last executing test programs: 2m45.848569682s ago: executing program 0: mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x203, 0x0) 1m9.323014983s ago: executing program 0: mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x203, 0x0) 1m8.608429132s ago: executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000000c0), 0x1, 0x774, &(0x7f00000007c0)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfd14) socket$inet6(0xa, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) fallocate(r1, 0x100000003, 0x0, 0x0) 1m5.786893484s ago: executing program 0: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001114230000000001000000000800030000000000080001000000"], 0x20}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x9, 0x0, &(0x7f00000001c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000200)={0x8000000, 0x2, 0x1}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x4, @private2}, 0x1c) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) recvmsg(r4, &(0x7f0000000340)={&(0x7f00000003c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)=""/141, 0x8d}, {&(0x7f0000000540)=""/164, 0xa4}], 0x2, &(0x7f0000000600)=""/148, 0x94}, 0x2040) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_int(r5, 0x29, 0x33, 0x0, &(0x7f0000000140)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file1/file0\x00', r6, &(0x7f0000000380)='./file1\x00') syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000400)=ANY=[], 0x1, 0x0, 0x0) unlink(&(0x7f0000000440)='./file1\x00') linkat(r6, &(0x7f0000001180)='./file1\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="ffffff89896edc429914dd827eff", @ANYRES16=r7, @ANYBLOB="05000000000000000000010000000c0003000000000000000000040007800c0002000000000000000000"], 0x30}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'nfs_export=on'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'overlay\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008890}, 0x0) link(&(0x7f0000000140)='./file1\x00', 0x0) 1m4.547178299s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000080)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) syz_emit_ethernet(0x66, &(0x7f0000000380)=ANY=[], 0x0) 1m3.801233755s ago: executing program 0: r0 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x4) 55.922178824s ago: executing program 1: write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55.304990165s ago: executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, 0x0, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000400)) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x50) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5, 0x6}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0x4, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3ff, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x701, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000380)={0x48, 0x6, r4, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0xa, 0x0, 0xffffffffffffffe8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f0000003480)=[{&(0x7f0000000f00)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="d7", 0x1}], 0x1, &(0x7f0000000280)=[@sndrcv={0x30}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x50}], 0x1, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000100)={0x18, 0x0, r9, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000080)}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 47.559575371s ago: executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000e00000018608ffffffff0002"], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 43.202270813s ago: executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x10, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x10000000}}], 0x1c) 42.936262079s ago: executing program 1: r0 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046}) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) pipe(&(0x7f0000000240)) r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x62, 0x4004, @fd_index=0x9, 0x6, 0x6, 0x1000, 0x7, 0x0, {0x1}}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r9, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) prctl$PR_SCHED_CORE(0x26, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r10 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0xc8, 0x8, 0x158, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@hl={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6138a7a65f77c015) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x5}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000140)='./file0\x00', 0x848b4a, &(0x7f0000000300)=ANY=[], 0x4d, 0x236, &(0x7f0000000540)="$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") 41.857982864s ago: executing program 1: socket$kcm(0x2, 0x3, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000006c0), &(0x7f0000000700)={0x7f}, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x20000000000, 0x7fffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300081a, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") fanotify_init(0x200, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) write$vga_arbiter(r2, &(0x7f0000000100)=@other={'lock', ' ', 'io'}, 0x8) preadv(r2, &(0x7f0000003300)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 40.769585691s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RSETATTR(r1, 0x0, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) 39.718385097s ago: executing program 3: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_socket_connect_nvme_tcp() 39.716880364s ago: executing program 2: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RWALK(r1, 0x0, 0x0) 39.401672957s ago: executing program 3: gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x64) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) dup3(r1, r0, 0x0) sendmsg$netlink(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r0) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) rt_sigreturn() getrandom(0x0, 0x0, 0x0) 39.281877608s ago: executing program 2: openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0) close(0xffffffffffffffff) 38.959253865s ago: executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) futex(&(0x7f0000000300)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x2}) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) poll(0x0, 0x0, 0x0) rt_sigreturn() socket(0x1, 0x3, 0x0) poll(0x0, 0x0, 0x64) socket$inet_tcp(0x2, 0x1, 0x0) 38.905221595s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) 38.586252469s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'virt_wifi0\x00', @random='\x00\x00\x00 \x00'}) 38.329770041s ago: executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000001d40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 38.212839546s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe"], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140002000000000055"], 0x2c}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 29.776535023s ago: executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1a0082, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x840, 0x0) r3 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x80, 0x10300, 0x0, 0x32a, 0x0, r1}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2ccc, &(0x7f0000001ac0), &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) 27.39826688s ago: executing program 4: sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) 27.009391976s ago: executing program 4: symlinkat(&(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') mlockall(0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, './file0/file0\x00'}, 0x59) 26.911625599s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) symlinkat(&(0x7f0000005880)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 25.357149391s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) 8.28747523s ago: executing program 2: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) mmap$binder(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ec0), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x14, r4, 0xdf51128ec4309f57}, 0x14}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 8.174046709s ago: executing program 3: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x17, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040)=r2, 0x4) kernel console output (not intermixed with test programs): 0 [ 441.499309][ T2862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.537895][ T2862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.550919][ T77] kworker/u8:5: attempt to access beyond end of device [ 441.550919][ T77] loop0: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 441.606817][ T77] kworker/u8:5: attempt to access beyond end of device [ 441.606817][ T77] loop0: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 441.618912][ T7694] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 441.666824][ T77] kworker/u8:5: attempt to access beyond end of device [ 441.666824][ T77] loop0: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 441.726527][ T77] kworker/u8:5: attempt to access beyond end of device [ 441.726527][ T77] loop0: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 441.758049][ T77] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4479: inode #18: block 6: comm kworker/u8:5: unable to read itable block [ 441.762451][ T6838] bridge_slave_1: left allmulticast mode [ 441.823139][ T77] kworker/u8:5: attempt to access beyond end of device [ 441.823139][ T77] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 441.841187][ T77] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 441.847247][ T6838] bridge_slave_1: left promiscuous mode [ 441.856098][ T77] EXT4-fs (loop0): I/O error while writing superblock [ 441.876728][ T5103] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.890197][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.906430][ T5103] syz-executor.0: attempt to access beyond end of device [ 441.906430][ T5103] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 441.934865][ T5103] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 441.943583][ T5103] EXT4-fs (loop0): I/O error while writing superblock [ 442.016188][ T6838] bridge_slave_0: left allmulticast mode [ 442.048722][ T7682] kmmpd-loop0: attempt to access beyond end of device [ 442.048722][ T7682] loop0: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 442.049649][ T6838] bridge_slave_0: left promiscuous mode [ 442.072917][ T7697] loop4: detected capacity change from 0 to 64 [ 442.111019][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.111176][ T7697] hfs: get root inode failed [ 442.139689][ T7682] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 442.383883][ T7699] loop3: detected capacity change from 0 to 2048 [ 442.610039][ T7079] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 443.389297][ T5111] Bluetooth: hci2: command tx timeout [ 444.222124][ T5305] hfsplus: b-tree write err: -5, ino 4 [ 444.562246][ T7722] loop2: detected capacity change from 0 to 512 [ 444.690388][ T7722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.703405][ T7722] ext4 filesystem being mounted at /root/syzkaller-testdir1458153079/syzkaller.2b4p6A/22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.278103][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.350506][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.385715][ T6838] bond0 (unregistering): Released all slaves [ 445.471064][ T5111] Bluetooth: hci2: command tx timeout [ 445.510531][ T6921] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.657843][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.667049][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.219719][ T7738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.284990][ T7738] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 446.512552][ T7736] loop2: detected capacity change from 0 to 4096 [ 446.582189][ T7736] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 446.655515][ T7744] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 447.098665][ T6838] hsr_slave_0: left promiscuous mode [ 447.577056][ T5111] Bluetooth: hci2: command tx timeout [ 448.117176][ T6838] hsr_slave_1: left promiscuous mode [ 448.225753][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.257214][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.310428][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.365442][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.397457][ T29] audit: type=1400 audit(1718759462.258:370): avc: denied { remove_name } for pid=7735 comm="syz-executor.2" name="file1" dev="loop2" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.505205][ T29] audit: type=1400 audit(1718759462.308:371): avc: denied { unlink } for pid=7735 comm="syz-executor.2" name="file1" dev="loop2" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 448.550312][ T6838] veth1_macvtap: left promiscuous mode [ 448.555960][ T6838] veth0_macvtap: left promiscuous mode [ 448.601983][ T6838] veth1_vlan: left promiscuous mode [ 448.627369][ T6838] veth0_vlan: left promiscuous mode [ 448.684040][ T7758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.721768][ T7758] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 448.839572][ T7759] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 449.116215][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.128826][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.138319][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.163793][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.171867][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 449.179450][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.426578][ T29] audit: type=1400 audit(1718759463.288:372): avc: denied { create } for pid=7763 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 449.497265][ T29] audit: type=1400 audit(1718759463.318:373): avc: denied { ioctl } for pid=7763 comm="syz-executor.2" path="socket:[18051]" dev="sockfs" ino=18051 ioctlcmd=0x10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 449.638446][ T5111] Bluetooth: hci2: command tx timeout [ 450.079269][ T7774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.175616][ T29] audit: type=1400 audit(1718759464.038:374): avc: denied { setopt } for pid=7775 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 450.266194][ T7779] 9pnet_fd: Insufficient options for proto=fd [ 450.285735][ T7779] vivid-004: disconnect [ 450.635985][ T7771] vivid-004: reconnect [ 451.158254][ T7774] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 451.237355][ T5111] Bluetooth: hci0: command tx timeout [ 451.383695][ T7774] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 452.020751][ T7787] loop2: detected capacity change from 0 to 2048 [ 452.233307][ T7787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.468342][ T7792] loop2: detected capacity change from 2048 to 0 [ 452.484742][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 452.509099][ T7794] syz-executor.2: attempt to access beyond end of device [ 452.509099][ T7794] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 452.559784][ T7794] EXT4-fs error (device loop2): __ext4_find_entry:1682: inode #2: comm syz-executor.2: reading directory lblock 0 [ 452.613992][ T7794] syz-executor.2: attempt to access beyond end of device [ 452.613992][ T7794] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 452.647928][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 452.660218][ T7794] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 452.688749][ T7794] EXT4-fs (loop2): I/O error while writing superblock [ 452.709352][ T7794] syz-executor.2: attempt to access beyond end of device [ 452.709352][ T7794] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 452.751156][ T7794] EXT4-fs error (device loop2): __ext4_find_entry:1682: inode #2: comm syz-executor.2: reading directory lblock 0 [ 452.796497][ T7794] syz-executor.2: attempt to access beyond end of device [ 452.796497][ T7794] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 452.833756][ T7794] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 452.875385][ T7794] EXT4-fs (loop2): I/O error while writing superblock [ 452.971040][ T7787] syz-executor.2: attempt to access beyond end of device [ 452.971040][ T7787] loop2: rw=536576, sector=8, nr_sectors = 4 limit=0 [ 452.997371][ T7787] syz-executor.2: attempt to access beyond end of device [ 452.997371][ T7787] loop2: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 453.027232][ T7787] EXT4-fs error (device loop2): ext4_wait_block_bitmap:582: comm syz-executor.2: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 453.067670][ T7787] syz-executor.2: attempt to access beyond end of device [ 453.067670][ T7787] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 453.097208][ T7787] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 453.105551][ T7787] EXT4-fs (loop2): I/O error while writing superblock [ 453.127339][ T7787] syz-executor.2: attempt to access beyond end of device [ 453.127339][ T7787] loop2: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 453.194561][ T7787] EXT4-fs error (device loop2): ext4_wait_block_bitmap:582: comm syz-executor.2: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 453.245781][ T7787] syz-executor.2: attempt to access beyond end of device [ 453.245781][ T7787] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 453.277250][ T7787] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 453.285583][ T7787] EXT4-fs (loop2): I/O error while writing superblock [ 453.303378][ T7787] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 5 [ 453.317851][ T5111] Bluetooth: hci0: command tx timeout [ 453.329470][ T7787] EXT4-fs (loop2): This should not happen!! Data will be lost [ 453.329470][ T7787] [ 453.420850][ T6921] syz-executor.2: attempt to access beyond end of device [ 453.420850][ T6921] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 453.506250][ T1049] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4479: inode #18: block 6: comm kworker/u8:6: unable to read itable block [ 453.524704][ T1049] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 453.533203][ T1049] EXT4-fs (loop2): I/O error while writing superblock [ 453.558795][ T6921] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.581146][ T6921] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 453.596665][ T6921] EXT4-fs (loop2): I/O error while writing superblock [ 453.634905][ T7788] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 454.400548][ T7797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.445853][ T7797] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 454.723380][ T7802] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 454.754585][ T7804] loop3: detected capacity change from 0 to 512 [ 454.808092][ T7691] chnl_net:caif_netlink_parms(): no params data found [ 454.872249][ T7804] EXT4-fs (loop3): bad s_min_extra_isize: 65528 [ 455.387972][ T5111] Bluetooth: hci0: command tx timeout [ 455.410608][ T7814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.521142][ T7814] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 455.637060][ T7818] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 455.689752][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.750657][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.765370][ T7691] bridge_slave_0: entered allmulticast mode [ 455.782841][ T7691] bridge_slave_0: entered promiscuous mode [ 455.852102][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.881149][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.907657][ T7691] bridge_slave_1: entered allmulticast mode [ 455.926465][ T7691] bridge_slave_1: entered promiscuous mode [ 456.376184][ T6838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.557493][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.565297][ T7823] loop3: detected capacity change from 0 to 2048 [ 456.604979][ T7691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.715056][ T7823] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 456.776819][ T7823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 456.862184][ T6838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.879050][ T29] audit: type=1800 audit(1718759470.728:375): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 456.902120][ T7825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.031053][ T7825] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 457.072248][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.083536][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.094411][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 457.114272][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 457.125986][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 457.137227][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.201889][ T7825] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 457.347328][ T6838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.469237][ T5113] Bluetooth: hci0: command tx timeout [ 457.490963][ T7691] team0: Port device team_slave_0 added [ 457.715750][ T6838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.760392][ T7830] loop3: detected capacity change from 0 to 2048 [ 457.853165][ T7830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.127286][ T29] audit: type=1804 audit(1718759471.948:376): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3228374386/syzkaller.2Pe0Lk/37/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 458.202777][ T7691] team0: Port device team_slave_1 added [ 458.274035][ T29] audit: type=1400 audit(1718759471.948:377): avc: denied { ioctl } for pid=7829 comm="syz-executor.3" path="/root/syzkaller-testdir3228374386/syzkaller.2Pe0Lk/37/file0/bus" dev="loop3" ino=18 ioctlcmd=0x4c04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 458.448859][ T7842] 9pnet_fd: Insufficient options for proto=fd [ 458.457684][ T7842] vivid-004: disconnect [ 458.803261][ T7834] vivid-004: reconnect [ 459.229030][ T5113] Bluetooth: hci5: command tx timeout [ 459.540905][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.584547][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.654416][ T7691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.859760][ T7845] loop4: detected capacity change from 0 to 16 [ 459.872084][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.907245][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.908052][ T7845] erofs: (device loop4): mounted with root inode @ nid 36. [ 459.999604][ T7691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.379410][ T7761] chnl_net:caif_netlink_parms(): no params data found [ 460.430681][ T7839] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 460.493839][ T7839] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 8 with error 28 [ 460.869101][ T7839] EXT4-fs (loop3): This should not happen!! Data will be lost [ 460.869101][ T7839] [ 461.198747][ T7839] EXT4-fs (loop3): Total free blocks count 0 [ 461.234751][ T7838] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 461.317363][ T7839] EXT4-fs (loop3): Free/Dirty block details [ 461.357713][ T7839] EXT4-fs (loop3): free_blocks=2415919104 [ 461.363650][ T5113] Bluetooth: hci5: command tx timeout [ 461.397580][ T7839] EXT4-fs (loop3): dirty_blocks=1936 [ 461.417377][ T7838] EXT4-fs (loop3): This should not happen!! Data will be lost [ 461.417377][ T7838] [ 461.448513][ T7839] EXT4-fs (loop3): Block reservation details [ 461.747700][ T7691] hsr_slave_0: entered promiscuous mode [ 461.805047][ T7691] hsr_slave_1: entered promiscuous mode [ 461.857602][ T7691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.886118][ T7691] Cannot create hsr debugfs directory [ 462.110864][ T29] audit: type=1400 audit(1718759475.978:378): avc: denied { mounton } for pid=7853 comm="syz-executor.4" path="/root/syzkaller-testdir1848145673/syzkaller.KK1dwr/15/file0" dev="sda1" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 462.235848][ T6838] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.387429][ T5113] Bluetooth: hci5: command tx timeout [ 463.653158][ T7855] loop4: detected capacity change from 0 to 512 [ 463.757452][ T7855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 463.979415][ T7855] EXT4-fs (loop4): 1 orphan inode deleted [ 463.985346][ T7855] EXT4-fs (loop4): 1 truncate cleaned up [ 464.000267][ T7855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.051347][ T7864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.067391][ T6838] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.124765][ T7864] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 464.313701][ T7407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.384334][ T7869] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 464.576035][ T6838] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.088692][ T7875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.200064][ T7875] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 465.290168][ T7876] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 465.363388][ T6838] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.423345][ T7761] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.447592][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.463123][ T7761] bridge_slave_0: entered allmulticast mode [ 465.493310][ T7761] bridge_slave_0: entered promiscuous mode [ 465.707418][ T5113] Bluetooth: hci5: command tx timeout [ 465.878391][ T7761] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.900575][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.959192][ T7761] bridge_slave_1: entered allmulticast mode [ 465.978393][ T7761] bridge_slave_1: entered promiscuous mode [ 466.170186][ T7879] loop4: detected capacity change from 0 to 8 [ 466.313000][ T7879] SQUASHFS error: Failed to read block 0x4e8: -5 [ 466.600799][ T7761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.627279][ T29] audit: type=1800 audit(1718759480.438:379): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 466.658683][ T7883] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 466.665584][ T7883] SQUASHFS error: Failed to read block 0x4e8: -5 [ 466.672783][ T7883] SQUASHFS error: Failed to read block 0x4e8: -5 [ 466.679477][ T7883] SQUASHFS error: Failed to read block 0x4e8: -5 [ 467.207392][ T7761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.787828][ T7761] team0: Port device team_slave_0 added [ 467.904326][ T7899] 9pnet_fd: Insufficient options for proto=fd [ 467.913191][ T7899] vivid-002: disconnect [ 468.285345][ T7894] vivid-002: reconnect [ 468.820201][ T7826] chnl_net:caif_netlink_parms(): no params data found [ 468.862739][ T7897] loop4: detected capacity change from 0 to 256 [ 468.904926][ T7897] FAT-fs (loop4): Directory bread(block 64) failed [ 468.915917][ T7897] FAT-fs (loop4): Directory bread(block 65) failed [ 468.922808][ T7897] FAT-fs (loop4): Directory bread(block 66) failed [ 468.929497][ T7897] FAT-fs (loop4): Directory bread(block 67) failed [ 468.936195][ T7897] FAT-fs (loop4): Directory bread(block 68) failed [ 468.943048][ T7897] FAT-fs (loop4): Directory bread(block 69) failed [ 468.949841][ T7897] FAT-fs (loop4): Directory bread(block 70) failed [ 468.956408][ T7897] FAT-fs (loop4): Directory bread(block 71) failed [ 468.963264][ T7897] FAT-fs (loop4): Directory bread(block 72) failed [ 468.969993][ T7897] FAT-fs (loop4): Directory bread(block 73) failed [ 469.080051][ T7761] team0: Port device team_slave_1 added [ 469.502489][ T7904] loop3: detected capacity change from 0 to 2048 [ 469.602630][ T6838] bridge_slave_1: left allmulticast mode [ 469.611070][ T6838] bridge_slave_1: left promiscuous mode [ 469.616979][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.619852][ T7904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.938380][ T6838] bridge_slave_0: left allmulticast mode [ 469.944089][ T6838] bridge_slave_0: left promiscuous mode [ 470.054292][ T29] audit: type=1804 audit(1718759483.918:380): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3228374386/syzkaller.2Pe0Lk/43/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 470.070426][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.110089][ T11] bio_check_eod: 8 callbacks suppressed [ 470.110112][ T11] kworker/u8:0: attempt to access beyond end of device [ 470.110112][ T11] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 470.645196][ T7916] loop4: detected capacity change from 0 to 64 [ 470.664920][ T7916] hfs: get root inode failed [ 472.517393][ T7907] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 472.568959][ T7909] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 472.623022][ T7909] EXT4-fs (loop3): This should not happen!! Data will be lost [ 472.623022][ T7909] [ 472.643432][ T7921] loop4: detected capacity change from 0 to 512 [ 472.643511][ T7909] EXT4-fs (loop3): Total free blocks count 0 [ 472.670173][ T7909] EXT4-fs (loop3): Free/Dirty block details [ 472.676141][ T7909] EXT4-fs (loop3): free_blocks=2415919104 [ 472.689444][ T7921] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 472.712121][ T7909] EXT4-fs (loop3): dirty_blocks=4000 [ 472.733575][ T7909] EXT4-fs (loop3): Block reservation details [ 472.746070][ T7909] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 472.774389][ T7909] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 8 with error 28 [ 472.803995][ T7921] EXT4-fs (loop4): 1 orphan inode deleted [ 472.817667][ T7921] EXT4-fs (loop4): 1 truncate cleaned up [ 472.842832][ T7921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.917589][ T29] audit: type=1400 audit(1718759486.768:381): avc: denied { rmdir } for pid=6943 comm="syz-executor.3" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 472.976875][ T29] audit: type=1400 audit(1718759486.838:382): avc: denied { unlink } for pid=6943 comm="syz-executor.3" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 473.047560][ T29] audit: type=1400 audit(1718759486.908:383): avc: denied { unmount } for pid=6943 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 473.101826][ T29] audit: type=1400 audit(1718759486.938:384): avc: denied { unlink } for pid=6943 comm="syz-executor.3" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 473.305656][ T7407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.380375][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.487505][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.523708][ T7935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.534130][ T6838] bond0 (unregistering): Released all slaves [ 479.656836][ T7935] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 479.728654][ T7937] loop4: detected capacity change from 0 to 512 [ 479.804304][ T7937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.888563][ T7937] ext4 filesystem being mounted at /root/syzkaller-testdir1848145673/syzkaller.KK1dwr/24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.922351][ T7942] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 480.258120][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.358946][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.364882][ T7407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.400058][ T6838] bond0 (unregistering): Released all slaves [ 480.557651][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.564664][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.676305][ T7761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.739857][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.757256][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.805128][ T7761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.415721][ T29] audit: type=1400 audit(1718759495.278:385): avc: denied { ioctl } for pid=7954 comm="syz-executor.3" path="/dev/ptp0" dev="devtmpfs" ino=1074 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 481.592298][ T29] audit: type=1400 audit(1718759495.338:386): avc: denied { create } for pid=7954 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 481.729054][ T29] audit: type=1400 audit(1718759495.338:387): avc: denied { write } for pid=7954 comm="syz-executor.3" path="socket:[18986]" dev="sockfs" ino=18986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 481.756082][ T29] audit: type=1400 audit(1718759495.338:388): avc: denied { nlmsg_read } for pid=7954 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 482.209569][ T7761] hsr_slave_0: entered promiscuous mode [ 482.236715][ T7761] hsr_slave_1: entered promiscuous mode [ 482.340306][ T7966] 9pnet_fd: Insufficient options for proto=fd [ 482.357863][ T7966] vivid-004: disconnect [ 482.921068][ T7761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.219592][ T7761] Cannot create hsr debugfs directory [ 483.246447][ T7965] loop3: detected capacity change from 0 to 256 [ 483.270912][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.288767][ T7965] FAT-fs (loop3): Directory bread(block 64) failed [ 483.295370][ T7965] FAT-fs (loop3): Directory bread(block 65) failed [ 483.302253][ T7965] FAT-fs (loop3): Directory bread(block 66) failed [ 483.308903][ T7965] FAT-fs (loop3): Directory bread(block 67) failed [ 483.315578][ T7965] FAT-fs (loop3): Directory bread(block 68) failed [ 483.322227][ T7965] FAT-fs (loop3): Directory bread(block 69) failed [ 483.329016][ T7965] FAT-fs (loop3): Directory bread(block 70) failed [ 483.335580][ T7965] FAT-fs (loop3): Directory bread(block 71) failed [ 483.342467][ T7965] FAT-fs (loop3): Directory bread(block 72) failed [ 483.352449][ T7965] FAT-fs (loop3): Directory bread(block 73) failed [ 483.449541][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.458425][ T7826] bridge_slave_0: entered allmulticast mode [ 483.466367][ T7826] bridge_slave_0: entered promiscuous mode [ 483.523205][ T7959] vivid-004: reconnect [ 483.697717][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.704974][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.739263][ T7826] bridge_slave_1: entered allmulticast mode [ 483.757659][ T7826] bridge_slave_1: entered promiscuous mode [ 483.968512][ T7973] loop4: detected capacity change from 0 to 64 [ 483.982873][ T7973] hfs: get root inode failed [ 485.310544][ T7826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.353608][ T7826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.435224][ T7977] loop4: detected capacity change from 0 to 2048 [ 485.512364][ T7977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.707537][ T7982] loop4: detected capacity change from 2048 to 0 [ 485.849508][ T5305] kworker/u8:9: attempt to access beyond end of device [ 485.849508][ T5305] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 486.015624][ T7976] syz-executor.4: attempt to access beyond end of device [ 486.015624][ T7976] loop4: rw=536576, sector=8, nr_sectors = 4 limit=0 [ 486.053277][ T7976] syz-executor.4: attempt to access beyond end of device [ 486.053277][ T7976] loop4: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 486.099555][ T7976] EXT4-fs error (device loop4): ext4_wait_block_bitmap:582: comm syz-executor.4: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 486.140889][ T7691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.147375][ T7976] syz-executor.4: attempt to access beyond end of device [ 486.147375][ T7976] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 486.179199][ T7976] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 486.237235][ T7976] EXT4-fs (loop4): I/O error while writing superblock [ 486.244183][ T7976] syz-executor.4: attempt to access beyond end of device [ 486.244183][ T7976] loop4: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 486.284528][ T7976] EXT4-fs error (device loop4): ext4_wait_block_bitmap:582: comm syz-executor.4: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 486.301446][ T7826] team0: Port device team_slave_0 added [ 486.333194][ T7976] syz-executor.4: attempt to access beyond end of device [ 486.333194][ T7976] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 486.355452][ T7826] team0: Port device team_slave_1 added [ 486.374471][ T7976] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 486.397736][ T7976] EXT4-fs (loop4): I/O error while writing superblock [ 486.419549][ T7976] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 5 [ 486.440885][ T7691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.450586][ T7976] EXT4-fs (loop4): This should not happen!! Data will be lost [ 486.450586][ T7976] [ 486.492751][ T7691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.557402][ T7407] syz-executor.4: attempt to access beyond end of device [ 486.557402][ T7407] loop4: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 486.587024][ T6838] hsr_slave_0: left promiscuous mode [ 486.626435][ T6838] hsr_slave_1: left promiscuous mode [ 486.638304][ T7987] loop3: detected capacity change from 0 to 512 [ 486.675512][ T7987] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 486.686757][ T5305] kworker/u8:9: attempt to access beyond end of device [ 486.686757][ T5305] loop4: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 486.708315][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.716278][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.737403][ T5305] kworker/u8:9: attempt to access beyond end of device [ 486.737403][ T5305] loop4: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 486.751920][ T5305] kworker/u8:9: attempt to access beyond end of device [ 486.751920][ T5305] loop4: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 486.753220][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.765882][ T5305] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4479: inode #18: block 6: comm kworker/u8:9: unable to read itable block [ 486.766068][ T5305] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 486.766101][ T5305] EXT4-fs (loop4): I/O error while writing superblock [ 486.811384][ T7987] EXT4-fs (loop3): 1 orphan inode deleted [ 486.827427][ T7987] EXT4-fs (loop3): 1 truncate cleaned up [ 486.839808][ T7987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.843186][ T7407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.926307][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.931967][ T7407] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 486.968203][ T7407] EXT4-fs (loop4): I/O error while writing superblock [ 486.984825][ T6838] hsr_slave_0: left promiscuous mode [ 487.006184][ T6838] hsr_slave_1: left promiscuous mode [ 487.023726][ T7978] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 487.044126][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.061927][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.085825][ T6838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.127485][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.209184][ T6943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.311756][ T6838] veth1_macvtap: left promiscuous mode [ 487.327553][ T6838] veth0_macvtap: left promiscuous mode [ 487.333412][ T6838] veth1_vlan: left promiscuous mode [ 487.355857][ T6838] veth0_vlan: left promiscuous mode [ 487.398259][ T6838] veth1_macvtap: left promiscuous mode [ 487.403893][ T6838] veth0_macvtap: left promiscuous mode [ 487.412623][ T6838] veth1_vlan: left promiscuous mode [ 487.418464][ T6838] veth0_vlan: left promiscuous mode [ 489.356808][ T7997] 9pnet_fd: Insufficient options for proto=fd [ 489.368820][ T7997] vivid-002: disconnect [ 489.911775][ T7994] vivid-002: reconnect [ 490.783499][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 490.891269][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 492.871664][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 492.976555][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 494.081465][ T7691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.317328][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.324327][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.447614][ T7826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.470598][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.488676][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.519813][ T7999] loop3: detected capacity change from 0 to 2048 [ 494.534763][ T7826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.564769][ T7999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.620436][ T7999] ext4 filesystem being mounted at /root/syzkaller-testdir3228374386/syzkaller.2Pe0Lk/51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.061691][ T6943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.094655][ T7826] hsr_slave_0: entered promiscuous mode [ 495.130060][ T7826] hsr_slave_1: entered promiscuous mode [ 495.158395][ T7826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.166021][ T7826] Cannot create hsr debugfs directory [ 495.823574][ T8015] loop3: detected capacity change from 0 to 64 [ 495.836043][ T8015] hfs: get root inode failed [ 496.142232][ T5111] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 496.163636][ T5111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 496.177397][ T5111] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 496.201887][ T5111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 496.222037][ T5111] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 496.237509][ T5111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 497.330728][ T7761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.372039][ T7761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 497.419501][ T7761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 497.462620][ T7761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.541690][ T7691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.645672][ T8023] overlayfs: missing 'lowerdir' [ 498.309587][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.411005][ T8026] loop3: detected capacity change from 0 to 2048 [ 498.505806][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.508519][ T8026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.682098][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.748109][ T8030] loop3: detected capacity change from 2048 to 0 [ 498.834954][ T8025] bio_check_eod: 5 callbacks suppressed [ 498.834978][ T8025] syz-executor.3: attempt to access beyond end of device [ 498.834978][ T8025] loop3: rw=536576, sector=8, nr_sectors = 4 limit=0 [ 498.855852][ T8025] syz-executor.3: attempt to access beyond end of device [ 498.855852][ T8025] loop3: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 498.859241][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.869773][ T8025] EXT4-fs error (device loop3): ext4_wait_block_bitmap:582: comm syz-executor.3: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 498.869898][ T8025] syz-executor.3: attempt to access beyond end of device [ 498.869898][ T8025] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 498.869939][ T8025] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 498.869969][ T8025] EXT4-fs (loop3): I/O error while writing superblock [ 498.870065][ T8025] syz-executor.3: attempt to access beyond end of device [ 498.870065][ T8025] loop3: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 498.912305][ T5111] Bluetooth: hci6: command tx timeout [ 498.954655][ T8025] EXT4-fs error (device loop3): ext4_wait_block_bitmap:582: comm syz-executor.3: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 498.978221][ T7691] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.991702][ T8025] syz-executor.3: attempt to access beyond end of device [ 498.991702][ T8025] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 499.027217][ T8025] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 499.065957][ T8025] EXT4-fs (loop3): I/O error while writing superblock [ 499.076935][ T8025] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 5 [ 499.130806][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.138127][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.161133][ T8025] EXT4-fs (loop3): This should not happen!! Data will be lost [ 499.161133][ T8025] [ 499.265006][ T6943] syz-executor.3: attempt to access beyond end of device [ 499.265006][ T6943] loop3: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 499.347017][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.354320][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.367661][ T4053] kworker/u8:8: attempt to access beyond end of device [ 499.367661][ T4053] loop3: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 499.395353][ T4053] kworker/u8:8: attempt to access beyond end of device [ 499.395353][ T4053] loop3: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 499.432182][ T4053] kworker/u8:8: attempt to access beyond end of device [ 499.432182][ T4053] loop3: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 499.448614][ T4053] kworker/u8:8: attempt to access beyond end of device [ 499.448614][ T4053] loop3: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 499.485945][ T4053] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4479: inode #18: block 6: comm kworker/u8:8: unable to read itable block [ 499.516507][ T4053] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 499.526925][ T4053] EXT4-fs (loop3): I/O error while writing superblock [ 499.619443][ T6943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.670212][ T6943] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 499.727308][ T6943] EXT4-fs (loop3): I/O error while writing superblock [ 499.736158][ T8027] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 499.940873][ T11] bridge_slave_1: left allmulticast mode [ 499.946566][ T11] bridge_slave_1: left promiscuous mode [ 499.967698][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.979390][ T11] bridge_slave_0: left allmulticast mode [ 499.985074][ T11] bridge_slave_0: left promiscuous mode [ 500.008137][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.987550][ T5111] Bluetooth: hci6: command tx timeout [ 501.337971][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.401291][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.421218][ T11] bond0 (unregistering): Released all slaves [ 501.568799][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.582285][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.591321][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.628601][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.664500][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 501.672280][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.958633][ T8016] chnl_net:caif_netlink_parms(): no params data found [ 502.485187][ T7826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 502.500924][ T7826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 502.610940][ T7826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 502.623996][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 502.645178][ T7826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 502.652450][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 502.672268][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 502.686039][ T11] hsr_slave_0: left promiscuous mode [ 502.699135][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 502.709402][ T11] hsr_slave_1: left promiscuous mode [ 502.716532][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 502.724308][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.737490][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.737510][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 502.753848][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.787374][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.854321][ T11] veth1_macvtap: left promiscuous mode [ 502.869677][ T11] veth0_macvtap: left promiscuous mode [ 502.875532][ T11] veth1_vlan: left promiscuous mode [ 502.882981][ T11] veth0_vlan: left promiscuous mode [ 503.077184][ T5113] Bluetooth: hci6: command tx timeout [ 503.707831][ T5113] Bluetooth: hci2: command tx timeout [ 504.173194][ T11] team0 (unregistering): Port device team_slave_1 removed [ 504.240157][ T11] team0 (unregistering): Port device team_slave_0 removed [ 504.831591][ T5113] Bluetooth: hci4: command tx timeout [ 505.148943][ T5113] Bluetooth: hci6: command tx timeout [ 505.493164][ T7761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.512958][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.546391][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.567544][ T8016] bridge_slave_0: entered allmulticast mode [ 505.576047][ T8016] bridge_slave_0: entered promiscuous mode [ 505.599868][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.617401][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.624798][ T8016] bridge_slave_1: entered allmulticast mode [ 505.649593][ T8016] bridge_slave_1: entered promiscuous mode [ 505.787458][ T5113] Bluetooth: hci2: command tx timeout [ 505.806689][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.869419][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.053195][ T7761] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.140304][ T8016] team0: Port device team_slave_0 added [ 506.161439][ T8016] team0: Port device team_slave_1 added [ 506.280725][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.288070][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.485527][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.492846][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.581357][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.607189][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.644656][ T8016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.693993][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.706610][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.732994][ T8016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.907289][ T5113] Bluetooth: hci4: command tx timeout [ 507.110524][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.116965][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.348864][ T8016] hsr_slave_0: entered promiscuous mode [ 507.365802][ T8016] hsr_slave_1: entered promiscuous mode [ 507.374346][ T8016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.387951][ T8016] Cannot create hsr debugfs directory [ 507.393859][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 507.867247][ T5113] Bluetooth: hci2: command tx timeout [ 508.375215][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.557287][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 508.578239][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 508.597957][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 508.608508][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 508.616760][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 508.626458][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.985949][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.994058][ T5113] Bluetooth: hci4: command tx timeout [ 509.000167][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.009799][ T8037] bridge_slave_0: entered allmulticast mode [ 509.019788][ T8037] bridge_slave_0: entered promiscuous mode [ 509.074957][ T8042] chnl_net:caif_netlink_parms(): no params data found [ 509.101691][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.109144][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.116496][ T8037] bridge_slave_1: entered allmulticast mode [ 509.127493][ T8037] bridge_slave_1: entered promiscuous mode [ 509.193753][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.372435][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.546769][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.554097][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.600043][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.607463][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.646995][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.947419][ T5113] Bluetooth: hci2: command tx timeout [ 510.094581][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.141501][ T8037] team0: Port device team_slave_0 added [ 510.152595][ T8037] team0: Port device team_slave_1 added [ 510.381794][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.418629][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.425971][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.444993][ T8042] bridge_slave_0: entered allmulticast mode [ 510.456216][ T8042] bridge_slave_0: entered promiscuous mode [ 510.476965][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.486962][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.494633][ T8042] bridge_slave_1: entered allmulticast mode [ 510.504336][ T8042] bridge_slave_1: entered promiscuous mode [ 510.581703][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.608740][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.635257][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.696588][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.747753][ T5113] Bluetooth: hci0: command tx timeout [ 510.882346][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.930493][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.958349][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.965333][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.993638][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.067675][ T5113] Bluetooth: hci4: command tx timeout [ 511.100558][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.364871][ T8042] team0: Port device team_slave_0 added [ 511.421020][ T8037] hsr_slave_0: entered promiscuous mode [ 511.428609][ T8037] hsr_slave_1: entered promiscuous mode [ 511.435436][ T8037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.443486][ T8037] Cannot create hsr debugfs directory [ 511.522443][ T8042] team0: Port device team_slave_1 added [ 511.740675][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.751596][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.808553][ T8042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.873883][ T8016] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 511.939027][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.946034][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.976744][ T8042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.019785][ T8016] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 512.203065][ T8016] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 512.259938][ T8016] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 512.671173][ T11] bridge_slave_1: left allmulticast mode [ 512.676893][ T11] bridge_slave_1: left promiscuous mode [ 512.683352][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.698577][ T11] bridge_slave_0: left allmulticast mode [ 512.704270][ T11] bridge_slave_0: left promiscuous mode [ 512.724610][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.753677][ T11] bridge_slave_1: left allmulticast mode [ 512.767189][ T11] bridge_slave_1: left promiscuous mode [ 512.773042][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.802574][ T11] bridge_slave_0: left allmulticast mode [ 512.819380][ T11] bridge_slave_0: left promiscuous mode [ 512.825339][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.834413][ T5113] Bluetooth: hci0: command tx timeout [ 514.255849][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.280284][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.304365][ T11] bond0 (unregistering): Released all slaves [ 514.508981][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.534797][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.558930][ T11] bond0 (unregistering): Released all slaves [ 514.611516][ T8042] hsr_slave_0: entered promiscuous mode [ 514.638214][ T8042] hsr_slave_1: entered promiscuous mode [ 514.647342][ T8042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.673800][ T8042] Cannot create hsr debugfs directory [ 514.793469][ T8053] chnl_net:caif_netlink_parms(): no params data found [ 514.908536][ T5113] Bluetooth: hci0: command tx timeout [ 515.174430][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.775129][ T11] hsr_slave_0: left promiscuous mode [ 515.830009][ T11] hsr_slave_1: left promiscuous mode [ 515.887337][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.898721][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.918139][ T11] hsr_slave_0: left promiscuous mode [ 515.936462][ T11] hsr_slave_1: left promiscuous mode [ 515.957482][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.964962][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.990638][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.012409][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.128734][ T11] veth1_macvtap: left promiscuous mode [ 516.134483][ T11] veth0_macvtap: left promiscuous mode [ 516.147405][ T11] veth1_vlan: left promiscuous mode [ 516.152895][ T11] veth0_vlan: left promiscuous mode [ 516.966467][ T11] team0 (unregistering): Port device team_slave_1 removed [ 516.987426][ T5113] Bluetooth: hci0: command tx timeout [ 517.088373][ T11] team0 (unregistering): Port device team_slave_0 removed [ 518.868540][ T11] team0 (unregistering): Port device team_slave_1 removed [ 518.992570][ T11] team0 (unregistering): Port device team_slave_0 removed [ 520.018404][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.025848][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.047569][ T8053] bridge_slave_0: entered allmulticast mode [ 520.067257][ T8053] bridge_slave_0: entered promiscuous mode [ 520.357839][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.365289][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.373193][ T8053] bridge_slave_1: entered allmulticast mode [ 520.384135][ T8053] bridge_slave_1: entered promiscuous mode [ 520.782097][ T8053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.911935][ T8053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.158863][ T8053] team0: Port device team_slave_0 added [ 521.291021][ T8053] team0: Port device team_slave_1 added [ 521.502544][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.519164][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.548085][ T5111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.560060][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.563741][ T8053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.579064][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.589578][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.599756][ T5111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 521.607773][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.656686][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.694288][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.721351][ T8053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.796394][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.004398][ T8053] hsr_slave_0: entered promiscuous mode [ 522.022593][ T8053] hsr_slave_1: entered promiscuous mode [ 522.038390][ T8053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.046016][ T8053] Cannot create hsr debugfs directory [ 522.130658][ T8016] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.454352][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.461677][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.625019][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.632565][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.095628][ T8042] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 523.118222][ T8042] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 523.352245][ T8042] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 523.378221][ T8042] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 523.708044][ T5111] Bluetooth: hci5: command tx timeout [ 523.802383][ T8016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.153593][ T8037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 524.173189][ T8071] chnl_net:caif_netlink_parms(): no params data found [ 524.338036][ T8037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 524.538845][ T8037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 524.609938][ T8037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 525.056798][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.089106][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.096490][ T8071] bridge_slave_0: entered allmulticast mode [ 525.127975][ T8071] bridge_slave_0: entered promiscuous mode [ 525.159901][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.170872][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.187523][ T8071] bridge_slave_1: entered allmulticast mode [ 525.196318][ T8071] bridge_slave_1: entered promiscuous mode [ 525.253869][ T11] bridge_slave_1: left allmulticast mode [ 525.260710][ T11] bridge_slave_1: left promiscuous mode [ 525.266667][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.279237][ T11] bridge_slave_0: left allmulticast mode [ 525.284944][ T11] bridge_slave_0: left promiscuous mode [ 525.292118][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.310406][ T11] bridge_slave_1: left allmulticast mode [ 525.316124][ T11] bridge_slave_1: left promiscuous mode [ 525.322159][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.335031][ T11] bridge_slave_0: left allmulticast mode [ 525.355322][ T11] bridge_slave_0: left promiscuous mode [ 525.361669][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.787376][ T5111] Bluetooth: hci5: command tx timeout [ 526.621638][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.657605][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.682961][ T11] bond0 (unregistering): Released all slaves [ 526.976083][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.995882][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.017473][ T11] bond0 (unregistering): Released all slaves [ 527.340037][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.379806][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.414951][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.443462][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.507210][ T11] hsr_slave_0: left promiscuous mode [ 527.529191][ T11] hsr_slave_1: left promiscuous mode [ 527.538845][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.578369][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.628170][ T11] hsr_slave_0: left promiscuous mode [ 527.637360][ T11] hsr_slave_1: left promiscuous mode [ 527.658955][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.667367][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.868558][ T5111] Bluetooth: hci5: command tx timeout [ 528.482543][ T11] team0 (unregistering): Port device team_slave_1 removed [ 528.549241][ T11] team0 (unregistering): Port device team_slave_0 removed [ 529.956025][ T5111] Bluetooth: hci5: command tx timeout [ 530.010951][ T11] team0 (unregistering): Port device team_slave_1 removed [ 530.131230][ T11] team0 (unregistering): Port device team_slave_0 removed [ 531.256721][ T8053] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 531.311131][ T8071] team0: Port device team_slave_0 added [ 531.335879][ T8071] team0: Port device team_slave_1 added [ 531.375429][ T8053] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 531.518550][ T8053] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 531.551696][ T8042] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.621395][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.637715][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.683999][ T8071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.696385][ T8053] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 531.709925][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.717004][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.765597][ T8071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.838298][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.845551][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.021713][ T8071] hsr_slave_0: entered promiscuous mode [ 532.029333][ T8071] hsr_slave_1: entered promiscuous mode [ 532.036167][ T8071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.043970][ T8071] Cannot create hsr debugfs directory [ 532.233021][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.240354][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.683684][ T8016] veth0_vlan: entered promiscuous mode [ 532.722617][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.886064][ T8016] veth1_vlan: entered promiscuous mode [ 533.200044][ T8037] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.351092][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.358417][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.379437][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.386706][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.406524][ T8016] veth0_macvtap: entered promiscuous mode [ 533.585233][ T8016] veth1_macvtap: entered promiscuous mode [ 533.857974][ T8053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.920938][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.957814][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.967866][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.980426][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.994605][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.071534][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.086192][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.100510][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.118315][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.150025][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.167355][ T8037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.276408][ T8042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.322113][ T8016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.337214][ T8016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.348277][ T8016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.357096][ T8016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.393508][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.561848][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.569247][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.631887][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.639337][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.689345][ T8071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 534.715232][ T8071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 534.799739][ T8071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 534.829005][ T8071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 535.061560][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.254789][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.274047][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.440039][ T8042] veth0_vlan: entered promiscuous mode [ 535.494036][ T4053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.521075][ T4053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.532220][ T8042] veth1_vlan: entered promiscuous mode [ 535.725286][ T8037] veth0_vlan: entered promiscuous mode [ 535.852008][ T8037] veth1_vlan: entered promiscuous mode [ 535.881973][ T8042] veth0_macvtap: entered promiscuous mode [ 535.936624][ T8042] veth1_macvtap: entered promiscuous mode [ 536.261022][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.319205][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.371862][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.382468][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.393020][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.405327][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.419571][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.748385][ T29] audit: type=1326 audit(1718759550.578:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8101 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68fae7cf29 code=0x0 [ 537.386362][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.430249][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.460782][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.499222][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.509268][ T8042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.522601][ T8042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.535909][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.586098][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.606034][ T8109] loop4: detected capacity change from 0 to 47 [ 537.665354][ T8037] veth0_macvtap: entered promiscuous mode [ 537.702329][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.743044][ T8042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.762721][ T8042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.788949][ T8042] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.801728][ T8042] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.854723][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.862106][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.892140][ T8037] veth1_macvtap: entered promiscuous mode [ 537.931665][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.938981][ T8082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.235850][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.267151][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.294203][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.317135][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.327017][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.357176][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.367140][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.387095][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.418159][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.478556][ T8053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.531275][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.588726][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.610250][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.627890][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.639807][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.668314][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.687139][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.707135][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.729992][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.820175][ T8037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.843337][ T8037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.863767][ T8037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.877140][ T8037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.968831][ T6838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.976714][ T6838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.353061][ T5305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.394434][ T5305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.395364][ T8117] loop4: detected capacity change from 0 to 2048 [ 539.571123][ T8117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.631005][ T8117] ext4 filesystem being mounted at /root/syzkaller-testdir2706048588/syzkaller.UyI7r7/3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.669873][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.689521][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.795550][ T8053] veth0_vlan: entered promiscuous mode [ 539.801695][ T8124] loop1: detected capacity change from 0 to 1764 [ 539.811127][ T8124] iso9660: Unknown parameter '' [ 539.899751][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.004519][ T8016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.045705][ T8053] veth1_vlan: entered promiscuous mode [ 540.059602][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.099732][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.450833][ T8053] veth0_macvtap: entered promiscuous mode [ 540.512410][ T8053] veth1_macvtap: entered promiscuous mode [ 540.561675][ T8135] loop1: detected capacity change from 0 to 64 [ 540.580809][ T8134] loop3: detected capacity change from 0 to 64 [ 540.594456][ T8135] hfs: get root inode failed [ 540.761007][ T8071] veth0_vlan: entered promiscuous mode [ 540.851910][ T8137] loop4: detected capacity change from 0 to 64 [ 541.006462][ T8071] veth1_vlan: entered promiscuous mode [ 541.105860][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.140626][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.192182][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.268857][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.268892][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.268919][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.268943][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.268966][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.268985][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.269008][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.274489][ T8053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.520614][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.520654][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.520671][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.520694][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.520713][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.520737][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.520755][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.520778][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.520795][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.520818][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.530240][ T8053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.663252][ T8053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.663298][ T8053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.663334][ T8053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.663371][ T8053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.843819][ T8071] veth0_macvtap: entered promiscuous mode [ 541.982260][ T8071] veth1_macvtap: entered promiscuous mode [ 542.345896][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.414242][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.414436][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.414583][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.414982][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.416432][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.416465][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.416482][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.416496][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.416512][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.416531][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.416547][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.436875][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.562563][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.562588][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.562600][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.562617][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.562631][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.562648][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.562661][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.562678][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.562691][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.562708][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.562720][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.562737][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.566785][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.567173][ T5305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.567199][ T5305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.696887][ T8071] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.696932][ T8071] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.696969][ T8071] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.697005][ T8071] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.882325][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.882349][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.487367][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.487398][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.689386][ T6838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.689423][ T6838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.144744][ T8149] loop0: detected capacity change from 0 to 2048 [ 544.300751][ T8149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.643473][ T8156] loop0: detected capacity change from 2048 to 0 [ 544.671022][ T8148] bio_check_eod: 4 callbacks suppressed [ 544.671039][ T8148] syz-executor.0: attempt to access beyond end of device [ 544.671039][ T8148] loop0: rw=536576, sector=8, nr_sectors = 4 limit=0 [ 544.726168][ T8148] syz-executor.0: attempt to access beyond end of device [ 544.726168][ T8148] loop0: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 544.766809][ T8148] EXT4-fs error (device loop0): ext4_wait_block_bitmap:582: comm syz-executor.0: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 544.815660][ T8148] syz-executor.0: attempt to access beyond end of device [ 544.815660][ T8148] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 544.850284][ T8148] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 544.944687][ T8148] EXT4-fs (loop0): I/O error while writing superblock [ 544.987654][ T8148] syz-executor.0: attempt to access beyond end of device [ 544.987654][ T8148] loop0: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 545.037280][ T8148] EXT4-fs error (device loop0): ext4_wait_block_bitmap:582: comm syz-executor.0: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 545.082569][ T8164] loop4: detected capacity change from 0 to 64 [ 546.004903][ T8164] hfs: invalid btree extent records (0 size) [ 546.011074][ T8164] hfs: unable to open catalog tree [ 546.189994][ T8148] syz-executor.0: attempt to access beyond end of device [ 546.189994][ T8148] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 546.292266][ T8148] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 546.377329][ T8148] EXT4-fs (loop0): I/O error while writing superblock [ 546.431205][ T8148] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 5 [ 546.497442][ T8148] EXT4-fs (loop0): This should not happen!! Data will be lost [ 546.497442][ T8148] [ 546.626190][ T8167] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 546.633402][ T8167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 546.657362][ T8167] vhci_hcd vhci_hcd.0: Device attached [ 546.695243][ T8053] syz-executor.0: attempt to access beyond end of device [ 546.695243][ T8053] loop0: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 546.842413][ T5305] kworker/u8:9: attempt to access beyond end of device [ 546.842413][ T5305] loop0: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 546.885541][ T5305] kworker/u8:9: attempt to access beyond end of device [ 546.885541][ T5305] loop0: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 546.913793][ T8173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.948985][ T5305] kworker/u8:9: attempt to access beyond end of device [ 546.948985][ T5305] loop0: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 546.957905][ T1058] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 546.971392][ T5305] kworker/u8:9: attempt to access beyond end of device [ 546.971392][ T5305] loop0: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 546.986353][ T8173] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 547.018313][ T5305] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4479: inode #18: block 6: comm kworker/u8:9: unable to read itable block [ 547.040742][ T29] audit: type=1400 audit(1718759560.908:390): avc: denied { read } for pid=8166 comm="syz-executor.4" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 547.107277][ T5305] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 547.115581][ T5305] EXT4-fs (loop0): I/O error while writing superblock [ 547.147594][ T29] audit: type=1400 audit(1718759560.908:391): avc: denied { open } for pid=8166 comm="syz-executor.4" path="/dev/input/mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 547.198796][ T8053] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.262971][ T8053] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 547.301847][ T8053] EXT4-fs (loop0): I/O error while writing superblock [ 547.316105][ T8176] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 547.360428][ T8152] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 547.439252][ T8168] vhci_hcd: connection reset by peer [ 547.462522][ T2862] vhci_hcd: stop threads [ 547.472236][ T2862] vhci_hcd: release socket [ 547.483518][ T2862] vhci_hcd: disconnect device [ 548.140676][ T8185] loop3: detected capacity change from 0 to 1764 [ 548.174564][ T8185] iso9660: Unknown parameter '' [ 548.463538][ T5305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.879839][ T8187] loop2: detected capacity change from 0 to 256 [ 548.959077][ T8187] FAT-fs (loop2): Directory bread(block 64) failed [ 548.965690][ T8187] FAT-fs (loop2): Directory bread(block 65) failed [ 548.972534][ T8187] FAT-fs (loop2): Directory bread(block 66) failed [ 548.979894][ T8187] FAT-fs (loop2): Directory bread(block 67) failed [ 548.991582][ T8187] FAT-fs (loop2): Directory bread(block 68) failed [ 548.998255][ T8187] FAT-fs (loop2): Directory bread(block 69) failed [ 549.004949][ T8187] FAT-fs (loop2): Directory bread(block 70) failed [ 549.011565][ T8187] FAT-fs (loop2): Directory bread(block 71) failed [ 549.018289][ T8187] FAT-fs (loop2): Directory bread(block 72) failed [ 549.024857][ T8187] FAT-fs (loop2): Directory bread(block 73) failed [ 549.239243][ T29] audit: type=1326 audit(1718759563.038:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68fae7cf29 code=0x0 [ 550.228059][ T5305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.277639][ T5157] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 550.299869][ T8207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.396154][ T5305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.459483][ T5157] usb 2-1: device descriptor read/64, error -71 [ 550.539688][ T5154] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 550.604192][ T5305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.684309][ T8210] loop4: detected capacity change from 0 to 512 [ 550.968566][ T5157] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 551.007442][ T5154] usb 4-1: Using ep0 maxpacket: 32 [ 551.046549][ T8210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.097464][ T8210] ext4 filesystem being mounted at /root/syzkaller-testdir2706048588/syzkaller.UyI7r7/11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.107247][ T5154] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 551.132481][ T5154] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 551.154908][ T5154] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.182270][ T5154] usb 4-1: string descriptor 0 read error: -22 [ 551.189695][ T5157] usb 2-1: device descriptor read/64, error -71 [ 551.216810][ T5154] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 551.233170][ T5154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.295721][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 551.314069][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 551.328265][ T5157] usb usb2-port1: attempt power cycle [ 551.336964][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 551.365570][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 551.383092][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 551.398320][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 551.533118][ T29] audit: type=1400 audit(1718759565.398:393): avc: denied { create } for pid=8205 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 551.663381][ T8016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.806703][ T8224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.846090][ T5305] bridge_slave_1: left allmulticast mode [ 551.877846][ T5305] bridge_slave_1: left promiscuous mode [ 551.894563][ T8224] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 551.915130][ T5305] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.961751][ T5305] bridge_slave_0: left allmulticast mode [ 551.981846][ T5155] usb 4-1: USB disconnect, device number 9 [ 552.028192][ T5305] bridge_slave_0: left promiscuous mode [ 552.038919][ T5305] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.085298][ T8231] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 552.199609][ T1058] vhci_hcd: vhci_device speed not set [ 552.566506][ T8233] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 552.646221][ T8233] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 552.782127][ T29] audit: type=1400 audit(1718759566.578:394): avc: denied { mount } for pid=8234 comm="syz-executor.3" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 552.808869][ T2862] bio_check_eod: 4 callbacks suppressed [ 552.808886][ T2862] kworker/u8:7: attempt to access beyond end of device [ 552.808886][ T2862] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 553.018989][ T8238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.130583][ T5113] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 553.471400][ T5113] Bluetooth: hci0: command tx timeout [ 555.360314][ T5305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.386341][ T5305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.409648][ T5305] bond0 (unregistering): Released all slaves [ 555.555512][ T5113] Bluetooth: hci0: command tx timeout [ 556.045251][ T8253] loop4: detected capacity change from 0 to 1764 [ 556.068909][ T8253] iso9660: Unknown parameter '' [ 556.108902][ T8256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.163096][ T8249] sp0: Synchronizing with TNC [ 556.203107][ T29] audit: type=1400 audit(1718759570.058:395): avc: denied { read } for pid=8257 comm="syz-executor.2" name="loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 556.278710][ T29] audit: type=1400 audit(1718759570.068:396): avc: denied { open } for pid=8257 comm="syz-executor.2" path="/dev/loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 556.361786][ T29] audit: type=1400 audit(1718759570.068:397): avc: denied { ioctl } for pid=8257 comm="syz-executor.2" path="/dev/loop-control" dev="devtmpfs" ino=647 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 556.451142][ T8262] loop3: detected capacity change from 0 to 512 [ 556.597459][ T8262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.620182][ T8266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.640694][ T8262] ext4 filesystem being mounted at /root/syzkaller-testdir2234096975/syzkaller.ysBmIf/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.736474][ T8266] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 556.827531][ T8082] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 556.914462][ T8275] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 556.935824][ T5305] hsr_slave_0: left promiscuous mode [ 557.005898][ T8037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.039484][ T8082] usb 3-1: device descriptor read/64, error -71 [ 557.050982][ T5305] hsr_slave_1: left promiscuous mode [ 557.088503][ T5305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.096077][ T5305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.112527][ T5305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.124435][ T5305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.162194][ T5305] veth1_macvtap: left promiscuous mode [ 557.180401][ T5305] veth0_macvtap: left promiscuous mode [ 557.186245][ T5305] veth1_vlan: left promiscuous mode [ 557.204345][ T5305] veth0_vlan: left promiscuous mode [ 557.311942][ T8279] loop3: detected capacity change from 0 to 8 [ 557.357224][ T8082] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 557.384446][ T8279] SQUASHFS error: Failed to read block 0x4e8: -5 [ 557.401562][ T8278] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 557.430317][ T29] audit: type=1800 audit(1718759571.288:398): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 557.465909][ T8278] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 557.638927][ T5113] Bluetooth: hci0: command tx timeout [ 557.737404][ T8082] usb 3-1: device descriptor read/64, error -71 [ 557.908386][ T8282] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 557.916666][ T8282] SQUASHFS error: Failed to read block 0x4e8: -5 [ 557.924459][ T8282] SQUASHFS error: Failed to read block 0x4e8: -5 [ 557.931820][ T8282] SQUASHFS error: Failed to read block 0x4e8: -5 [ 558.015123][ T8082] usb usb3-port1: attempt power cycle [ 558.659979][ T8283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.672129][ T8082] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 558.689015][ T29] audit: type=1400 audit(1718759572.548:399): avc: denied { bind } for pid=8284 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 559.013260][ T8285] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 559.013260][ T8285] z,@qJ#"h/.W1ȱnNC"C׈E)8+1<+`#k' [ 559.248935][ T8082] usb 3-1: device descriptor read/8, error -71 [ 559.257230][ T29] audit: type=1400 audit(1718759572.548:400): avc: denied { name_bind } for pid=8284 comm="syz-executor.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 559.330412][ T29] audit: type=1400 audit(1718759572.548:401): avc: denied { node_bind } for pid=8284 comm="syz-executor.4" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 559.715106][ T5113] Bluetooth: hci0: command tx timeout [ 559.872676][ T8082] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 560.887185][ T8082] usb 3-1: device not accepting address 9, error -71 [ 560.902607][ T8082] usb usb3-port1: unable to enumerate USB device [ 561.013543][ T8300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.362145][ T8307] loop3: detected capacity change from 0 to 1764 [ 561.382901][ T8307] iso9660: Unknown parameter '' [ 561.584600][ T8311] loop4: detected capacity change from 0 to 512 [ 561.662253][ T8311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.694956][ T8311] ext4 filesystem being mounted at /root/syzkaller-testdir2706048588/syzkaller.UyI7r7/20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.498784][ T8016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.583566][ T5111] Bluetooth: hci7: sending frame failed (-49) [ 562.594331][ T5113] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 562.906485][ T5305] team0 (unregistering): Port device team_slave_1 removed [ 562.928125][ T8332] loop4: detected capacity change from 0 to 256 [ 562.955028][ T8332] FAT-fs (loop4): Directory bread(block 64) failed [ 562.961724][ T8332] FAT-fs (loop4): Directory bread(block 65) failed [ 562.968725][ T8332] FAT-fs (loop4): Directory bread(block 66) failed [ 562.975291][ T8332] FAT-fs (loop4): Directory bread(block 67) failed [ 562.982014][ T8332] FAT-fs (loop4): Directory bread(block 68) failed [ 562.990123][ T8332] FAT-fs (loop4): Directory bread(block 69) failed [ 562.996821][ T8332] FAT-fs (loop4): Directory bread(block 70) failed [ 563.003459][ T8332] FAT-fs (loop4): Directory bread(block 71) failed [ 563.010240][ T8332] FAT-fs (loop4): Directory bread(block 72) failed [ 563.019685][ T8332] FAT-fs (loop4): Directory bread(block 73) failed [ 563.262035][ T5305] team0 (unregistering): Port device team_slave_0 removed [ 565.321635][ T8216] chnl_net:caif_netlink_parms(): no params data found [ 566.385863][ T29] audit: type=1326 audit(1718759579.778:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38f1c7cf29 code=0x0 [ 566.727248][ T8082] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 566.832778][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.844597][ T29] audit: type=1400 audit(1718759580.708:403): avc: denied { getopt } for pid=8346 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 566.866991][ T8352] loop2: detected capacity change from 0 to 8 [ 566.867620][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.887895][ T8216] bridge_slave_0: entered allmulticast mode [ 566.919853][ T8216] bridge_slave_0: entered promiscuous mode [ 566.941171][ T8216] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.960093][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.987240][ T8082] usb 2-1: device descriptor read/64, error -71 [ 566.987815][ T8216] bridge_slave_1: entered allmulticast mode [ 567.008981][ T8352] SQUASHFS error: Failed to read block 0x62: -5 [ 567.028772][ T8216] bridge_slave_1: entered promiscuous mode [ 567.035389][ T2862] kworker/u8:7: attempt to access beyond end of device [ 567.035389][ T2862] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 567.067503][ T8352] squashfs image failed sanity check [ 567.256788][ T8216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.279741][ T8355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.333136][ T8216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.404573][ T8082] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 567.692929][ T8355] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 567.737742][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 567.748511][ T8354] bridge_slave_1: left allmulticast mode [ 567.754209][ T8354] bridge_slave_1: left promiscuous mode [ 567.761340][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.785528][ T8358] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 567.804084][ T8354] bridge_slave_0: left allmulticast mode [ 567.810659][ T8354] bridge_slave_0: left promiscuous mode [ 567.816643][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.833817][ T8082] usb 2-1: device descriptor read/64, error -71 [ 568.086227][ T8082] usb usb2-port1: attempt power cycle [ 568.303439][ T8362] overlayfs: missing 'lowerdir' [ 568.494393][ T8370] loop3: detected capacity change from 0 to 512 [ 568.517534][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.524115][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.547279][ T8370] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 568.577163][ T8082] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 568.607455][ T8370] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 568.610497][ T8370] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 568.618171][ T8082] usb 2-1: device descriptor read/8, error -71 [ 568.629353][ T8370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.763153][ T8370] EXT4-fs error (device loop3): ext4_find_dest_de:2110: inode #2: block 13: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=1056964610, rec_len=0, size=1024 fake=1 [ 568.843315][ T8370] EXT4-fs error (device loop3): ext4_readdir:258: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2234096975/syzkaller.ysBmIf/15/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=1056964610, rec_len=0, size=1024 fake=1 [ 568.861423][ T8370] EXT4-fs error (device loop3): ext4_find_dest_de:2110: inode #2: block 13: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=1056964610, rec_len=0, size=1024 fake=1 [ 568.885557][ T29] audit: type=1400 audit(1718759582.718:404): avc: denied { create } for pid=8369 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 568.914433][ T8374] loop2: detected capacity change from 0 to 512 [ 568.937696][ T8082] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 569.008125][ T8082] usb 2-1: device descriptor read/8, error -71 [ 569.020150][ T8037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.033158][ T8374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.052458][ T8216] team0: Port device team_slave_0 added [ 569.093435][ T8374] ext4 filesystem being mounted at /root/syzkaller-testdir1595872091/syzkaller.vLOabR/11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.136540][ T8216] team0: Port device team_slave_1 added [ 569.147827][ T8082] usb usb2-port1: unable to enumerate USB device [ 569.343132][ T8071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.365737][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.397306][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.398786][ T8386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=8386 comm=syz-executor.4 [ 569.497363][ T8216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.542675][ T8385] tipc: Started in network mode [ 569.568841][ T29] audit: type=1400 audit(1718759583.418:405): avc: denied { sqpoll } for pid=8389 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 569.583543][ T8385] tipc: Node identity ac14142a, cluster identity 4711 [ 569.632671][ T8385] tipc: Enabled bearer , priority 10 [ 569.647214][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.667203][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.723468][ T8216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.830218][ T29] audit: type=1400 audit(1718759583.688:406): avc: denied { shutdown } for pid=8389 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 569.858438][ T8391] block nbd1: shutting down sockets [ 569.937958][ T29] audit: type=1400 audit(1718759583.808:407): avc: denied { setopt } for pid=8389 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 570.005309][ T8216] hsr_slave_0: entered promiscuous mode [ 570.009495][ T29] audit: type=1400 audit(1718759583.838:408): avc: denied { read } for pid=8389 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 570.039731][ T8216] hsr_slave_1: entered promiscuous mode [ 570.053215][ T8396] loop1: detected capacity change from 0 to 8 [ 570.073035][ T8216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.093028][ T29] audit: type=1400 audit(1718759583.898:409): avc: denied { listen } for pid=8400 comm="syz-executor.4" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 570.127095][ T8216] Cannot create hsr debugfs directory [ 570.180926][ T29] audit: type=1326 audit(1718759584.048:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68fae7cf29 code=0x0 [ 570.285436][ T8407] loop2: detected capacity change from 0 to 8 [ 570.394194][ T8407] SQUASHFS error: Failed to read block 0x62: -5 [ 570.441469][ T8407] squashfs image failed sanity check [ 571.037093][ T785] tipc: Node number set to 2886997034 [ 571.295911][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 571.420225][ T8430] loop1: detected capacity change from 0 to 256 [ 572.567038][ T8216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 572.633811][ T8216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 572.691898][ T8216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 572.752916][ T8216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 573.416758][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.506379][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 573.519307][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 573.537757][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 573.579765][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 573.589780][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 573.600569][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.720196][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.916282][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.076821][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.385600][ T29] audit: type=1400 audit(1718759588.248:411): avc: denied { bind } for pid=8489 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 575.717287][ T5113] Bluetooth: hci4: command tx timeout [ 577.787225][ T5113] Bluetooth: hci4: command tx timeout [ 578.780758][ T8082] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 578.977099][ T8082] usb 5-1: Using ep0 maxpacket: 8 [ 578.992333][ T8082] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.007516][ T8082] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 579.027597][ T8082] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 579.038938][ T8082] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 579.057128][ T8082] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 579.076430][ T8082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.097294][ T8082] hub 5-1:1.0: bad descriptor, ignoring hub [ 579.103268][ T8082] hub 5-1:1.0: probe with driver hub failed with error -5 [ 579.127883][ T8082] cdc_wdm 5-1:1.0: skipping garbage [ 579.133232][ T8082] cdc_wdm 5-1:1.0: skipping garbage [ 579.143638][ T8082] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 579.153482][ T8082] cdc_wdm 5-1:1.0: Unknown control protocol [ 579.418840][ T8082] usb 5-1: USB disconnect, device number 10 [ 579.867322][ T5113] Bluetooth: hci4: command tx timeout [ 580.350264][ T29] audit: type=1400 audit(1718759594.208:412): avc: denied { mount } for pid=8496 comm="syz-executor.4" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 581.020692][ T29] audit: type=1400 audit(1718759594.878:413): avc: denied { bind } for pid=8500 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 581.067325][ T29] audit: type=1400 audit(1718759594.878:414): avc: denied { name_bind } for pid=8500 comm="syz-executor.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 581.107183][ T29] audit: type=1400 audit(1718759594.878:415): avc: denied { node_bind } for pid=8500 comm="syz-executor.4" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 581.177416][ T29] audit: type=1400 audit(1718759594.878:416): avc: denied { listen } for pid=8500 comm="syz-executor.4" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 581.227423][ T29] audit: type=1400 audit(1718759594.888:417): avc: denied { connect } for pid=8500 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 581.267177][ T29] audit: type=1400 audit(1718759594.888:418): avc: denied { name_connect } for pid=8500 comm="syz-executor.4" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 581.305910][ T29] audit: type=1400 audit(1718759594.888:419): avc: denied { accept } for pid=8500 comm="syz-executor.4" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 581.353548][ T29] audit: type=1400 audit(1718759594.888:420): avc: denied { write } for pid=8500 comm="syz-executor.4" laddr=::1 lport=34974 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 581.947549][ T5113] Bluetooth: hci4: command tx timeout [ 582.016102][ T8504] loop4: detected capacity change from 0 to 32768 [ 582.066091][ T8504] XFS: attr2 mount option is deprecated. [ 582.071953][ T8504] XFS: ikeep mount option is deprecated. [ 582.087171][ T8504] XFS: noikeep mount option is deprecated. [ 582.148096][ T8504] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 582.257248][ T8504] XFS (loop4): Ending clean mount [ 582.292752][ T8504] XFS (loop4): Quotacheck needed: Please wait. [ 582.437937][ T8504] XFS (loop4): Quotacheck: Done. [ 582.663086][ T8016] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 585.124789][ T8521] mmap: syz-executor.4 (8521) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 586.395867][ T8526] loop4: detected capacity change from 0 to 40427 [ 586.457950][ T8526] F2FS-fs (loop4): invalid crc value [ 586.503929][ T8526] F2FS-fs (loop4): Found nat_bits in checkpoint [ 586.687634][ T8526] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 586.751152][ T29] audit: type=1400 audit(1718759600.608:421): avc: denied { mounton } for pid=8525 comm="syz-executor.4" path="/root/syzkaller-testdir2706048588/syzkaller.UyI7r7/42/file3/bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 586.808360][ T29] audit: type=1400 audit(1718759600.648:422): avc: denied { write } for pid=8525 comm="syz-executor.4" name="bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 586.855887][ T29] audit: type=1400 audit(1718759600.648:423): avc: denied { add_name } for pid=8525 comm="syz-executor.4" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 586.895251][ T29] audit: type=1400 audit(1718759600.658:424): avc: denied { setattr } for pid=8525 comm="syz-executor.4" name="work" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 586.940262][ T29] audit: type=1400 audit(1718759600.708:425): avc: denied { remove_name } for pid=8525 comm="syz-executor.4" name="#3" dev="loop4" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 586.980929][ T29] audit: type=1400 audit(1718759600.708:426): avc: denied { rename } for pid=8525 comm="syz-executor.4" name="#3" dev="loop4" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 587.017267][ T29] audit: type=1400 audit(1718759600.788:427): avc: denied { unlink } for pid=8525 comm="syz-executor.4" name="#3" dev="loop4" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 587.061289][ T8016] syz-executor.4: attempt to access beyond end of device [ 587.061289][ T8016] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 587.082321][ T8016] syz-executor.4: attempt to access beyond end of device [ 587.082321][ T8016] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 587.359861][ T51] kworker/u8:3: attempt to access beyond end of device [ 587.359861][ T51] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 587.379551][ T51] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 587.398319][ T51] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 587.405505][ T51] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 605.158204][ T5111] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 605.173898][ T5111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 605.188402][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 605.198212][ T8537] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 605.214061][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 605.224474][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 605.233296][ T8537] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 605.242150][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 605.254138][ T8537] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 605.264408][ T8537] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 605.275328][ T8537] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 605.288872][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 607.307419][ T8537] Bluetooth: hci6: command tx timeout [ 607.387352][ T8537] Bluetooth: hci7: command tx timeout [ 609.387211][ T8537] Bluetooth: hci6: command tx timeout [ 609.468808][ T8537] Bluetooth: hci7: command tx timeout [ 611.467326][ T8537] Bluetooth: hci6: command tx timeout [ 611.547185][ T8537] Bluetooth: hci7: command tx timeout [ 613.009656][ T5111] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 613.026383][ T5111] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 613.035888][ T5111] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 613.044825][ T5111] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 613.067774][ T5111] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 613.075422][ T5111] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 613.547215][ T8537] Bluetooth: hci6: command tx timeout [ 613.627274][ T8537] Bluetooth: hci7: command tx timeout [ 614.463081][ T5111] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 614.477348][ T5111] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 614.486070][ T5111] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 614.496042][ T5111] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 614.504268][ T5111] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 614.511879][ T5111] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 615.147544][ T8537] Bluetooth: hci8: command tx timeout [ 616.587617][ T8537] Bluetooth: hci9: command tx timeout [ 617.227459][ T8537] Bluetooth: hci8: command tx timeout [ 618.669522][ T8537] Bluetooth: hci9: command tx timeout [ 619.307479][ T8537] Bluetooth: hci8: command tx timeout [ 620.747333][ T8537] Bluetooth: hci9: command tx timeout [ 621.387223][ T8537] Bluetooth: hci8: command tx timeout [ 622.827461][ T8537] Bluetooth: hci9: command tx timeout [ 626.907580][ T5111] Bluetooth: hci2: command 0x0406 tx timeout [ 629.952724][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.961163][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.051449][ T5111] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 638.064610][ T5111] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 638.077872][ T5111] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 638.088223][ T5111] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 638.106619][ T5111] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 638.115293][ T5111] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 640.189949][ T8537] Bluetooth: hci10: command tx timeout [ 642.267818][ T8537] Bluetooth: hci10: command tx timeout [ 644.348644][ T8537] Bluetooth: hci10: command tx timeout [ 646.428482][ T8537] Bluetooth: hci10: command tx timeout [ 647.400601][ T8537] Bluetooth: hci5: command 0x0406 tx timeout [ 670.430633][ T8537] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 670.442931][ T8537] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 670.457186][ T8537] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 670.487739][ T8537] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 670.497477][ T8537] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 670.505488][ T8537] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 670.563236][ T5113] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 670.577884][ T5113] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 670.591525][ T5113] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 670.623459][ T5113] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 670.631905][ T5113] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 670.647222][ T5113] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 672.587608][ T5111] Bluetooth: hci11: command tx timeout [ 672.667288][ T5111] Bluetooth: hci12: command tx timeout [ 674.667115][ T5111] Bluetooth: hci11: command tx timeout [ 674.747355][ T5111] Bluetooth: hci12: command tx timeout [ 676.747180][ T5113] Bluetooth: hci11: command tx timeout [ 676.837080][ T5113] Bluetooth: hci12: command tx timeout [ 678.107764][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 678.161664][ T5111] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 678.177291][ T5111] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 678.187824][ T5111] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 678.207919][ T5111] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 678.224076][ T5111] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 678.237270][ T5111] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 678.828377][ T5113] Bluetooth: hci11: command tx timeout [ 678.918816][ T5113] Bluetooth: hci12: command tx timeout [ 679.498929][ T5111] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 679.518753][ T5111] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 679.540419][ T5111] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 679.570459][ T5111] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 679.588239][ T5111] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 679.595955][ T5111] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 680.267735][ T5113] Bluetooth: hci13: command tx timeout [ 681.707342][ T5113] Bluetooth: hci14: command tx timeout [ 682.347463][ T5113] Bluetooth: hci13: command tx timeout [ 683.787133][ T5113] Bluetooth: hci14: command tx timeout [ 684.427464][ T5113] Bluetooth: hci13: command tx timeout [ 685.876237][ T5113] Bluetooth: hci14: command tx timeout [ 686.507666][ T5113] Bluetooth: hci13: command tx timeout [ 687.947161][ T5113] Bluetooth: hci14: command tx timeout [ 691.408259][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.414799][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.606395][ T5113] Bluetooth: hci4: command 0x0406 tx timeout [ 703.476527][ T5113] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 703.508040][ T5113] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 703.517653][ T5113] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 703.526475][ T5113] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 703.561768][ T5113] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 703.577070][ T5113] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 705.707530][ T5111] Bluetooth: hci15: command tx timeout [ 707.787266][ T5111] Bluetooth: hci15: command tx timeout [ 709.867111][ T5111] Bluetooth: hci15: command tx timeout [ 711.947346][ T5111] Bluetooth: hci15: command tx timeout [ 729.307203][ T8537] Bluetooth: hci7: command 0x0406 tx timeout [ 729.314860][ T8537] Bluetooth: hci6: command 0x0406 tx timeout [ 733.627382][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 733.635092][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 733.667075][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/19 01:15:47 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 733.675803][ T30] task:kworker/u8:1 state:D stack:25712 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 733.764829][ T30] Workqueue: netns cleanup_net [ 733.777063][ T30] Call Trace: [ 733.780395][ T30] [ 733.783381][ T30] __schedule+0xf15/0x5d00 [ 733.797067][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 733.802353][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 733.840695][ T30] ? __pfx___schedule+0x10/0x10 [ 733.845671][ T30] ? schedule+0x298/0x350 [ 733.867351][ T30] ? __pfx_lock_release+0x10/0x10 [ 733.872585][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 733.887045][ T30] ? __mutex_trylock_common+0x78/0x250 [ 733.892613][ T30] schedule+0xe7/0x350 [ 733.896751][ T30] schedule_preempt_disabled+0x13/0x30 [ 733.918323][ T30] __mutex_lock+0x5b8/0x9c0 [ 733.922925][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 733.937100][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 733.942904][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 733.967030][ T30] ? __pfx___debug_object_init+0x10/0x10 [ 733.972841][ T30] ? register_nexthop_notifier+0x1b/0x70 [ 733.987014][ T30] ? rtnl_lock+0x9/0x20 [ 733.991239][ T30] register_nexthop_notifier+0x1b/0x70 [ 733.996763][ T30] nsim_fib_create+0x8df/0xc90 [ 734.017119][ T30] ? __pfx_nsim_fib_create+0x10/0x10 [ 734.037125][ T30] ? queue_delayed_work_on+0xa2/0x150 [ 734.042606][ T30] ? nsim_dev_traps_init+0x23d/0x5d0 [ 734.060855][ T30] nsim_dev_reload_up+0x3f6/0x860 [ 734.065980][ T30] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 734.077077][ T30] ? devlink_params_driverinit_load_new+0x243/0x2d0 [ 734.083739][ T30] ? devlink_notify+0x125/0x220 [ 734.107471][ T30] devlink_reload+0x31a/0x7c0 [ 734.112238][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 734.127022][ T30] devlink_pernet_pre_exit+0x1a1/0x2b0 [ 734.132592][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 734.147061][ T30] ? up_write+0x1b2/0x520 [ 734.151460][ T30] ? kobject_put+0xbe/0x5b0 [ 734.156007][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 734.177092][ T30] cleanup_net+0x488/0xbf0 [ 734.181607][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 734.186613][ T30] process_one_work+0x9fb/0x1b60 [ 734.207229][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 734.212807][ T30] ? __pfx_process_one_work+0x10/0x10 [ 734.237087][ T30] ? assign_work+0x1a0/0x250 [ 734.241783][ T30] worker_thread+0x6c8/0xf70 [ 734.246430][ T30] ? __pfx_worker_thread+0x10/0x10 [ 734.267049][ T30] kthread+0x2c1/0x3a0 [ 734.271208][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 734.276471][ T30] ? __pfx_kthread+0x10/0x10 [ 734.297086][ T30] ret_from_fork+0x45/0x80 [ 734.301608][ T30] ? __pfx_kthread+0x10/0x10 [ 734.306250][ T30] ret_from_fork_asm+0x1a/0x30 [ 734.328295][ T30] [ 734.331571][ T30] INFO: task kworker/0:5:5157 blocked for more than 144 seconds. [ 734.357065][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 734.364942][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 734.407010][ T30] task:kworker/0:5 state:D stack:25872 pid:5157 tgid:5157 ppid:2 flags:0x00004000 [ 734.427306][ T30] Workqueue: events linkwatch_event [ 734.434013][ T30] Call Trace: [ 734.447096][ T30] [ 734.450178][ T30] __schedule+0xf15/0x5d00 [ 734.454684][ T30] ? __pfx_mark_lock+0x10/0x10 [ 734.467028][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 734.472314][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 734.487064][ T30] ? __pfx___schedule+0x10/0x10 [ 734.491995][ T30] ? schedule+0x298/0x350 [ 734.496484][ T30] ? __pfx_lock_release+0x10/0x10 [ 734.527014][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 734.533768][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 734.547020][ T30] schedule+0xe7/0x350 [ 734.551179][ T30] schedule_preempt_disabled+0x13/0x30 [ 734.556709][ T30] __mutex_lock+0x5b8/0x9c0 [ 734.577058][ T30] ? linkwatch_event+0x51/0xc0 [ 734.581901][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 734.597041][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 734.602146][ T30] ? __pfx_lock_release+0x10/0x10 [ 734.617132][ T30] ? linkwatch_event+0x51/0xc0 [ 734.621972][ T30] ? rtnl_lock+0x9/0x20 [ 734.626176][ T30] linkwatch_event+0x51/0xc0 [ 734.647019][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 734.652388][ T30] ? rcu_is_watching+0x12/0xc0 [ 734.667051][ T30] process_one_work+0x9fb/0x1b60 [ 734.672296][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 734.687040][ T30] ? __pfx_process_one_work+0x10/0x10 [ 734.692478][ T30] ? assign_work+0x1a0/0x250 [ 734.707010][ T30] worker_thread+0x6c8/0xf70 [ 734.711670][ T30] ? __kthread_parkme+0x148/0x220 [ 734.716760][ T30] ? __pfx_worker_thread+0x10/0x10 [ 734.747056][ T30] kthread+0x2c1/0x3a0 [ 734.751231][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 734.756499][ T30] ? __pfx_kthread+0x10/0x10 [ 734.777069][ T30] ret_from_fork+0x45/0x80 [ 734.781591][ T30] ? __pfx_kthread+0x10/0x10 [ 734.786239][ T30] ret_from_fork_asm+0x1a/0x30 [ 734.807040][ T30] [ 734.810181][ T30] INFO: task kworker/u8:10:6838 blocked for more than 144 seconds. [ 734.827147][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 734.834919][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 734.867071][ T30] task:kworker/u8:10 state:D stack:23968 pid:6838 tgid:6838 ppid:2 flags:0x00004000 [ 734.887029][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 734.893111][ T30] Call Trace: [ 734.896424][ T30] [