridge_slave_0: left promiscuous mode [ 144.005617][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.153219][ T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.163858][ T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.172886][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.182844][ T309] bond0 (unregistering): Released all slaves [ 144.191231][ T309] bond1 (unregistering): Released all slaves [ 144.243952][ T309] hsr_slave_0: left promiscuous mode [ 144.250413][ T309] hsr_slave_1: left promiscuous mode [ 144.278636][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.297339][ T309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.316353][ T28] audit: type=1326 audit(1775042067.124:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeab09c819 code=0x7ffc0000 [ 144.341963][ T309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.351254][ T28] audit: type=1326 audit(1775042067.124:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7feeab09c819 code=0x7ffc0000 [ 144.377909][ T28] audit: type=1326 audit(1775042067.124:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeab09c819 code=0x7ffc0000 [ 144.384339][ T309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.409802][ T3601] Bluetooth: hci0: command 0x1003 tx timeout [ 144.414157][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.436580][ T309] veth1_macvtap: left promiscuous mode [ 144.443643][ T309] veth0_macvtap: left promiscuous mode [ 144.449533][ T309] veth1_vlan: left promiscuous mode [ 144.478498][ T309] veth0_vlan: left promiscuous mode [ 144.559291][ T309] team0 (unregistering): Port device team_slave_1 removed [ 144.569185][ T309] team0 (unregistering): Port device team_slave_0 removed [ 144.606839][T10475] netlink: 'syz.4.2459': attribute type 41 has an invalid length. [ 144.659513][T10489] loop4: detected capacity change from 0 to 512 [ 144.678828][T10489] FAT-fs (loop4): Directory bread(block 199916) failed [ 144.700205][T10489] FAT-fs (loop4): Directory bread(block 199917) failed [ 144.721556][T10489] FAT-fs (loop4): Directory bread(block 199918) failed [ 144.729692][T10489] FAT-fs (loop4): Directory bread(block 199919) failed [ 144.738954][T10489] FAT-fs (loop4): Directory bread(block 199920) failed [ 144.751796][T10498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2465'. [ 144.757534][T10489] FAT-fs (loop4): Directory bread(block 199921) failed [ 144.769686][T10489] FAT-fs (loop4): Directory bread(block 199922) failed [ 144.788058][T10489] FAT-fs (loop4): Directory bread(block 199923) failed [ 144.884603][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.896534][T10489] FAT-fs (loop4): FAT read failed (blocknr 128) [ 145.182881][T10547] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 145.204359][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.251296][ T1034] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.268623][T10402] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.287370][ T1034] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.296735][T10402] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.350619][T10402] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.376180][T10402] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.383138][T10366] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 145.453145][T10586] loop4: detected capacity change from 0 to 512 [ 145.511107][T10586] EXT4-fs (loop4): 1 truncate cleaned up [ 145.514506][T10402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.524926][T10586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.590955][T10402] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.658289][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.665834][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.706171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.713501][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.729594][T10606] loop9: detected capacity change from 0 to 4096 [ 145.747495][T10561] hid-generic 0000:0000:0000.0006: pid 10561 passed too short report [ 145.791412][T10402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.819786][ T9469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.842173][T10606] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.972969][T10402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.010459][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.025662][T10635] loop2: detected capacity change from 0 to 512 [ 146.033355][T10637] xt_hashlimit: size too large, truncated to 1048576 [ 146.099826][T10635] FAT-fs (loop2): Directory bread(block 199916) failed [ 146.120554][T10635] FAT-fs (loop2): Directory bread(block 199917) failed [ 146.156379][T10635] FAT-fs (loop2): Directory bread(block 199918) failed [ 146.184344][T10635] FAT-fs (loop2): Directory bread(block 199919) failed [ 146.210975][T10635] FAT-fs (loop2): Directory bread(block 199920) failed [ 146.231164][T10635] FAT-fs (loop2): Directory bread(block 199921) failed [ 146.252681][T10635] FAT-fs (loop2): Directory bread(block 199922) failed [ 146.269211][T10402] veth0_vlan: entered promiscuous mode [ 146.288164][T10635] FAT-fs (loop2): Directory bread(block 199923) failed [ 146.300681][T10402] veth1_vlan: entered promiscuous mode [ 146.344690][T10402] veth0_macvtap: entered promiscuous mode [ 146.376970][T10402] veth1_macvtap: entered promiscuous mode [ 146.415276][T10402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.432671][T10635] FAT-fs (loop2): FAT read failed (blocknr 128) [ 146.451217][T10402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.504036][ T54] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.513674][ T54] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.550741][ T309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.594104][ T309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.630257][T10678] tipc: Started in network mode [ 146.641688][T10678] tipc: Node identity ac14142f, cluster identity 4711 [ 146.665850][T10678] tipc: New replicast peer: 0.0.0.0 [ 146.671579][T10678] tipc: Enabled bearer , priority 10 [ 146.678246][T10645] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 146.709585][T10645] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 146.764610][T10691] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 146.890675][T10726] loop2: detected capacity change from 0 to 512 [ 146.914444][T10726] EXT4-fs: Ignoring removed i_version option [ 146.966549][T10726] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 146.970678][T10737] loop4: detected capacity change from 0 to 512 [ 146.978124][T10726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 146.991529][T10726] System zones: 1-12 [ 146.997625][T10726] EXT4-fs (loop2): orphan cleanup on readonly fs [ 147.003341][T10737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.014229][T10726] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2506: invalid indirect mapped block 2 (level 2) [ 147.034289][T10726] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.034609][T10726] EXT4-fs (loop2): Remounting filesystem read-only [ 147.035571][T10737] EXT4-fs: Ignoring removed oldalloc option [ 147.044430][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 147.044452][ C1] EXT4-fs (loop2): initial error at time 1775042069: ext4_free_branches:1023: inode 11 [ 147.044491][ C1] EXT4-fs (loop2): last error at time 1775042069: ext4_free_branches:1023: inode 11 [ 147.078237][T10737] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 147.091748][T10737] System zones: 0-2, 18-18, 34-34 [ 147.097939][T10737] EXT4-fs (loop4): orphan cleanup on readonly fs [ 147.105413][T10726] EXT4-fs (loop2): 1 truncate cleaned up [ 147.111749][T10726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 147.126756][T10737] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 147.175989][T10737] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 147.188592][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 147.198011][T10737] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.2510: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 147.217535][T10737] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 147.217955][T10737] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2510: couldn't read orphan inode 13 (err -117) [ 147.227671][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 147.227695][ C0] EXT4-fs (loop4): last error at time 1775042070: ext4_ext_check_inode:521: inode 13 [ 147.258579][T10737] loop4: lost filesystem error report for type 5 error -117 [ 147.263084][T10737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.285756][T10737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.470655][T10770] netlink: 'syz.2.2513': attribute type 15 has an invalid length. [ 147.598480][T10795] loop5: detected capacity change from 0 to 512 [ 147.675193][T10795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.731550][T10795] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.788788][T10402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.804346][ T3422] tipc: Node number set to 2886997039 [ 147.868018][T10833] loop5: detected capacity change from 0 to 512 [ 147.924559][ T3401] net_ratelimit: 5 callbacks suppressed [ 147.924575][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.926622][T10833] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 148.000456][T10833] EXT4-fs (loop5): 1 truncate cleaned up [ 148.008105][T10833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.324253][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.437425][T10402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.472057][T10899] loop4: detected capacity change from 0 to 128 [ 148.919735][T10938] program syz.2.2551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.930249][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 148.930267][ T28] audit: type=1400 audit(1775042071.724:1299): avc: denied { write } for pid=10936 comm="syz.2.2551" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.006522][T10944] loop2: detected capacity change from 0 to 512 [ 149.045045][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.053650][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.066873][T10944] EXT4-fs (loop2): 1 truncate cleaned up [ 149.073275][T10944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.133196][T10952] loop4: detected capacity change from 0 to 512 [ 149.222926][T10952] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.277114][T10952] EXT4-fs (loop4): 1 truncate cleaned up [ 149.328824][T10952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.342672][ T28] audit: type=1400 audit(1775042072.154:1300): avc: denied { cpu } for pid=10967 comm="syz.9.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.384156][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.404907][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2545'. [ 149.436959][T10969] netlink: 'syz.9.2557': attribute type 21 has an invalid length. [ 149.543334][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.863393][ T9469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.871414][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'. [ 150.026923][T11019] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #3: comm syz.9.2568: corrupted inode contents [ 150.048255][ T3372] kernel write not supported for file /sg0 (pid: 3372 comm: kworker/1:2) [ 150.061281][T11026] bridge1: entered promiscuous mode [ 150.091736][T11026] bridge1: entered allmulticast mode [ 150.097312][T11019] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 150.098437][T11019] EXT4-fs error (device loop9): ext4_dirty_inode:6495: inode #3: comm syz.9.2568: mark_inode_dirty error [ 150.107744][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 150.107768][ C0] EXT4-fs (loop9): initial error at time 1775042072: ext4_do_update_inode:5602: inode 3 [ 150.107800][ C0] EXT4-fs (loop9): last error at time 1775042072: ext4_do_update_inode:5602: inode 3 [ 150.146622][T11019] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 150.148455][T11019] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #3: comm syz.9.2568: corrupted inode contents [ 150.153189][T11026] team0: Port device bridge1 added [ 150.170035][T11019] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 150.177945][T11019] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #3: comm syz.9.2568: mark_inode_dirty error [ 150.178215][T11031] bridge0: port 1(team0) entered blocking state [ 150.218177][T11031] bridge0: port 1(team0) entered disabled state [ 150.225476][T11031] team0: entered allmulticast mode [ 150.231511][T11031] team0: entered promiscuous mode [ 150.274177][T11019] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 150.295162][T11019] Quota error (device loop9): write_blk: dquota write failed [ 150.312406][T11019] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 150.342880][T11019] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.2568: Failed to acquire dquot type 0 [ 150.381055][T11019] loop9: lost filesystem error report for type 5 error -117 [ 150.381663][T11019] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.2568: corrupted inode contents [ 150.410937][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.473678][T11019] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 150.473900][T11019] EXT4-fs error (device loop9): ext4_dirty_inode:6495: inode #16: comm syz.9.2568: mark_inode_dirty error [ 150.496982][T11019] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 150.502805][T11019] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.2568: corrupted inode contents [ 150.534904][T11019] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 150.535702][T11019] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.2568: mark_inode_dirty error [ 150.558754][T11019] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 150.571656][T11019] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.2568: corrupted inode contents [ 150.602936][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2584'. [ 150.621176][T11019] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 150.642163][T11019] loop9: lost filesystem error report for type 5 error -117 [ 150.644973][T11019] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.2568: corrupted inode contents [ 150.669641][T11019] EXT4-fs error (device loop9): ext4_truncate:4602: inode #16: comm syz.9.2568: mark_inode_dirty error [ 150.686518][T11068] set_capacity_and_notify: 2 callbacks suppressed [ 150.686534][T11068] loop5: detected capacity change from 0 to 512 [ 150.704572][T11019] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 150.739599][T11019] loop9: lost filesystem error report for type 5 error -117 [ 150.740854][T11068] EXT4-fs (loop5): 1 truncate cleaned up [ 150.787728][T11019] EXT4-fs (loop9): 1 truncate cleaned up [ 150.794789][T11068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.815328][T11019] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.857106][T11081] random: crng reseeded on system resumption [ 150.858741][ T28] audit: type=1400 audit(1775042073.664:1301): avc: denied { write } for pid=11080 comm="syz.4.2589" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 150.888122][ T28] audit: type=1400 audit(1775042073.664:1302): avc: denied { open } for pid=11080 comm="syz.4.2589" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 150.893851][T11019] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.034845][T11019] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #3: comm syz.9.2568: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 151.034845][T11019] [ 151.039648][ T28] audit: type=1400 audit(1775042073.844:1303): avc: denied { create } for pid=11018 comm="syz.9.2568" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 151.151062][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.237861][T10402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.248651][T11100] 9pnet: p9_errstr2errno: server reported unknown error  [ 151.306632][T11110] loop4: detected capacity change from 0 to 256 [ 151.318237][T11110] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.356658][ T28] audit: type=1400 audit(1775042074.164:1304): avc: denied { mounton } for pid=11114 comm="syz.5.2598" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 151.360335][T11112] IPVS: persistence engine module ip_vs_pe_€ not found [ 151.403909][ T28] audit: type=1400 audit(1775042074.194:1305): avc: denied { unmount } for pid=10402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.424606][ T28] audit: type=1400 audit(1775042074.194:1306): avc: denied { unmount } for pid=10402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 151.467303][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.549659][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.588477][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.654862][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2599'. [ 151.665052][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.708794][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.809390][ T50] bridge_slave_1: left allmulticast mode [ 151.815734][ T50] bridge_slave_1: left promiscuous mode [ 151.821602][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.829500][ T50] bridge_slave_0: left allmulticast mode [ 151.835299][ T50] bridge_slave_0: left promiscuous mode [ 151.841040][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.926742][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.936941][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.947037][ T50] bond0 (unregistering): Released all slaves [ 151.956101][T11125] chnl_net:caif_netlink_parms(): no params data found [ 152.004384][ T50] hsr_slave_0: left promiscuous mode [ 152.010368][ T50] hsr_slave_1: left promiscuous mode [ 152.016762][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.024552][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.033052][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.041059][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.053046][ T50] veth1_macvtap: left promiscuous mode [ 152.058912][ T50] veth0_macvtap: left promiscuous mode [ 152.064810][ T50] veth1_vlan: left promiscuous mode [ 152.070444][ T50] veth0_vlan: left promiscuous mode [ 152.087545][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.148464][ T50] team0 (unregistering): Port device team_slave_1 removed [ 152.159160][ T50] team0 (unregistering): Port device team_slave_0 removed [ 152.254948][T11125] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.287595][T11125] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.296318][T11125] bridge_slave_0: entered allmulticast mode [ 152.303450][T11125] bridge_slave_0: entered promiscuous mode [ 152.337221][T11125] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.345189][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.363337][T11125] bridge_slave_1: entered allmulticast mode [ 152.378274][T11125] bridge_slave_1: entered promiscuous mode [ 152.388611][T11174] netlink: 'syz.2.2610': attribute type 6 has an invalid length. [ 152.433379][T11174] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2610'. [ 152.446192][T11176] Invalid argument reading file caps for ./file0 [ 152.487335][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.500771][T11125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.536288][T11125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.580636][T11125] team0: Port device team_slave_0 added [ 152.614428][T11125] team0: Port device team_slave_1 added [ 152.640587][T11188] loop9: detected capacity change from 0 to 256 [ 152.669566][T11190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2619'. [ 152.713914][T11125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.740168][T11125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.795923][T11125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.820569][T11197] batadv_slave_1: entered promiscuous mode [ 152.830586][T11195] batadv_slave_1: left promiscuous mode [ 152.839643][T11125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.847176][T11125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.891786][T11125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.982077][T11220] netlink: 61211 bytes leftover after parsing attributes in process `syz.9.2626'. [ 153.005445][ T3523] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 153.019102][ T3523] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.066838][T11125] hsr_slave_0: entered promiscuous mode [ 153.073957][T11125] hsr_slave_1: entered promiscuous mode [ 153.090731][T11125] debugfs: 'hsr0' already exists in 'hsr' [ 153.104502][T11125] Cannot create hsr debugfs directory [ 153.374810][ T1034] IPVS: starting estimator thread 0... [ 153.384294][T11252] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.464610][T11259] IPVS: using max 2928 ests per chain, 146400 per kthread [ 153.524736][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.533218][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.613486][T11125] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.648714][T11125] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.672347][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 153.687666][T11286] program syz.4.2646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.715889][T11125] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.733002][T11283] macvlan2: entered promiscuous mode [ 153.739039][T11283] bond0: entered promiscuous mode [ 153.744790][T11283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.765132][T11291] bridge0: entered promiscuous mode [ 153.770600][T11291] macvlan2: entered promiscuous mode [ 153.778446][T11125] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.940226][T11125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.000617][T11125] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.027122][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.034887][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.064320][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.071810][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.153694][T11353] loop9: detected capacity change from 0 to 512 [ 154.177132][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.211969][T11353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.219915][T11125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.228197][T11353] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.254878][T11367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2664'. [ 154.299783][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.316977][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 154.316996][ T28] audit: type=1400 audit(1775042077.124:1323): avc: denied { bind } for pid=11373 comm="syz.4.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.417612][T11389] loop9: detected capacity change from 0 to 512 [ 154.463382][T11389] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.472069][ T28] audit: type=1400 audit(1775042077.264:1324): avc: denied { create } for pid=11398 comm="syz.0.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.487622][T11389] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 154.507305][T11389] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 154.527945][T11389] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 154.530620][T11125] veth0_vlan: entered promiscuous mode [ 154.543656][T11389] System zones: 0-2, 18-18, 34-35 [ 154.551724][T11389] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.565102][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.575082][ T28] audit: type=1400 audit(1775042077.304:1325): avc: denied { connect } for pid=11398 comm="syz.0.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.604279][ T28] audit: type=1400 audit(1775042077.304:1326): avc: denied { ioctl } for pid=11398 comm="syz.0.2672" path="socket:[32264]" dev="sockfs" ino=32264 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.610101][T11125] veth1_vlan: entered promiscuous mode [ 154.636584][ T28] audit: type=1400 audit(1775042077.304:1327): avc: denied { write } for pid=11398 comm="syz.0.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.659412][ T28] audit: type=1400 audit(1775042077.304:1328): avc: denied { read } for pid=11398 comm="syz.0.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.692038][ T28] audit: type=1400 audit(1775042077.314:1329): avc: denied { create } for pid=11396 comm="syz.4.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.740750][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.741124][ T28] audit: type=1400 audit(1775042077.414:1330): avc: denied { watch watch_reads } for pid=11383 comm="syz.9.2666" path="/105/file0" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.753204][T11125] veth0_macvtap: entered promiscuous mode [ 154.797202][T11125] veth1_macvtap: entered promiscuous mode [ 154.824586][T11125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.836400][T11125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.849509][ T309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.885830][ T309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.943542][ T309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.969963][T11436] raw_sendmsg: syz.4.2683 forgot to set AF_INET. Fix it! [ 154.978865][ T309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.005311][ T28] audit: type=1400 audit(1775042077.814:1331): avc: denied { read write } for pid=8873 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.047744][T11438] loop9: detected capacity change from 0 to 512 [ 155.058017][T11438] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 155.073669][ T28] audit: type=1400 audit(1775042077.814:1332): avc: denied { open } for pid=8873 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.128219][T11438] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 155.160174][T11450] loop4: detected capacity change from 0 to 512 [ 155.164564][T11438] EXT4-fs (loop9): group descriptors corrupted! [ 155.192165][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2684'. [ 155.251404][T11450] EXT4-fs (loop4): 1 orphan inode deleted [ 155.257934][T11450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.287972][ T918] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 155.305481][T11465] loop9: detected capacity change from 0 to 512 [ 155.320877][T11464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.334898][T11450] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.347972][T11465] EXT4-fs: Mount option(s) incompatible with ext2 [ 155.456793][ T9469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.605540][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.745664][T11516] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 155.757639][T11510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2702'. [ 155.786745][T11516] loop4: detected capacity change from 0 to 128 [ 155.873495][T11524] loop4: detected capacity change from 0 to 512 [ 155.884973][T11524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.967030][T11524] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2705: invalid indirect mapped block 4294967295 (level 1) [ 155.988124][T11433] loop2: detected capacity change from 0 to 1024 [ 156.021117][T11433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.041777][T11433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 156.060503][T11524] fserror_report: 3 callbacks suppressed [ 156.060522][T11524] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.068242][T11524] EXT4-fs (loop4): Remounting filesystem read-only [ 156.078146][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 156.078169][ C0] EXT4-fs (loop4): initial error at time 1775042078: ext4_free_branches:1023: inode 11 [ 156.078216][ C0] EXT4-fs (loop4): last error at time 1775042078: ext4_free_branches:1023: inode 11 [ 156.085172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.122127][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.125838][T11524] EXT4-fs (loop4): 2 truncates cleaned up [ 156.142111][T11524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.151752][T11433] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 156.177733][T11433] System zones: 0-1, 3-36 [ 156.251075][ T9469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.262296][T11433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.332603][T11545] loop4: detected capacity change from 0 to 512 [ 156.361598][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.392905][T11545] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2708: iget: bad extra_isize 58 (inode size 256) [ 156.415248][T11553] syzkaller1: entered promiscuous mode [ 156.415481][T11545] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.420994][T11553] syzkaller1: entered allmulticast mode [ 156.424091][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 156.443301][ C0] EXT4-fs (loop4): initial error at time 1775042079: ext4_xattr_inode_iget:441: inode 11 [ 156.453550][ C0] EXT4-fs (loop4): last error at time 1775042079: ext4_xattr_inode_iget:441: inode 11 [ 156.463578][T11545] EXT4-fs (loop4): Remounting filesystem read-only [ 156.470322][T11545] EXT4-fs warning (device loop4): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 156.481631][T11545] EXT4-fs (loop4): 1 orphan inode deleted [ 156.497658][T11545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.563994][ T9469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.644591][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.809824][T11611] loop4: detected capacity change from 0 to 1024 [ 156.826304][T11611] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 156.836533][T11611] System zones: 0-1, 3-36 [ 156.842596][T11611] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2721: bad orphan inode 134217728 [ 156.856813][T11611] loop4: lost filesystem error report for type 5 error -117 [ 156.857403][T11611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.889002][T11611] EXT4-fs (loop4): shut down requested (2) [ 156.954912][ T9469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.361189][T11683] hsr0: entered promiscuous mode [ 157.374986][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2740'. [ 157.418133][T11683] hsr_slave_0: left promiscuous mode [ 157.443782][T11683] hsr_slave_1: left promiscuous mode [ 157.488794][T11683] hsr0 (unregistering): left promiscuous mode [ 157.621023][T11708] syzkaller1: entered promiscuous mode [ 157.637726][T11708] syzkaller1: entered allmulticast mode [ 157.788737][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 157.800537][T11723] netlink: 'syz.0.2752': attribute type 30 has an invalid length. [ 157.809331][T11723] netlink: 'syz.0.2752': attribute type 29 has an invalid length. [ 157.818757][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2752'. [ 157.986403][T11748] loop9: detected capacity change from 0 to 512 [ 158.065344][T11748] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2764: inode has both inline data and extents flags [ 158.083221][T11748] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.083395][T11748] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2764: couldn't read orphan inode 15 (err -117) [ 158.092789][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 158.092812][ C0] EXT4-fs (loop9): initial error at time 1775042080: ext4_orphan_get:1397: inode 15 [ 158.092848][ C0] EXT4-fs (loop9): last error at time 1775042080: ext4_orphan_get:1397: inode 15 [ 158.148760][T11748] loop9: lost filesystem error report for type 5 error -117 [ 158.149254][T11748] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.212813][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.240514][T11767] block device autoloading is deprecated and will be removed. [ 158.844932][ T9] net_ratelimit: 4 callbacks suppressed [ 158.844950][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.058336][T11793] loop2: detected capacity change from 0 to 128 [ 159.354666][ T28] kauditd_printk_skb: 147 callbacks suppressed [ 159.354683][ T28] audit: type=1326 audit(1775042082.164:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.9.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0bff00c819 code=0x7ffc0000 [ 159.401647][ T28] audit: type=1400 audit(1775042082.204:1480): avc: denied { execmem } for pid=11817 comm="syz.1.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 159.458016][ T28] audit: type=1400 audit(1775042082.264:1481): avc: denied { bind } for pid=11823 comm="syz.4.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.485494][ T28] audit: type=1400 audit(1775042082.264:1482): avc: denied { node_bind } for pid=11823 comm="syz.4.2796" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 159.519877][ T28] audit: type=1400 audit(1775042082.294:1483): avc: denied { name_bind } for pid=11823 comm="syz.4.2796" src=18464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 159.559418][T11830] loop9: detected capacity change from 0 to 512 [ 159.567781][ T28] audit: type=1400 audit(1775042082.374:1484): avc: denied { listen } for pid=11831 comm="syz.4.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.608535][T11830] EXT4-fs (loop9): 1 truncate cleaned up [ 159.617953][T11830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.676409][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.720817][T11843] loop9: detected capacity change from 0 to 256 [ 159.807010][T11843] FAT-fs (loop9): Directory bread(block 64) failed [ 159.834126][T11843] FAT-fs (loop9): Directory bread(block 65) failed [ 159.846582][T11843] FAT-fs (loop9): Directory bread(block 66) failed [ 159.869273][T11843] FAT-fs (loop9): Directory bread(block 67) failed [ 159.882502][T11843] FAT-fs (loop9): Directory bread(block 68) failed [ 159.903503][T11843] FAT-fs (loop9): Directory bread(block 69) failed [ 159.910512][ T28] audit: type=1400 audit(1775042082.704:1485): avc: denied { connect } for pid=11858 comm="syz.2.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.912486][T11843] FAT-fs (loop9): Directory bread(block 70) failed [ 159.939973][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.951945][T11843] FAT-fs (loop9): Directory bread(block 71) failed [ 159.959103][T11843] FAT-fs (loop9): Directory bread(block 72) failed [ 159.966117][T11843] FAT-fs (loop9): Directory bread(block 73) failed [ 160.138285][T11843] syz.9.2802: attempt to access beyond end of device [ 160.138285][T11843] loop9: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 160.203474][T11843] syz.9.2802: attempt to access beyond end of device [ 160.203474][T11843] loop9: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 160.257516][T11843] syz.9.2802: attempt to access beyond end of device [ 160.257516][T11843] loop9: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 160.332570][ T28] audit: type=1400 audit(1775042083.134:1486): avc: denied { watch } for pid=11866 comm="syz.2.2807" path="/589" dev="tmpfs" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 160.464574][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.478495][ T28] audit: type=1400 audit(1775042083.284:1487): avc: denied { accept } for pid=11873 comm="syz.1.2810" lport=53895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.528388][ T28] audit: type=1326 audit(1775042083.314:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11876 comm="syz.4.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415894c819 code=0x7ffc0000 [ 160.634631][T11886] loop4: detected capacity change from 0 to 512 [ 160.678423][T11886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.715036][T11886] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.767777][T11904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.792878][T11908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2820'. [ 160.923358][T11914] Invalid argument reading file caps for ./file0 [ 160.964287][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.028081][ T8966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.060479][ T9469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.194026][T11925] sctp: [Deprecated]: syz.1.2828 (pid 11925) Use of int in max_burst socket option. [ 161.194026][T11925] Use struct sctp_assoc_value instead [ 161.732607][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 162.010077][ T1034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.089654][T12025] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2859'. [ 162.171299][T12037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.336272][T12069] program syz.0.2873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.409387][T12082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2877'. [ 162.519896][T12091] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2880'. [ 162.530205][T12091] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2880'. [ 162.569438][T12093] set_capacity_and_notify: 1 callbacks suppressed [ 162.569456][T12093] loop4: detected capacity change from 0 to 512 [ 162.597918][T12093] EXT4-fs: Ignoring removed bh option [ 162.604952][T12093] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 162.625785][T12093] EXT4-fs (loop4): 1 truncate cleaned up [ 162.632697][T12093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.662888][ T9469] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.706099][T12097] loop0: detected capacity change from 0 to 128 [ 162.764154][T12097] FAT-fs (loop0): FAT read failed (blocknr 128) [ 162.875150][T12106] loop0: detected capacity change from 0 to 1024 [ 162.905389][T12106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 162.918731][T12106] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.945420][ T8966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.982710][T12110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.991491][T12110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.000644][T12110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.044299][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.315795][T12122] loop9: detected capacity change from 0 to 1024 [ 163.364316][T12122] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.417313][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.471882][T12135] loop0: detected capacity change from 0 to 512 [ 163.494665][T12135] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.503559][T12135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.528977][T12135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.541954][T12135] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.617199][T12141] loop9: detected capacity change from 0 to 512 [ 163.636694][ T8966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.653299][T12141] EXT4-fs error (device loop9): ext4_map_blocks:786: inode #2: block 3: comm syz.9.2901: lblock 0 mapped to illegal pblock 3 (length 1) [ 163.674278][T12141] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 163.684119][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 163.688911][T12141] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.2901: error -117 reading directory block [ 163.694451][ C1] EXT4-fs (loop9): initial error at time 1775042086: ext4_map_blocks:786: inode 2: block 3 [ 163.724830][ C1] EXT4-fs (loop9): last error at time 1775042086: ext4_map_blocks:786: inode 2: block 3 [ 163.731940][T12141] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 163.767966][ T3601] Bluetooth: hci0: command 0x1003 tx timeout [ 163.774862][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.818876][T12141] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.821266][T12148] loop2: detected capacity change from 0 to 512 [ 163.844535][T12141] EXT4-fs error (device loop9): ext4_map_blocks:786: inode #2: block 3: comm syz.9.2901: lblock 0 mapped to illegal pblock 3 (length 1) [ 163.862667][T12141] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.2901: error -117 reading directory block [ 163.879391][T12141] EXT4-fs error (device loop9): ext4_map_blocks:786: inode #2: block 3: comm syz.9.2901: lblock 0 mapped to illegal pblock 3 (length 1) [ 163.894911][T12148] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.910890][T12141] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.2901: error -117 reading directory block [ 163.931931][T12148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.979618][ T8873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.047169][T12148] ext4 filesystem being mounted at /594/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.081116][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.117536][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.218883][T12173] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2914'. [ 164.350161][T12181] loop4: detected capacity change from 0 to 512 [ 164.359025][T12181] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.407149][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 164.407168][ T28] audit: type=1400 audit(1775042087.214:1588): avc: denied { remount } for pid=12180 comm="syz.4.2917" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 164.448671][T12183] loop2: detected capacity change from 0 to 512 [ 164.484864][T12183] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 164.504220][ T28] audit: type=1400 audit(1775042087.284:1589): avc: denied { mount } for pid=12186 comm="syz.4.2920" name="/" dev="configfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 164.510093][T12183] EXT4-fs error (device loop2): ext4_get_journal_inode:5888: comm syz.2.2918: inode #1792: comm syz.2.2918: iget: illegal inode # [ 164.533295][T12189] loop4: detected capacity change from 0 to 2048 [ 164.559114][ T28] audit: type=1400 audit(1775042087.284:1590): avc: denied { search } for pid=12186 comm="syz.4.2920" name="/" dev="configfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 164.570363][T12183] loop2: lost filesystem error report for type 5 error -117 [ 164.598678][ T28] audit: type=1400 audit(1775042087.284:1591): avc: denied { setattr } for pid=12186 comm="syz.4.2920" name="/" dev="configfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 164.610124][T12183] EXT4-fs (loop2): Remounting filesystem read-only [ 164.631206][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 164.631227][ C1] EXT4-fs (loop2): initial error at time 1775042087: ext4_get_journal_inode:5888 [ 164.631256][ C1] EXT4-fs (loop2): last error at time 1775042087: ext4_get_journal_inode:5888 [ 164.671904][T12183] EXT4-fs (loop2): no journal found [ 164.702335][T12183] EXT4-fs (loop2): can't get journal size [ 164.714366][ T3372] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 164.718350][ T28] audit: type=1400 audit(1775042087.524:1592): avc: denied { read write } for pid=12192 comm="syz.4.2922" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 164.748534][ T3372] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.748576][ T28] audit: type=1400 audit(1775042087.524:1593): avc: denied { open } for pid=12192 comm="syz.4.2922" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 164.792719][T12183] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 164.849949][T12183] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 165.011764][ T28] audit: type=1400 audit(1775042087.814:1594): avc: denied { ioctl } for pid=12200 comm="syz.0.2924" path="socket:[34334]" dev="sockfs" ino=34334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.127002][ T3415] net_ratelimit: 1027 callbacks suppressed [ 165.127020][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.156723][T12210] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.204504][T12210] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.241084][ T54] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.294667][ T28] audit: type=1400 audit(1775042088.104:1595): avc: denied { create } for pid=12220 comm="syz.4.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.297380][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2933'. [ 165.318886][ T28] audit: type=1400 audit(1775042088.124:1596): avc: denied { connect } for pid=12220 comm="syz.4.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.333342][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2933'. [ 165.356386][T12223] netlink: 4676 bytes leftover after parsing attributes in process `syz.1.2933'. [ 165.472937][ T28] audit: type=1400 audit(1775042088.274:1597): avc: denied { bind } for pid=12233 comm="syz.4.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.711710][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.741510][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.757181][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.892655][T12235] bond0: left promiscuous mode [ 165.898666][T12235] macvlan2: left promiscuous mode [ 165.907809][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.933899][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.955169][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.963843][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.978375][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.987787][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.997418][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.034976][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.058377][T12269] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.166262][T12265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.222801][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.241402][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.380903][T12310] netlink: 'syz.1.2961': attribute type 21 has an invalid length. [ 166.506906][T12326] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 166.553760][T12326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.576292][T12326] bond1: (slave geneve2): making interface the new active one [ 166.585602][T12326] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 166.605873][ T54] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.635188][ T54] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.652471][ T54] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.661318][ T54] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.856940][T12360] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.004885][T12348] loop4: p1 p3 < > [ 167.132531][ T6349] udevd[6349]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 167.141013][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 167.195087][T12360] ================================================================== [ 167.203422][T12360] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 167.210653][T12360] [ 167.213009][T12360] write to 0xffff88810a27f70c of 4 bytes by task 12374 on cpu 0: [ 167.221017][T12360] xas_set_mark+0x12b/0x140 [ 167.225823][T12360] __folio_start_writeback+0x17b/0x370 [ 167.231586][T12360] ext4_bio_write_folio+0x5ae/0xa00 [ 167.236914][T12360] mpage_process_page_bufs+0x4a1/0x620 [ 167.242484][T12360] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 167.248331][T12360] ext4_do_writepages+0xa07/0x2840 [ 167.253473][T12360] ext4_writepages+0x18f/0x320 [ 167.258352][T12360] do_writepages+0x1c6/0x310 [ 167.263136][T12360] file_write_and_wait_range+0x178/0x2f0 [ 167.269345][T12360] generic_buffers_fsync_noflush+0x45/0x130 [ 167.275457][T12360] ext4_sync_file+0x1e4/0x710 [ 167.280260][T12360] vfs_fsync_range+0xc5/0xe0 [ 167.285062][T12360] ext4_buffered_write_iter+0x34f/0x3c0 [ 167.290708][T12360] ext4_file_write_iter+0x380/0xfa0 [ 167.296188][T12360] iter_file_splice_write+0x6c4/0xa80 [ 167.301856][T12360] direct_splice_actor+0x156/0x2a0 [ 167.307242][T12360] splice_direct_to_actor+0x311/0x670 [ 167.312720][T12360] do_splice_direct+0x119/0x1a0 [ 167.317751][T12360] do_sendfile+0x382/0x650 [ 167.322282][T12360] __x64_sys_sendfile64+0x105/0x150 [ 167.327672][T12360] x64_sys_call+0x2dc4/0x3020 [ 167.332488][T12360] do_syscall_64+0x12c/0x370 [ 167.337225][T12360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.343842][T12360] [ 167.346165][T12360] read to 0xffff88810a27f70c of 4 bytes by task 12360 on cpu 1: [ 167.354232][T12360] xas_find_marked+0x5d7/0x620 [ 167.359295][T12360] filemap_get_folios_tag+0xfa/0x510 [ 167.364761][T12360] mpage_prepare_extent_to_map+0x328/0xc50 [ 167.370584][T12360] ext4_do_writepages+0x70f/0x2840 [ 167.375789][T12360] ext4_writepages+0x18f/0x320 [ 167.380634][T12360] do_writepages+0x1c6/0x310 [ 167.385413][T12360] file_write_and_wait_range+0x178/0x2f0 [ 167.391226][T12360] generic_buffers_fsync_noflush+0x45/0x130 [ 167.397304][T12360] ext4_sync_file+0x1e4/0x710 [ 167.402038][T12360] vfs_fsync_range+0xc5/0xe0 [ 167.406721][T12360] ext4_buffered_write_iter+0x34f/0x3c0 [ 167.412475][T12360] ext4_file_write_iter+0x380/0xfa0 [ 167.417684][T12360] iter_file_splice_write+0x6c4/0xa80 [ 167.423168][T12360] direct_splice_actor+0x156/0x2a0 [ 167.428564][T12360] splice_direct_to_actor+0x311/0x670 [ 167.433948][T12360] do_splice_direct+0x119/0x1a0 [ 167.439067][T12360] do_sendfile+0x382/0x650 [ 167.443577][T12360] __x64_sys_sendfile64+0x105/0x150 [ 167.448899][T12360] x64_sys_call+0x2dc4/0x3020 [ 167.454575][T12360] do_syscall_64+0x12c/0x370 [ 167.459386][T12360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.465481][T12360] [ 167.467807][T12360] value changed: 0x0a000021 -> 0x04000021 [ 167.473783][T12360] [ 167.476115][T12360] Reported by Kernel Concurrency Sanitizer on: [ 167.482634][T12360] CPU: 1 UID: 0 PID: 12360 Comm: syz.9.2981 Not tainted syzkaller #0 PREEMPT(full) [ 167.492047][T12360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.502820][T12360] ================================================================== [ 168.245266][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.284428][T12264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.525510][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.534764][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.543763][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.324314][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.364275][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.404261][T12264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.564375][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.444875][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.484345][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.284343][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.524461][T12264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.604861][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.564344][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog