last executing test programs: 3m37.747238432s ago: executing program 32 (id=154): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 3m19.297645307s ago: executing program 33 (id=480): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a0, 0xffffffff, 0x190, 0x190, 0x98, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @private, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_to_bond\x00', {}, {}, 0x6c, 0x0, 0x21}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0xff000000, 0x0, 'vcan0\x00', 'ip_vti0\x00', {}, {}, 0x11, 0x1, 0x1e}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 3m6.431260197s ago: executing program 34 (id=456): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640)) 3m6.253799972s ago: executing program 35 (id=707): unshare(0x22020600) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000580)='./file0\x00') r0 = inotify_init1(0x80000) r1 = inotify_add_watch(r0, &(0x7f00000014c0)='./file0\x00', 0xa4000d98) r2 = dup(r0) inotify_rm_watch(r2, r1) 3m0.499189021s ago: executing program 7 (id=704): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001540)=@newlink={0x38, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000580)="6f3d12caa129679e", 0x8, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14) 3m0.376949643s ago: executing program 7 (id=779): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3m0.059607031s ago: executing program 7 (id=795): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r0 = syz_io_uring_setup(0x1a0, &(0x7f0000000380)={0x0, 0x60d0, 0x1, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 2m59.72951041s ago: executing program 7 (id=805): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 2m59.218636245s ago: executing program 36 (id=813): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/75, 0x4b}, 0x1f}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m58.989765476s ago: executing program 7 (id=818): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 2m58.989499786s ago: executing program 37 (id=818): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 2m39.755371329s ago: executing program 9 (id=1110): r0 = syz_io_uring_setup(0xbe7, &(0x7f0000000400)={0x0, 0xe7a8, 0x80, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0x3, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x3d0e, 0x4be, 0x43, 0x0, 0x0) 2m39.537390288s ago: executing program 9 (id=1117): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2m39.422165489s ago: executing program 9 (id=1122): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 2m39.384880822s ago: executing program 9 (id=1124): syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r1, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f00000000c0)="20f18043", 0x4, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x40, r0, 0x0, 0x0, 0x1}]) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x25e, &(0x7f0000000ec0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m39.125387305s ago: executing program 9 (id=1135): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68"], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3b9rM3UYAPDnkjQJOiSCkwge6OD0Yru6pEhfKGZSMqiDFtuCNEFooeAPjJ1cXRxdXZzc/Cdc/A8EV8HNgoWTy901SU1jUk2rvp/P0qd3z/O953u9Ujrck/eeH50cpnF88elP0W7Xo9aLXlwm0Y1aVD6POb0vAwD4L7vMsvg1K6xTl0REe3NtAQAbtPbf/+823hIAsGFvvvX267v9/t4badqOx6Mvzgf5f/b51+L87nF8EMM4ileiE1cR2bUifpxl2biR5rrx0mh8PsgrR+/+UK6/+0vEpH47OtGdHJqv3+/vbaeFmfpx3sdT5fV7ef1OdOLZBdff7+/tLKiPQTNefnGm/0fRiR/fjw9jGIeTJor6qEV8tp2mr2Vf/fbJO3l7eX0yPh+0JnlTWf2efzQAAAAAAAAAAAAAAAAAAAAAAPyPPSpn57RiMr8nP1TO36lf5d9sRVrpzs/nKeqTaqEb84HGWXxdzOfZiYg0zcrEaX0jnmtE42F2DQAAAAAAAAAAAAAAAAAAAP8uZx99fHIwHB6d/iNBNQ2geq3/ruv0Zo68EMuTW9Nr1cpwycpRr3KSiKVt5JtYueffy7EHd7t1z9zW87e9WHWdb/5672WwtULO3wyqp+vkIFl8D1vX+2pXD8n3sznNWPFazdtOZWs9fs2Fpzpr77359CQYL8mJZFljr/5c3LnySHJzF83JXV1YvlUGM+XzOe3Vn+f8N+VPEtM6AAAAAAAAAAAAAAAAAABgo6Yv/S44ebG0tJa1NtYWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyr6ef/rxGMy+IVkptxevbAWwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJ8EcAAAD//yeNYXk=") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f00000004c0)=[{&(0x7f0000000140)="a4", 0x1}], 0x1, 0xa001, 0x7f, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2m38.657797196s ago: executing program 9 (id=1146): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getgroups(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 2m38.653359987s ago: executing program 38 (id=1146): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getgroups(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 1m15.167660432s ago: executing program 4 (id=2559): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/215, 0xd7}], 0x1, 0xfffffffd, 0x8) 1m14.221710836s ago: executing program 4 (id=2556): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000cc0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3638919e178389777d715e4daffbe0cc32aded742429e0ff6b95eedbeee750d5193411b770539f09cb29c22f3a1507d93643aafc88aadc859e3e4f758642d45bffcdee0ae4296933e00baf3474e752d392586846d197b23c3de36c6242c8ead9088decbae3bb86bd0ee7a121c63830965f71f1eb8a43f2a995f5394b5553aa2a0e93d85646e2fc452c5b0c6ffbd7f15190d6974094be62f48b5b856f3d754d025edf8c9833f2299d9a9acfa07c65b615c48c292eef"], 0xff, 0x2e7, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) ftruncate(r0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sync_file_range(r0, 0x889, 0x8, 0x2) 1m14.042347421s ago: executing program 4 (id=2560): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) 1m13.914408203s ago: executing program 4 (id=2563): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 1m13.875745286s ago: executing program 4 (id=2566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001c00)}], 0x2}}], 0x1, 0x2090) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) 1m13.71774187s ago: executing program 4 (id=2569): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c) 1m13.659048875s ago: executing program 39 (id=2569): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c) 1m5.160889838s ago: executing program 1 (id=2674): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 1m4.947862437s ago: executing program 1 (id=2676): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m3.714517896s ago: executing program 1 (id=2703): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfd, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1m3.543117962s ago: executing program 1 (id=2695): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) syz_clone(0x1000000, 0x0, 0xfffffffffffffd2e, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) 1m3.354076828s ago: executing program 1 (id=2698): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1m1.637580301s ago: executing program 1 (id=2713): r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r1, r1, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, 0x0}, 0x50) 1m1.589455395s ago: executing program 40 (id=2713): r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r1, r1, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, 0x0}, 0x50) 33.967530971s ago: executing program 0 (id=3254): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @loopback}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/83, 0x53}, 0x10001}, {{0x0, 0x0, 0x0}, 0xcf}], 0x2, 0x40012002, 0x0) 33.937100454s ago: executing program 0 (id=3256): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="b6dfd048f3e1ef1e80cd93a75079", 0xe}], 0x1}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 33.809377865s ago: executing program 0 (id=3262): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0) 33.725785983s ago: executing program 0 (id=3264): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 33.725256013s ago: executing program 0 (id=3266): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0xfdef}], 0x1}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 33.511649362s ago: executing program 0 (id=3278): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 33.479720175s ago: executing program 41 (id=3278): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 1.620774327s ago: executing program 6 (id=3935): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, 0x0, 0x0, 0xd37) 1.601007859s ago: executing program 6 (id=3936): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) 1.546293063s ago: executing program 6 (id=3938): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 869.429113ms ago: executing program 2 (id=3958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x81, 0x6, @loopback, 0x2000000b}, 0x1c) 801.493679ms ago: executing program 2 (id=3959): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 768.394192ms ago: executing program 3 (id=3960): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x102004, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x8001, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 721.597766ms ago: executing program 6 (id=3961): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) setpgid(r0, r0) 457.34307ms ago: executing program 2 (id=3968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000000)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff07002321008cb89e08f088a8", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 445.897481ms ago: executing program 3 (id=3970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000019100)={@local, @random="a6e286036e89", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x9a5f}}}}}}, 0x0) 361.647758ms ago: executing program 8 (id=3972): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 361.430668ms ago: executing program 3 (id=3973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x42}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 341.16469ms ago: executing program 8 (id=3974): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast1}}, {{0xa, 0x4e20, 0x4e11, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7fff}}}, 0x108) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000180), 0x13f, 0x5}}, 0x20) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 330.402441ms ago: executing program 5 (id=3975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 269.572917ms ago: executing program 3 (id=3976): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r2, 0x2, {0x0, 0xf0}, 0xfd}, 0x18) 269.286227ms ago: executing program 8 (id=3977): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 269.037187ms ago: executing program 2 (id=3978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 268.842197ms ago: executing program 5 (id=3979): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000000000000, 0x0, 0x0, 0x8, 0x3b9ac9ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff8}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) 249.349848ms ago: executing program 3 (id=3980): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6}, 0x8) 236.114899ms ago: executing program 5 (id=3981): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) 217.945431ms ago: executing program 3 (id=3982): timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r1, 0x107, 0x2, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x77359400}}, &(0x7f0000000740)) 149.773797ms ago: executing program 8 (id=3983): r0 = socket$kcm(0x23, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)) 149.427917ms ago: executing program 2 (id=3984): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffc, 0x0, @perf_bp={0x0}, 0x448, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], 0x0, 0x0, 0x2}}, 0x40) 149.279757ms ago: executing program 5 (id=3985): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x30000008}) dup3(r0, r1, 0x0) 132.021588ms ago: executing program 8 (id=3986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7, r0}, 0x38) socket$inet(0x2, 0x2, 0x1) io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21b}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x3) 99.885511ms ago: executing program 2 (id=3987): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x26020480) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r1) 57.408945ms ago: executing program 8 (id=3988): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 57.091315ms ago: executing program 5 (id=3989): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 56.732595ms ago: executing program 6 (id=3990): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11ff092112"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 454.52µs ago: executing program 5 (id=3991): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 0s ago: executing program 6 (id=3992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) kernel console output (not intermixed with test programs): 62] netlink: 23 bytes leftover after parsing attributes in process `syz.3.2336'. [ 175.681778][T10872] loop6: detected capacity change from 0 to 1024 [ 175.701014][ T3754] udevd[3754]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 175.712127][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 175.741343][T10872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.767003][T10873] loop4: detected capacity change from 0 to 8192 [ 175.793390][T10872] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: comm syz.6.2332: inode #524290: comm syz.6.2332: iget: illegal inode # [ 175.839566][T10872] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2332: error while reading EA inode 524290 err=-117 [ 175.889961][T10873] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 175.902207][T10883] loop1: detected capacity change from 0 to 1024 [ 175.906929][ T5552] udevd[5552]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 175.911311][T10883] EXT4-fs: Ignoring removed nobh option [ 175.931883][T10883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.939580][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 175.954420][T10873] FAT-fs (loop4): Filesystem has been set read-only [ 175.962069][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.028562][T10883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.310623][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.687818][T10896] loop4: detected capacity change from 0 to 32768 [ 176.779048][ T3304] loop4: p1 p3 < > [ 176.799915][T10896] loop4: p1 p3 < > [ 176.997149][ T5552] udevd[5552]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 177.003183][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 177.049140][ T5552] udevd[5552]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 177.061219][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 177.372725][T10924] loop6: detected capacity change from 0 to 2048 [ 177.431308][T10924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.479377][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.613691][T10934] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2352'. [ 177.742493][T10941] loop4: detected capacity change from 0 to 1024 [ 177.774788][T10941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.844851][T10941] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2358'. [ 177.864129][ T2477] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 177.885436][ T7349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.961145][T10955] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 178.013678][T10955] netlink: 'syz.5.2360': attribute type 12 has an invalid length. [ 178.013952][T10955] netlink: 'syz.5.2360': attribute type 29 has an invalid length. [ 178.069582][T10955] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2360'. [ 178.324666][ T28] audit: type=1400 audit(1771431536.899:1231): avc: denied { write } for pid=10969 comm="syz.5.2365" path="socket:[29406]" dev="sockfs" ino=29406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.365520][T10972] loop1: detected capacity change from 0 to 1024 [ 178.396102][T10972] EXT4-fs: Ignoring removed orlov option [ 178.416652][T10972] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 178.449871][T10972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.514115][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.603562][T10959] loop6: detected capacity change from 0 to 32768 [ 178.645678][T10985] loop1: detected capacity change from 0 to 1024 [ 178.658984][T10985] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.681508][ T5552] loop6: p1 p3 < > [ 178.692909][T10959] loop6: p1 p3 < > [ 178.712599][T10985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8040e019, mo2=0000] [ 178.798457][T10985] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.2371: lblock 2 mapped to illegal pblock 2 (length 1) [ 178.870464][T10985] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.870646][T10985] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 178.880635][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 178.880656][ C1] EXT4-fs (loop1): initial error at time 1771431537: ext4_map_blocks:776: inode 3: block 2 [ 178.880717][ C1] EXT4-fs (loop1): last error at time 1771431537: ext4_map_blocks:776: inode 3: block 2 [ 178.948364][T10993] netlink: 'syz.6.2375': attribute type 12 has an invalid length. [ 178.958199][T10985] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.2371: lblock 0 mapped to illegal pblock 48 (length 1) [ 178.966569][T10993] netlink: 'syz.6.2375': attribute type 29 has an invalid length. [ 178.991152][T10985] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.991510][T10985] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 179.014594][T10993] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2375'. [ 179.031144][ T5552] udevd[5552]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 179.043658][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 179.054426][T10985] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.2371: Failed to acquire dquot type 0 [ 179.084899][T10985] loop1: lost filesystem error report for type 5 error -117 [ 179.103718][T10985] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 179.117796][T10985] loop1: lost filesystem error report for type 5 error -117 [ 179.120712][T10985] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.2371: mark_inode_dirty error [ 179.146081][T10985] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.146399][T10985] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 179.149030][T10997] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2377'. [ 179.156545][T10985] EXT4-fs (loop1): 1 orphan inode deleted [ 179.179378][ T12] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.206814][ T28] audit: type=1326 audit(1771431537.779:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.4.2378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f075b7fc629 code=0x0 [ 179.216502][T10985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.238769][T10997] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2377'. [ 179.258222][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 179.273013][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7039: comm kworker/u8:0: Failed to release dquot type 0 [ 179.328281][ T12] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm kworker/u8:0: lblock 2 mapped to illegal pblock 2 (length 1) [ 179.359038][ T12] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 179.367745][ T12] EXT4-fs error (device loop1): ext4_write_dquot:6983: comm kworker/u8:0: Failed to commit dquot type 0 [ 179.392875][ T12] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 179.406558][ T12] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.422653][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 179.431623][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7039: comm kworker/u8:0: Failed to release dquot type 0 [ 179.445269][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.454928][ T3312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 179.472015][ T3312] loop1: lost filesystem error report for type 5 error -117 [ 179.472214][ T3312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 179.493327][ T3312] loop1: lost filesystem error report for type 5 error -117 [ 179.493455][ T3312] EXT4-fs error (device loop1): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 179.518515][ T3312] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.533455][T11006] netlink: 'syz.6.2382': attribute type 12 has an invalid length. [ 179.554450][T11008] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.569022][T11008] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.647137][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.716580][T11022] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 179.717045][T11011] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2383'. [ 179.729047][T11022] SELinux: failed to load policy [ 179.754681][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 180.121660][T11044] lo speed is unknown, defaulting to 1000 [ 180.338878][T11053] set_capacity_and_notify: 1 callbacks suppressed [ 180.338899][T11053] loop6: detected capacity change from 0 to 128 [ 180.397035][T11053] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.420454][T11053] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.480991][T11056] loop4: detected capacity change from 0 to 2048 [ 180.535487][T11056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.535768][T11058] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2400'. [ 180.569496][ T4810] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.608509][ T7349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.875651][T11084] netlink: 'syz.5.2410': attribute type 12 has an invalid length. [ 180.959694][ T28] audit: type=1326 audit(1771431539.539:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.5.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 180.989026][ T28] audit: type=1326 audit(1771431539.539:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.5.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 181.023457][ T28] audit: type=1326 audit(1771431539.539:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.5.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 181.054447][ T28] audit: type=1326 audit(1771431539.539:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.5.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 181.085555][ T28] audit: type=1326 audit(1771431539.539:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11088 comm="syz.5.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 181.137413][ T28] audit: type=1400 audit(1771431539.709:1238): avc: denied { name_bind } for pid=11092 comm="syz.1.2414" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 181.685329][T11097] loop3: detected capacity change from 0 to 512 [ 181.707811][T11097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.728302][T11097] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.754471][ T28] audit: type=1400 audit(1771431540.319:1239): avc: denied { rename } for pid=11096 comm="syz.3.2416" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 184.057537][ T6001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.109673][T11108] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2420'. [ 184.362152][T11131] loop4: detected capacity change from 0 to 4096 [ 184.440927][T11131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.461375][T11142] lo speed is unknown, defaulting to 1000 [ 184.492528][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'. [ 184.595281][T11142] siw: device registration error -23 [ 184.605148][T11144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2434'. [ 184.889490][ T7349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.252671][T11185] loop4: detected capacity change from 0 to 1024 [ 185.266029][T11185] EXT4-fs: Ignoring removed orlov option [ 185.301087][T11185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.354978][T11191] syzkaller1: entered promiscuous mode [ 185.392644][T11191] syzkaller1: entered allmulticast mode [ 185.411675][ T7349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.021382][T11233] loop4: detected capacity change from 0 to 2048 [ 186.029318][T11233] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.060818][T11236] netlink: 'syz.5.2470': attribute type 9 has an invalid length. [ 186.069437][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2470'. [ 186.080005][T11236] netlink: 'syz.5.2470': attribute type 9 has an invalid length. [ 186.089353][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2470'. [ 186.100022][T11233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.116689][T11233] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2469: bg 0: block 234: padding at end of block bitmap is not set [ 186.159054][T11233] EXT4-fs (loop4): Remounting filesystem read-only [ 186.190255][ T7349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.243610][ T28] audit: type=1400 audit(1771431544.819:1240): avc: denied { override_creds } for pid=11243 comm="syz.4.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 186.539958][T11261] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 186.581252][T11261] bond2: (slave lo): Enslaving as an active interface with an up link [ 186.609057][T11261] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 186.704805][T11265] loop4: detected capacity change from 0 to 128 [ 186.860344][T11265] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.877722][T11265] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.032472][ T7349] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.207749][T11280] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 187.250279][T11280] bond2: (slave lo): Enslaving as an active interface with an up link [ 187.306489][T11280] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 188.016567][T11299] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2495'. [ 188.054509][T11302] loop5: detected capacity change from 0 to 1024 [ 188.079081][T11302] EXT4-fs: Ignoring removed orlov option [ 188.104653][T11302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.232369][ T3865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.628597][T11311] loop1: detected capacity change from 0 to 512 [ 188.726796][T11215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.764387][T11331] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2510'. [ 188.850899][T11311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.909875][T11311] ext4 filesystem being mounted at /583/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.951534][ T28] audit: type=1326 audit(1771431547.519:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 188.974456][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2515'. [ 189.012379][ T28] audit: type=1326 audit(1771431547.519:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 189.072759][ T28] audit: type=1326 audit(1771431547.519:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 189.109577][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.122279][ T28] audit: type=1326 audit(1771431547.519:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 189.147721][ T28] audit: type=1326 audit(1771431547.519:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 189.175036][ T28] audit: type=1326 audit(1771431547.519:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 189.204206][ T28] audit: type=1326 audit(1771431547.519:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 189.294293][ T28] audit: type=1326 audit(1771431547.519:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 189.334832][T11358] loop5: detected capacity change from 0 to 1024 [ 189.340234][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2522'. [ 189.379893][ T28] audit: type=1326 audit(1771431547.519:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 189.511903][T11358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.528343][T11358] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.556884][T11358] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2521: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.591787][T11358] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 189.615807][T11372] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.638549][T11358] EXT4-fs (loop5): This should not happen!! Data will be lost [ 189.638549][T11358] [ 189.663855][T11372] bond2: (slave lo): Enslaving as an active interface with an up link [ 189.673336][T11372] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 189.690108][ T3408] lo speed is unknown, defaulting to 1000 [ 189.696777][ T3408] syz2: Port: 1 Link ACTIVE [ 189.702328][T10448] lo speed is unknown, defaulting to 1000 [ 189.706819][T11375] loop1: detected capacity change from 0 to 512 [ 189.726471][T11376] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.2521: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.755265][T11376] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.2521: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.773205][T11376] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.2521: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.779555][T11375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.804078][T11376] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.2521: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.838359][T11375] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.879651][T11376] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.2521: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.895501][T11376] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.2521: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.915509][T11358] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.2521: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.957159][T11376] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.2521: lblock 0 mapped to illegal pblock 0 (length 1) [ 189.975216][T11375] EXT4-fs (loop1): shut down requested (1) [ 190.003859][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.031956][T11384] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.2521: lblock 0 mapped to illegal pblock 0 (length 1) [ 190.182520][ T3865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.335174][T11410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.382348][T11410] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.411122][T11410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.583796][T11422] loop6: detected capacity change from 0 to 1024 [ 190.611674][T11422] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 190.679812][T11422] System zones: 0-1, 3-36 [ 190.710948][T11430] bond2: option mode: unable to set because the bond device has slaves [ 190.714872][T11422] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2547: bad orphan inode 134217728 [ 190.742838][T11430] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 190.788289][T11422] loop6: lost filesystem error report for type 5 error -117 [ 190.789017][T11422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.823558][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2544'. [ 190.984022][T11403] loop3: detected capacity change from 0 to 512 [ 191.059769][T11438] loop1: detected capacity change from 0 to 1024 [ 191.082561][T11438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.176321][T11403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.192389][T11403] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.259270][ T6001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.467597][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.535700][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 191.535719][ T28] audit: type=1326 audit(1771431550.109:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedeb0c629 code=0x7ffc0000 [ 191.628286][ T28] audit: type=1326 audit(1771431550.149:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedeb0c629 code=0x7ffc0000 [ 191.708183][ T28] audit: type=1326 audit(1771431550.149:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faedeb0c629 code=0x7ffc0000 [ 191.756247][ T28] audit: type=1326 audit(1771431550.149:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedeb0c629 code=0x7ffc0000 [ 191.824430][ T28] audit: type=1326 audit(1771431550.149:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedeb0c629 code=0x7ffc0000 [ 191.884050][T11458] loop4: detected capacity change from 0 to 128 [ 191.888297][ T28] audit: type=1326 audit(1771431550.149:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faedeb0c629 code=0x7ffc0000 [ 191.958658][ T28] audit: type=1326 audit(1771431550.159:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedeb0c629 code=0x7ffc0000 [ 192.021414][T11460] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 192.031427][ T28] audit: type=1326 audit(1771431550.159:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedeb0c629 code=0x7ffc0000 [ 192.104626][ T28] audit: type=1326 audit(1771431550.159:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faedeb0c629 code=0x7ffc0000 [ 192.187216][ T28] audit: type=1326 audit(1771431550.159:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.6.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faedeb0c629 code=0x7ffc0000 [ 192.383919][T11477] bond2: option mode: unable to set because the bond device has slaves [ 192.460872][T11479] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 192.608527][T11438] syz.1.2551 (11438) used greatest stack depth: 6688 bytes left [ 192.644797][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.675549][T11486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.730118][T11486] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.771982][T11486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.865884][T11494] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.039627][ T30] bridge_slave_1: left allmulticast mode [ 193.057063][ T30] bridge_slave_1: left promiscuous mode [ 193.078576][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.116538][ T30] bridge_slave_0: left allmulticast mode [ 193.131735][ T30] bridge_slave_0: left promiscuous mode [ 193.148432][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.197843][T11519] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 193.216383][T11523] loop3: detected capacity change from 0 to 1024 [ 193.290958][T11523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.620629][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.634813][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.702913][ T30] bond0 (unregistering): Released all slaves [ 193.712178][ T30] bond1 (unregistering): Released all slaves [ 193.724601][ T30] bond2 (unregistering): (slave lo): Releasing backup interface [ 193.733564][ T30] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 193.746304][ T30] bond2 (unregistering): Released all slaves [ 193.756068][T11483] lo speed is unknown, defaulting to 1000 [ 193.770044][T11548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.824878][ T30] hsr_slave_0: left promiscuous mode [ 193.832071][ T30] hsr_slave_1: left promiscuous mode [ 193.879393][ T30] team0 (unregistering): Port device team_slave_1 removed [ 193.894335][ T30] team0 (unregistering): Port device team_slave_0 removed [ 194.046395][T11483] chnl_net:caif_netlink_parms(): no params data found [ 194.264079][T11523] syz.3.2583 (11523) used greatest stack depth: 5792 bytes left [ 194.265559][T11483] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.292052][T11483] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.302792][T11483] bridge_slave_0: entered allmulticast mode [ 194.305919][T11483] bridge_slave_0: entered promiscuous mode [ 194.318923][ T6001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.377972][T11582] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 194.398786][T11483] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.398823][T11483] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.399014][T11483] bridge_slave_1: entered allmulticast mode [ 194.399720][T11483] bridge_slave_1: entered promiscuous mode [ 194.421846][T11483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.423648][T11483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.456257][T11483] team0: Port device team_slave_0 added [ 194.457444][T11483] team0: Port device team_slave_1 added [ 194.546671][T11483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.546688][T11483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.546719][T11483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.547479][T11483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.547491][T11483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.547613][T11483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.617498][T11483] hsr_slave_0: entered promiscuous mode [ 194.628350][T11483] hsr_slave_1: entered promiscuous mode [ 194.628770][T11483] debugfs: 'hsr0' already exists in 'hsr' [ 194.628788][T11483] Cannot create hsr debugfs directory [ 194.849454][T11615] loop3: detected capacity change from 0 to 512 [ 194.889923][T11615] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.952030][T11615] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.059728][T11483] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.061353][T11725] loop6: detected capacity change from 0 to 1024 [ 196.093745][T11483] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.149227][T11725] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.161127][T11483] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.177610][T11483] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.199578][T11738] loop5: detected capacity change from 0 to 512 [ 196.210251][T11725] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.2615: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.261824][T11725] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 196.278414][T11725] EXT4-fs (loop6): This should not happen!! Data will be lost [ 196.278414][T11725] [ 196.292108][T11738] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.2620: corrupted inode contents [ 196.326352][T11483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.344143][T11483] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.358779][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.368394][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.368610][T11725] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.2615: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.394722][T11738] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 196.396435][T11725] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.2615: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.407688][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 196.407744][ C1] EXT4-fs (loop5): initial error at time 1771431554: ext4_do_update_inode:5569: inode 3 [ 196.407783][ C1] EXT4-fs (loop5): last error at time 1771431554: ext4_do_update_inode:5569: inode 3 [ 196.454622][T11738] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.2620: mark_inode_dirty error [ 196.474875][T11738] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 196.477346][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.500958][T11754] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.2615: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.501729][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.526132][T11738] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.2620: corrupted inode contents [ 196.544292][T11738] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 196.544703][T11725] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.2615: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.550819][T11738] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.2620: mark_inode_dirty error [ 196.588706][T11755] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.2615: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.595504][T11738] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 196.617383][T11738] __quota_error: 9 callbacks suppressed [ 196.617407][T11738] Quota error (device loop5): write_blk: dquota write failed [ 196.649502][T11751] loop3: detected capacity change from 0 to 8192 [ 196.659979][T11738] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 196.667143][T11725] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.2615: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.688726][T11738] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.2620: Failed to acquire dquot type 0 [ 196.705987][T11755] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.2615: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.778641][T11755] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.2615: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.798294][T11738] loop5: lost filesystem error report for type 5 error -117 [ 196.806904][T11738] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2620: corrupted inode contents [ 196.817645][T11755] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.2615: lblock 0 mapped to illegal pblock 0 (length 1) [ 196.850673][T11738] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.851057][T11738] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.2620: mark_inode_dirty error [ 196.904923][T11483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.944077][T11738] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 196.944406][T11738] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2620: corrupted inode contents [ 197.008478][T11738] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.008780][T11738] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2620: mark_inode_dirty error [ 197.064642][T11738] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.066364][T11738] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2620: corrupted inode contents [ 197.093557][T11738] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.103704][T11738] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 197.152887][T11738] loop5: lost filesystem error report for type 5 error -117 [ 197.153164][T11738] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2620: corrupted inode contents [ 197.221482][T11483] veth0_vlan: entered promiscuous mode [ 197.230387][T11738] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 197.230973][T11738] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.2620: mark_inode_dirty error [ 197.258696][T11483] veth1_vlan: entered promiscuous mode [ 197.268521][T11738] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 197.294915][T11738] loop5: lost filesystem error report for type 5 error -117 [ 197.295345][T11738] EXT4-fs (loop5): 1 truncate cleaned up [ 197.327585][T11738] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.343189][T11483] veth0_macvtap: entered promiscuous mode [ 197.359567][T11483] veth1_macvtap: entered promiscuous mode [ 197.391025][T11483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.395071][T11738] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #3: comm syz.5.2620: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 197.395071][T11738] [ 197.425148][T11483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.454150][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.492856][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.524062][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.550946][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.636299][T11807] loop5: detected capacity change from 0 to 512 [ 197.676379][T11807] EXT4-fs (loop5): 1 truncate cleaned up [ 197.799887][T11824] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2635: bg 0: block 465: padding at end of block bitmap is not set [ 197.832532][T11824] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 197.849461][T11824] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2635: invalid indirect mapped block 234881024 (level 0) [ 198.436368][T11864] loop3: detected capacity change from 0 to 1024 [ 198.476778][T11864] EXT4-fs mount: 7 callbacks suppressed [ 198.476800][T11864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.517004][T11864] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.570564][T11864] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.2632: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.615546][T11864] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 198.641999][T11864] EXT4-fs (loop3): This should not happen!! Data will be lost [ 198.641999][T11864] [ 198.655377][T11877] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2632: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.673748][T11877] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2632: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.693378][T11864] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2632: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.711753][T11864] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2632: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.733415][T11864] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2632: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.789097][T11864] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2632: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.829577][T11877] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2632: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.868513][T11864] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2632: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.899164][T11877] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2632: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.998405][ T3865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.055114][T11900] loop5: detected capacity change from 0 to 1024 [ 199.080454][T11900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 199.101374][T11900] System zones: 0-1, 3-36 [ 199.107516][T11900] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2630: bad orphan inode 134217728 [ 199.119794][T11900] loop5: lost filesystem error report for type 5 error -117 [ 199.120585][T11900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.337229][ T6001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.367835][ T6551] Process accounting resumed [ 199.955176][ T3865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.005424][T11774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.065959][T11941] netlink: 'syz.5.2644': attribute type 29 has an invalid length. [ 200.118529][T11946] netlink: 'syz.5.2644': attribute type 29 has an invalid length. [ 200.151531][T11941] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2644'. [ 200.179332][T11947] process '/newroot/375/file0' started with executable stack [ 200.286629][T11931] loop0: detected capacity change from 0 to 512 [ 200.446396][T11969] loop6: detected capacity change from 0 to 512 [ 200.510448][T11931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.557034][T11969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.578726][T11969] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.593007][T11931] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.642209][T11969] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.2659: corrupted inode contents [ 200.673927][T11969] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.2659: mark_inode_dirty error [ 200.686050][T11483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.687950][T11969] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.2659: corrupted inode contents [ 200.718663][T11969] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2659: mark_inode_dirty error [ 200.734677][T11989] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.2659: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 200.734677][T11989] [ 200.761477][ T28] audit: type=1400 audit(1771431559.309:1274): avc: denied { create } for pid=11968 comm="syz.6.2659" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 200.862312][ T28] audit: type=1400 audit(1771431559.419:1275): avc: denied { write } for pid=11968 comm="syz.6.2659" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 200.925496][ T28] audit: type=1400 audit(1771431559.419:1276): avc: denied { open } for pid=11968 comm="syz.6.2659" path="/494/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 200.997844][T12007] loop1: detected capacity change from 0 to 512 [ 201.011467][ T28] audit: type=1400 audit(1771431559.499:1277): avc: denied { unlink } for pid=11968 comm="syz.6.2659" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 201.079663][ T28] audit: type=1400 audit(1771431559.569:1278): avc: denied { write } for pid=12003 comm="syz.0.2673" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 201.110570][T12007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.884861][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.896655][ T4810] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.045434][T12024] loop1: detected capacity change from 0 to 1024 [ 202.076471][T12024] EXT4-fs: inline encryption not supported [ 202.106447][T12024] EXT4-fs: Ignoring removed bh option [ 202.162713][T12024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.223661][T12046] loop0: detected capacity change from 0 to 1024 [ 202.251104][T12046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.310633][T12046] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.349385][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.401271][T12046] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.2688: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.465448][T12046] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 202.480844][T12046] EXT4-fs (loop0): This should not happen!! Data will be lost [ 202.480844][T12046] [ 202.494959][T12059] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.2688: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.503334][T12060] bridge5: entered promiscuous mode [ 202.521546][T12046] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.2688: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.561197][T12059] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.2688: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.589308][T12046] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.2688: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.632984][T12065] loop1: detected capacity change from 0 to 512 [ 202.639705][T12046] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.2688: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.685641][T12065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.732841][T12046] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.2688: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.818873][T12071] lo speed is unknown, defaulting to 1000 [ 202.828712][T12059] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.2688: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.903383][T12046] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.2688: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.931024][T12059] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.2688: lblock 0 mapped to illegal pblock 0 (length 1) [ 203.103562][T11483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.149997][T12079] loop0: detected capacity change from 0 to 512 [ 203.260105][ T3408] Process accounting resumed [ 203.336219][T12087] loop0: detected capacity change from 0 to 512 [ 203.512703][T12087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.237431][T12072] bridge0: port 3(syz_tun) entered disabled state [ 204.246349][T11483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.272682][T12072] syz_tun (unregistering): left allmulticast mode [ 204.292351][T12072] syz_tun (unregistering): left promiscuous mode [ 204.327836][T12099] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2710'. [ 204.329019][T12072] bridge0: port 3(syz_tun) entered disabled state [ 204.359887][T12099] netlink: zone id is out of range [ 204.372983][T12099] netlink: zone id is out of range [ 204.387098][T12099] netlink: zone id is out of range [ 204.394672][T12099] netlink: zone id is out of range [ 204.401320][T12099] netlink: zone id is out of range [ 204.408594][T12099] netlink: zone id is out of range [ 204.422416][T12099] netlink: zone id is out of range [ 204.435301][T12099] netlink: zone id is out of range [ 204.456137][T12072] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.461208][T12099] netlink: zone id is out of range [ 204.483990][T12099] netlink: zone id is out of range [ 204.716225][ T57] bridge_slave_1: left allmulticast mode [ 204.728408][ T57] bridge_slave_1: left promiscuous mode [ 204.735239][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.758430][ T57] bridge_slave_0: left allmulticast mode [ 204.762338][T12119] loop0: detected capacity change from 0 to 8192 [ 204.765645][ T57] bridge_slave_0: left promiscuous mode [ 204.782099][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.052633][ T57] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 205.255771][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.288499][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.319056][ T57] bond0 (unregistering): Released all slaves [ 205.331536][ T57] bond1 (unregistering): Released all slaves [ 205.369239][ T57] bond2 (unregistering): (slave lo): Releasing backup interface [ 205.389009][ T57] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 205.406794][ T57] bond2 (unregistering): Released all slaves [ 205.516210][ T57] hsr_slave_0: left promiscuous mode [ 205.538770][ T57] hsr_slave_1: left promiscuous mode [ 205.569029][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.630224][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.657971][ T57] batman_adv: batadv0: Interface deactivated: vlan2 [ 205.681501][ T57] batman_adv: batadv0: Removing interface: vlan2 [ 205.823872][ T57] team0 (unregistering): Port device team_slave_1 removed [ 205.863536][ T57] team0 (unregistering): Port device team_slave_0 removed [ 205.974512][T12120] lo speed is unknown, defaulting to 1000 [ 206.130933][T12215] bond2: option mode: unable to set because the bond device has slaves [ 206.179352][ T6056] lo speed is unknown, defaulting to 1000 [ 206.189914][T12120] chnl_net:caif_netlink_parms(): no params data found [ 206.272330][T12223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.280773][T12223] IPv6: NLM_F_CREATE should be set when creating new route [ 206.329200][ T57] IPVS: stop unused estimator thread 0... [ 206.391476][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.417595][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.438541][T12245] 9p: Bad value for 'wfdno' [ 206.451300][T12120] bridge_slave_0: entered allmulticast mode [ 206.488842][T12120] bridge_slave_0: entered promiscuous mode [ 206.554920][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.574277][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.584032][T12120] bridge_slave_1: entered allmulticast mode [ 206.593058][T12120] bridge_slave_1: entered promiscuous mode [ 206.625848][T12120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.650948][T12120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.693493][T12120] team0: Port device team_slave_0 added [ 206.715253][T12120] team0: Port device team_slave_1 added [ 206.745749][T12120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.757188][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.794048][T12120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.812744][T12120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.827849][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.868510][T12120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.890772][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2754'. [ 206.901535][T12268] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2754'. [ 206.937606][T12120] hsr_slave_0: entered promiscuous mode [ 206.944668][T12120] hsr_slave_1: entered promiscuous mode [ 206.951718][T12120] debugfs: 'hsr0' already exists in 'hsr' [ 206.958890][T12120] Cannot create hsr debugfs directory [ 207.295875][T12120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.335433][T12120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.354060][ T28] audit: type=1400 audit(1771431821.928:1279): avc: denied { read } for pid=12289 comm="syz.0.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 207.357222][T12120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.508187][T12120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.647514][T12120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.692826][T12120] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.726005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.735570][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.757519][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.766935][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.026952][T12120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.169030][T12375] lo speed is unknown, defaulting to 1000 [ 208.331441][T12120] veth0_vlan: entered promiscuous mode [ 208.389383][T12379] lo speed is unknown, defaulting to 1000 [ 208.400554][T12120] veth1_vlan: entered promiscuous mode [ 208.509675][T12120] veth0_macvtap: entered promiscuous mode [ 208.542428][T12120] veth1_macvtap: entered promiscuous mode [ 208.590260][T12120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.654787][T12120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.674161][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.702221][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.715974][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.733511][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.746867][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.831239][T12417] batman_adv: batadv0: Adding interface: dummy0 [ 208.840112][T12417] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.905721][T12417] batman_adv: batadv0: Interface activated: dummy0 [ 209.791321][T12482] 9p: Bad value for 'rfdno' [ 209.985490][ T28] audit: type=1400 audit(1771431824.558:1280): avc: denied { remount } for pid=12498 comm="syz.5.2783" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 210.185029][T12523] loop2: detected capacity change from 0 to 512 [ 210.210490][T12523] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.260264][T12523] EXT4-fs (loop2): orphan cleanup on readonly fs [ 210.290613][T12523] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4224: comm syz.2.2790: Allocating blocks 41-42 which overlap fs metadata [ 210.321962][T12523] loop2: lost filesystem error report for type 5 error -117 [ 210.322193][T12523] Quota error (device loop2): write_blk: dquota write failed [ 210.330938][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 210.330967][ C0] EXT4-fs (loop2): initial error at time 1771431824: ext4_mb_mark_diskspace_used:4224 [ 210.330991][ C0] EXT4-fs (loop2): last error at time 1771431824: ext4_mb_mark_diskspace_used:4224 [ 210.384022][T12541] veth0_vlan: entered allmulticast mode [ 210.391106][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2796'. [ 210.419754][T12541] veth0_vlan (unregistering): left allmulticast mode [ 210.434123][T12523] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 210.446797][T12523] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 210.459657][T12523] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.2790: Failed to acquire dquot type 1 [ 210.474813][T12523] loop2: lost filesystem error report for type 5 error -117 [ 210.475144][T12523] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 210.510533][T12523] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.2790: corrupted inode contents [ 210.526272][T12523] fserror_report: 1 callbacks suppressed [ 210.526292][T12523] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 210.534849][T12523] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #12: comm syz.2.2790: mark_inode_dirty error [ 210.569426][T12523] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 210.569699][T12523] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.2790: corrupted inode contents [ 210.596014][T12523] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 210.596217][T12523] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.2790: mark_inode_dirty error [ 210.622431][T12523] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 210.622659][T12523] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.2790: corrupted inode contents [ 210.653387][T12523] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 210.653613][T12523] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 210.685772][T12523] loop2: lost filesystem error report for type 5 error -117 [ 210.687772][T12523] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.2790: corrupted inode contents [ 210.708537][ T4918] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.715562][T12523] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 210.716748][T12523] EXT4-fs error (device loop2): ext4_truncate:4587: inode #12: comm syz.2.2790: mark_inode_dirty error [ 210.739755][T12523] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 210.741773][T12523] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 210.764330][T12523] loop2: lost filesystem error report for type 5 error -117 [ 210.765102][T12523] EXT4-fs (loop2): 1 truncate cleaned up [ 210.781513][T12523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.803203][ T28] audit: type=1400 audit(1771431825.378:1281): avc: denied { remount } for pid=12521 comm="syz.2.2790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 210.826437][T12523] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 210.850705][T12120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.485529][T12613] sctp: [Deprecated]: syz.3.2808 (pid 12613) Use of int in max_burst socket option deprecated. [ 211.485529][T12613] Use struct sctp_assoc_value instead [ 211.796818][T12651] loop0: detected capacity change from 0 to 512 [ 211.839304][ T28] audit: type=1400 audit(1771431826.408:1282): avc: denied { remount } for pid=12649 comm="syz.0.2815" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 211.968720][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 212.037736][T12669] lo speed is unknown, defaulting to 1000 [ 213.128879][T12710] net_ratelimit: 97 callbacks suppressed [ 213.128893][T12710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.376116][T12733] loop2: detected capacity change from 0 to 256 [ 213.402735][T12733] FAT-fs (loop2): bogus number of FAT sectors [ 213.410046][T12733] FAT-fs (loop2): Can't find a valid FAT filesystem [ 213.557576][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2845'. [ 213.978383][ T4918] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.978730][ T3503] Bluetooth: hci0: command 0x1003 tx timeout [ 214.103217][T12771] loop0: detected capacity change from 0 to 256 [ 214.134920][ T28] audit: type=1400 audit(1771431828.708:1283): avc: denied { setopt } for pid=12770 comm="syz.0.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 214.213670][T12775] loop0: detected capacity change from 0 to 512 [ 214.225363][ T28] audit: type=1326 audit(1771431828.798:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.3.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 214.258170][ T28] audit: type=1326 audit(1771431828.798:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.3.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 214.303433][ T28] audit: type=1326 audit(1771431828.798:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.3.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 214.332307][ T28] audit: type=1326 audit(1771431828.798:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.3.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 214.377292][T12775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.392253][ T28] audit: type=1326 audit(1771431828.798:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.3.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 214.427743][T12775] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.508419][ T28] audit: type=1326 audit(1771431828.798:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.3.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 214.603898][T12787] loop2: detected capacity change from 0 to 512 [ 214.628975][T12787] EXT4-fs: Ignoring removed bh option [ 214.638430][ T28] audit: type=1326 audit(1771431828.798:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.3.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 214.683785][T12787] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 214.711186][ T28] audit: type=1326 audit(1771431828.798:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.3.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 214.738832][T12787] EXT4-fs (loop2): 1 truncate cleaned up [ 214.745484][T12787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.801075][T12120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.818230][ T28] audit: type=1400 audit(1771431829.388:1292): avc: denied { view } for pid=12791 comm="syz.5.2862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 214.866836][T12794] netlink: 'syz.3.2864': attribute type 1 has an invalid length. [ 214.886709][T12794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.937605][T11483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.066454][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2872'. [ 215.080352][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'. [ 215.094112][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2872'. [ 215.103823][ T30] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.106209][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'. [ 215.114086][ T30] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.134083][ T30] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.149503][ T30] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.432143][T12835] loop0: detected capacity change from 0 to 512 [ 215.463811][T12835] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2881: couldn't read orphan inode 26 (err -116) [ 215.479776][T12835] loop0: lost filesystem error report for type 5 error -116 [ 215.480588][T12835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.502543][T12835] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.576238][T11483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.252323][T12883] bond4: entered allmulticast mode [ 216.297652][T12883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.306550][T12886] xt_TCPMSS: Only works on TCP SYN packets [ 216.351563][T12891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2904'. [ 216.435685][T12893] lo speed is unknown, defaulting to 1000 [ 217.605889][T12945] lo speed is unknown, defaulting to 1000 [ 217.838967][T12953] lo speed is unknown, defaulting to 1000 [ 217.971958][T12963] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 218.316607][T12981] netlink: 'syz.0.2939': attribute type 1 has an invalid length. [ 218.369133][T12981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.561051][T13003] loop0: detected capacity change from 0 to 1024 [ 218.588797][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 218.600126][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'. [ 218.612462][T13003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.629300][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 218.638569][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.647712][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.678248][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'. [ 218.688283][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.704256][T11483] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.738591][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.189704][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2957'. [ 219.199452][T13035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.199650][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2957'. [ 219.347489][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 219.347509][ T28] audit: type=1326 audit(1771431833.918:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.5.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf1455da19 code=0x7fc00000 [ 219.471798][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.799478][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2971'. [ 219.908963][ T28] audit: type=1400 audit(1771432090.491:1299): avc: denied { firmware_load } for pid=13086 comm="syz.6.2974" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 221.345508][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 221.381245][T13148] loop0: detected capacity change from 0 to 512 [ 221.397359][T13148] FAT-fs (loop0): Directory bread(block 199916) failed [ 221.407569][T13148] FAT-fs (loop0): Directory bread(block 199917) failed [ 221.425746][T13148] FAT-fs (loop0): Directory bread(block 199918) failed [ 221.437140][T13148] FAT-fs (loop0): Directory bread(block 199919) failed [ 221.454237][T13148] FAT-fs (loop0): Directory bread(block 199920) failed [ 221.470466][T13148] FAT-fs (loop0): Directory bread(block 199921) failed [ 221.483720][T13148] FAT-fs (loop0): Directory bread(block 199922) failed [ 221.496690][T13148] FAT-fs (loop0): Directory bread(block 199923) failed [ 221.501751][ T3503] Bluetooth: hci0: command 0x1003 tx timeout [ 221.507000][ T4918] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.562390][T13155] netlink: 'syz.3.2996': attribute type 21 has an invalid length. [ 221.584929][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 221.620133][T13155] netlink: 'syz.3.2996': attribute type 21 has an invalid length. [ 221.643378][T13148] FAT-fs (loop0): FAT read failed (blocknr 128) [ 221.655205][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 221.964542][T13178] loop2: detected capacity change from 0 to 1024 [ 222.100879][T13178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.219637][T12120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.290345][T13192] syz_tun: entered promiscuous mode [ 223.680038][ T28] audit: type=1326 audit(1771432094.261:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13268 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 223.745411][ T28] audit: type=1326 audit(1771432094.261:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13268 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 223.812543][ T28] audit: type=1326 audit(1771432094.261:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13268 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 223.897283][ T28] audit: type=1326 audit(1771432094.261:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13268 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 223.980347][ T28] audit: type=1326 audit(1771432094.261:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13268 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 224.006429][ T28] audit: type=1326 audit(1771432094.261:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13268 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 224.065480][ T28] audit: type=1326 audit(1771432094.261:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13268 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 224.113503][ T28] audit: type=1326 audit(1771432094.261:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13268 comm="syz.3.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a253ac629 code=0x7ffc0000 [ 224.182669][T13323] atomic_op ffff888136635928 conn xmit_atomic 0000000000000000 [ 224.374645][T13352] netlink: 'syz.6.3066': attribute type 21 has an invalid length. [ 224.398343][T13352] __nla_validate_parse: 3 callbacks suppressed [ 224.398365][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3066'. [ 224.416700][T13352] netlink: 'syz.6.3066': attribute type 21 has an invalid length. [ 224.444244][T13346] loop0: detected capacity change from 0 to 8192 [ 224.468215][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3066'. [ 224.480657][T13346] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 224.519697][T13346] FAT-fs (loop0): Filesystem has been set read-only [ 224.610794][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 224.610813][ T28] audit: type=1400 audit(1771432095.191:1324): avc: denied { execute } for pid=13372 comm="syz.3.3074" path=2F6D656D66643AFF202864656C6574656429 dev="hugetlbfs" ino=36194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 224.971559][T13385] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3078'. [ 225.798998][ T28] audit: type=1326 audit(1771432096.381:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 225.844882][ T28] audit: type=1326 audit(1771432096.381:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 225.869957][ T28] audit: type=1326 audit(1771432096.401:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 225.908790][ T28] audit: type=1326 audit(1771432096.401:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 225.933954][ T28] audit: type=1326 audit(1771432096.401:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 225.997704][ T28] audit: type=1326 audit(1771432096.401:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 226.023319][ T28] audit: type=1326 audit(1771432096.401:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 226.048702][ T28] audit: type=1326 audit(1771432096.401:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 226.086456][ T28] audit: type=1326 audit(1771432096.401:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf145bc629 code=0x7ffc0000 [ 226.492601][T13486] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3123'. [ 227.451465][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 227.883260][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3149'. [ 227.894763][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3149'. [ 227.998942][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3154'. [ 228.020840][T13558] ip6gre1: entered promiscuous mode [ 228.057688][T13558] ip6gre1: entered allmulticast mode [ 228.070295][T13560] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.156104][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'. [ 228.191630][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3156'. [ 228.221361][T13564] netlink: 'syz.2.3156': attribute type 6 has an invalid length. [ 228.244695][T13564] netlink: 'syz.2.3156': attribute type 6 has an invalid length. [ 228.538463][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.552428][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.578259][ T6056] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.718375][ T6056] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.768320][ T6056] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.410013][T13616] __nla_validate_parse: 2 callbacks suppressed [ 229.410035][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'. [ 229.458152][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3178'. [ 229.467464][T13616] netlink: 'syz.3.3178': attribute type 5 has an invalid length. [ 229.520569][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'. [ 229.533977][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3178'. [ 229.558185][T13616] netlink: 'syz.3.3178': attribute type 5 has an invalid length. [ 229.845419][T13653] netlink: 'syz.3.3193': attribute type 1 has an invalid length. [ 229.867095][T13653] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.912892][T13653] bond5: (slave geneve2): making interface the new active one [ 229.923340][T13653] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 229.932712][ T2477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.976702][ T2477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.006305][ T2477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.049149][ T2477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.059307][T13661] lo speed is unknown, defaulting to 1000 [ 230.090302][T13667] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3197'. [ 230.099803][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3197'. [ 230.109710][T13663] loop2: detected capacity change from 0 to 2048 [ 230.158679][T13669] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3199'. [ 230.187514][T13663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.293076][T12120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.348261][T13691] netlink: 'syz.3.3209': attribute type 29 has an invalid length. [ 230.371140][T13691] netlink: 'syz.3.3209': attribute type 29 has an invalid length. [ 230.663960][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3217'. [ 232.615349][ T8438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.641348][ T8438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.730470][ T8438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.744443][ T8438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.811828][ T8438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.824960][ T8438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.895264][ T8438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.915541][ T8438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.943989][T13860] lo speed is unknown, defaulting to 1000 [ 233.018213][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.037091][ T8438] bridge_slave_1: left allmulticast mode [ 233.044205][ T8438] bridge_slave_1: left promiscuous mode [ 233.052424][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.061511][ T8438] bridge_slave_0: left allmulticast mode [ 233.081003][ T8438] bridge_slave_0: left promiscuous mode [ 233.091266][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.202301][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 233.202521][ T28] audit: type=1400 audit(1771432103.781:1355): avc: denied { write } for pid=13905 comm="syz.2.3297" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 233.251392][ T8438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.270925][ T8438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.289895][ T8438] bond0 (unregistering): Released all slaves [ 233.299032][ T8438] bond1 (unregistering): Released all slaves [ 233.315632][T13892] lo speed is unknown, defaulting to 1000 [ 233.364454][ T8438] IPVS: stopping master sync thread 12963 ... [ 233.402468][ T8438] hsr_slave_0: left promiscuous mode [ 233.409551][ T8438] hsr_slave_1: left promiscuous mode [ 233.416758][ T8438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.425225][ T8438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.433851][ T8438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.444830][ T8438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.458665][ T8438] veth1_macvtap: left promiscuous mode [ 233.465047][ T8438] veth0_macvtap: left promiscuous mode [ 233.470801][ T8438] veth1_vlan: left promiscuous mode [ 233.476141][ T8438] veth0_vlan: left promiscuous mode [ 233.587869][ T8438] team0 (unregistering): Port device team_slave_1 removed [ 233.602696][ T8438] team0 (unregistering): Port device team_slave_0 removed [ 233.662257][T13860] chnl_net:caif_netlink_parms(): no params data found [ 233.810813][T13860] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.822090][T13860] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.831475][T13860] bridge_slave_0: entered allmulticast mode [ 233.839909][T13860] bridge_slave_0: entered promiscuous mode [ 233.849985][T13860] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.858534][T13860] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.868416][T13860] bridge_slave_1: entered allmulticast mode [ 233.877265][T13860] bridge_slave_1: entered promiscuous mode [ 233.907096][T13860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.962553][T13860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.993525][T13860] team0: Port device team_slave_0 added [ 234.009918][T13860] team0: Port device team_slave_1 added [ 234.039471][T13860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.047091][T13860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.074624][T13860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.086818][T13860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.094592][T13860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.124995][T13860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.181325][T13860] hsr_slave_0: entered promiscuous mode [ 234.194165][T13860] hsr_slave_1: entered promiscuous mode [ 234.201255][T13860] debugfs: 'hsr0' already exists in 'hsr' [ 234.207216][T13860] Cannot create hsr debugfs directory [ 234.298669][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'. [ 234.345877][T13988] netlink: 'syz.6.3318': attribute type 20 has an invalid length. [ 234.356741][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3318'. [ 234.381245][T13988] netlink: 'syz.6.3318': attribute type 20 has an invalid length. [ 234.566017][T14008] __nla_validate_parse: 1 callbacks suppressed [ 234.566043][T14008] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3324'. [ 234.613148][T14008] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3324'. [ 234.676483][T14024] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3327'. [ 234.694218][T13860] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 234.736527][T13860] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 234.746527][T13860] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 234.767436][T13860] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 234.844138][T13860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.870409][T13860] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.891990][ T254] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.899877][ T254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.931617][ T254] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.939337][ T254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.086672][T13860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.273155][T13860] veth0_vlan: entered promiscuous mode [ 235.291977][T13860] veth1_vlan: entered promiscuous mode [ 235.324093][T13860] veth0_macvtap: entered promiscuous mode [ 235.340563][T13860] veth1_macvtap: entered promiscuous mode [ 235.353104][T13860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.377249][T13860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.414730][ T8438] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.436205][ T8438] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.485234][ T8438] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.496297][ T8438] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.712497][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3342'. [ 235.756583][T14133] loop8: detected capacity change from 0 to 8192 [ 235.859209][T14133] loop8: detected capacity change from 8192 to 0 [ 235.866075][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 235.933407][T14133] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 236.266101][ T28] audit: type=1400 audit(1771432106.841:1356): avc: denied { getopt } for pid=14178 comm="syz.5.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.378054][T14187] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.3351'. [ 239.155652][T14388] netlink: 'syz.8.3391': attribute type 1 has an invalid length. [ 239.302653][T14397] loop2: detected capacity change from 0 to 128 [ 239.769131][T14419] tipc: Enabled bearer , priority 10 [ 239.798936][T14423] loop8: detected capacity change from 0 to 128 [ 239.821548][T14423] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.834009][T14423] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.863585][T13860] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.894978][T14433] lo speed is unknown, defaulting to 1000 [ 239.987836][T14444] bond2: option mode: unable to set because the bond device has slaves [ 240.029673][T14444] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 240.208505][T14457] bridge_slave_0: invalid flags given to default FDB implementation [ 240.665949][T14478] lo speed is unknown, defaulting to 1000 [ 240.848849][T14491] loop2: detected capacity change from 0 to 164 [ 240.903512][ T3405] tipc: Node number set to 2886997057 [ 240.949593][T14493] loop8: detected capacity change from 0 to 1024 [ 241.006042][T14493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.059737][T14493] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4224: comm syz.8.3432: Allocating blocks 385-513 which overlap fs metadata [ 241.090243][T14493] EXT4-fs (loop8): pa ffff8881076f29a0: logic 16, phys. 129, len 24 [ 241.099051][T14493] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 8 [ 241.219890][T13860] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.267618][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3439'. [ 241.279230][T14515] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3439'. [ 241.364014][T14519] lo speed is unknown, defaulting to 1000 [ 241.781633][T14540] loop2: detected capacity change from 0 to 1024 [ 241.850595][T14540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.908866][T14540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.117591][T12120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.538165][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.618404][ T28] audit: type=1400 audit(1771432113.201:1357): avc: denied { getopt } for pid=14574 comm="syz.5.3465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.064942][T14607] veth1_to_bond: entered allmulticast mode [ 243.083828][T14607] veth1_to_bond: left allmulticast mode [ 243.264110][ T28] audit: type=1400 audit(1771432113.841:1358): avc: denied { read } for pid=14616 comm="syz.8.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 243.395609][T14621] loop8: detected capacity change from 0 to 512 [ 243.416922][T14621] EXT4-fs (loop8): orphan cleanup on readonly fs [ 243.438187][T14621] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 243.466373][T14621] EXT4-fs (loop8): 1 truncate cleaned up [ 243.490588][T14621] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.545361][T14621] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3484'. [ 243.558955][T14624] pimreg: entered allmulticast mode [ 243.591651][T14624] pimreg: left allmulticast mode [ 243.598158][T14621] netlink: 'syz.8.3484': attribute type 7 has an invalid length. [ 243.607153][T14621] netlink: 'syz.8.3484': attribute type 8 has an invalid length. [ 243.622757][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3484'. [ 243.684118][T13860] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.714903][T14626] lo speed is unknown, defaulting to 1000 [ 243.796821][T14632] loop2: detected capacity change from 0 to 128 [ 243.850985][T14632] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 243.942904][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 244.489435][T14649] loop2: detected capacity change from 0 to 512 [ 244.503702][ T28] audit: type=1400 audit(1771432115.081:1359): avc: denied { read } for pid=14651 comm="syz.6.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 244.558309][T14649] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3496: inode has both inline data and extents flags [ 244.669444][T14649] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 244.669578][T14649] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3496: couldn't read orphan inode 15 (err -117) [ 244.679012][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 244.679036][ C1] EXT4-fs (loop2): initial error at time 1771432115: ext4_orphan_get:1391: inode 15 [ 244.679074][ C1] EXT4-fs (loop2): last error at time 1771432115: ext4_orphan_get:1391: inode 15 [ 244.776159][T14649] loop2: lost filesystem error report for type 5 error -117 [ 244.776832][T14649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.971801][T12120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.201690][T14671] loop2: detected capacity change from 0 to 128 [ 245.210665][T14671] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.224083][T14671] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.254950][T12120] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.300447][T14675] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2563 sclass=netlink_xfrm_socket pid=14675 comm=syz.2.3505 [ 245.338343][T14675] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2571 sclass=netlink_xfrm_socket pid=14675 comm=syz.2.3505 [ 245.378220][T14675] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2584 sclass=netlink_xfrm_socket pid=14675 comm=syz.2.3505 [ 245.408331][T14675] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=14675 comm=syz.2.3505 [ 245.439454][T14675] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2568 sclass=netlink_xfrm_socket pid=14675 comm=syz.2.3505 [ 245.458343][ T28] audit: type=1400 audit(1771432116.031:1360): avc: denied { accept } for pid=14682 comm="syz.8.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.578676][T14699] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3510'. [ 246.063050][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3522'. [ 246.086947][T14730] netlink: 'syz.8.3522': attribute type 20 has an invalid length. [ 246.110421][T14730] netlink: 'syz.8.3522': attribute type 21 has an invalid length. [ 246.742984][T14783] loop8: detected capacity change from 0 to 512 [ 246.764033][T14783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.818267][T14783] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.938158][T14783] support for cryptoloop has been removed. Use dm-crypt instead. [ 246.994752][T13860] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.040838][T14798] loop8: detected capacity change from 0 to 128 [ 247.082183][ T28] audit: type=1400 audit(1771432117.661:1361): avc: denied { create } for pid=14795 comm="syz.6.3550" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 247.194178][ T28] audit: type=1400 audit(1771432117.731:1362): avc: denied { unlink } for pid=4810 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 247.666438][ T28] audit: type=1400 audit(1771432118.241:1363): avc: denied { shutdown } for pid=14830 comm="syz.2.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 247.908466][T14846] netlink: 'syz.5.3572': attribute type 2 has an invalid length. [ 247.919838][ T28] audit: type=1400 audit(1771432118.501:1364): avc: denied { connect } for pid=14845 comm="syz.5.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 247.995194][T14848] lo speed is unknown, defaulting to 1000 [ 248.756471][T14903] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 248.776231][T14903] bond1: entered promiscuous mode [ 248.782188][T14903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.786092][ T28] audit: type=1400 audit(1771432119.361:1365): avc: denied { read } for pid=14901 comm="syz.8.3599" path="socket:[40384]" dev="sockfs" ino=40384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.842809][T14903] bond1: (slave bridge1): making interface the new active one [ 248.870121][T14903] bridge1: entered promiscuous mode [ 248.876662][T14903] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 249.534531][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3627'. [ 249.628601][T15008] netlink: 6 bytes leftover after parsing attributes in process `syz.8.3630'. [ 249.660056][T15008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.748291][T15002] lo speed is unknown, defaulting to 1000 [ 249.971149][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3637'. [ 250.152599][T15059] pimreg: entered allmulticast mode [ 250.186422][T15059] pimreg: left allmulticast mode [ 250.229348][T15061] lo speed is unknown, defaulting to 1000 [ 250.912806][ T2477] Bluetooth: hci0: Frame reassembly failed (-84) [ 251.355307][ T6553] IPVS: starting estimator thread 0... [ 251.458286][T15142] IPVS: using max 2112 ests per chain, 105600 per kthread [ 252.791666][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3699'. [ 252.833121][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3699'. [ 252.857345][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3699'. [ 252.867121][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3699'. [ 252.887372][ T28] audit: type=1400 audit(1771432123.461:1366): avc: denied { read write } for pid=12120 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.938800][ T4918] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 252.939534][ T3503] Bluetooth: hci0: command 0x1003 tx timeout [ 252.992432][T15208] loop8: detected capacity change from 0 to 512 [ 253.003544][T15210] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3701'. [ 253.015464][ T28] audit: type=1400 audit(1771432123.461:1367): avc: denied { open } for pid=12120 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.050240][T15208] EXT4-fs: Ignoring removed bh option [ 253.087293][T15208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.100387][ T28] audit: type=1400 audit(1771432123.461:1368): avc: denied { ioctl } for pid=12120 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.113630][T15208] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.152057][ T28] audit: type=1400 audit(1771432123.511:1369): avc: denied { create } for pid=15203 comm="syz.2.3700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 253.196192][ T28] audit: type=1400 audit(1771432123.511:1370): avc: denied { getopt } for pid=15203 comm="syz.2.3700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 253.218629][ T28] audit: type=1400 audit(1771432123.571:1371): avc: denied { open } for pid=15209 comm="syz.6.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 253.238736][ T28] audit: type=1400 audit(1771432123.571:1372): avc: denied { perfmon } for pid=15209 comm="syz.6.3701" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 253.262702][ T28] audit: type=1400 audit(1771432123.571:1373): avc: denied { kernel } for pid=15209 comm="syz.6.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 253.283832][ T28] audit: type=1400 audit(1771432123.571:1374): avc: denied { tracepoint } for pid=15209 comm="syz.6.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 253.313655][ T28] audit: type=1400 audit(1771432123.581:1375): avc: denied { create } for pid=15209 comm="syz.6.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.368616][T13860] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.940115][T15259] tls_set_device_offload_rx: netdev not found [ 254.296294][T15278] loop2: detected capacity change from 0 to 1024 [ 254.314597][T15278] EXT4-fs: Ignoring removed orlov option [ 254.327913][T15278] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 254.372386][T15278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.391818][ T3405] IPVS: starting estimator thread 0... [ 254.495470][T12120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.498307][T15286] IPVS: using max 2112 ests per chain, 105600 per kthread [ 256.224245][T15359] loop2: detected capacity change from 0 to 512 [ 256.307172][T15359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.343469][T15359] ext4 filesystem being mounted at /163/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.421584][T15377] 9p: Unknown uid 00000000004294967295 [ 256.431719][T12120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.485288][T15382] loop2: detected capacity change from 0 to 512 [ 257.555627][T15382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.583578][T15382] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.717743][T15401] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3778'. [ 257.795282][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3783'. [ 257.798476][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3784'. [ 257.815844][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3784'. [ 257.900160][T12120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.975921][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 257.975973][ T28] audit: type=1400 audit(1771432128.544:1461): avc: denied { create } for pid=15427 comm="syz.6.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.030801][T15434] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3793'. [ 258.039538][ T28] audit: type=1400 audit(1771432128.544:1462): avc: denied { connect } for pid=15427 comm="syz.6.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.081316][ T28] audit: type=1400 audit(1771432128.544:1463): avc: denied { read } for pid=15427 comm="syz.6.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.110464][ T28] audit: type=1400 audit(1771432128.604:1464): avc: denied { execmem } for pid=15433 comm="syz.3.3793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 258.142660][ T28] audit: type=1400 audit(1771432128.614:1465): avc: denied { write } for pid=15427 comm="syz.6.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.186163][T15438] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3795'. [ 258.236811][ T28] audit: type=1400 audit(1771432128.614:1466): avc: denied { setopt } for pid=15427 comm="syz.6.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.338380][T15451] loop8: detected capacity change from 0 to 512 [ 258.374835][ T28] audit: type=1400 audit(1771432128.944:1467): avc: denied { listen } for pid=15452 comm="syz.6.3802" lport=33539 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.382220][T15451] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.424164][T15451] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.476418][ T28] audit: type=1400 audit(1771432128.984:1468): avc: denied { accept } for pid=15452 comm="syz.6.3802" lport=33539 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.569053][ T28] audit: type=1400 audit(1771432128.984:1469): avc: denied { getopt } for pid=15452 comm="syz.6.3802" lport=33539 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 258.620385][ T28] audit: type=1400 audit(1771432129.174:1470): avc: denied { cpu } for pid=15468 comm="syz.5.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 258.622708][T13860] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.807132][T15488] loop8: detected capacity change from 0 to 128 [ 258.814495][T15488] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 258.831719][T15488] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.913003][ T2477] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 259.114503][T15517] loop8: detected capacity change from 0 to 8192 [ 259.122721][T15517] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.134993][T15517] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 259.144649][T15517] FAT-fs (loop8): Filesystem has been set read-only [ 259.152033][T15517] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 259.161466][T15517] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 259.170976][T15517] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 259.180717][T15517] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 259.190613][T15517] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 259.205827][T15517] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 259.217623][T15517] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 259.226978][T15517] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 259.239830][T15517] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.458331][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.674591][T15568] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 261.565333][T15595] ------------[ cut here ]------------ [ 261.572584][T15595] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0) [ 261.601742][T15595] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.6.3859/15595 [ 261.614188][T15595] Modules linked in: [ 261.618602][T15595] CPU: 0 UID: 0 PID: 15595 Comm: syz.6.3859 Tainted: G W syzkaller #0 PREEMPT(full) [ 261.631619][T15595] Tainted: [W]=WARN [ 261.637085][T15595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.649484][T15595] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 261.656300][T15595] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 261.677156][T15595] RSP: 0018:ffffc90005177368 EFLAGS: 00010246 [ 261.684516][T15595] RAX: ffff888130b35cf8 RBX: 0000000000000000 RCX: fffffffefffff630 [ 261.693516][T15595] RDX: ffffffff86816a73 RSI: ffffffff867eb05c RDI: ffffffff871d3f90 [ 261.702095][T15595] RBP: ffff888119558990 R08: ffffffff00000000 R09: fffffffefffff630 [ 261.710819][T15595] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888119558950 [ 261.719424][T15595] R13: fffffffe00000030 R14: ffff88811955899c R15: ffff888119558988 [ 261.727855][T15595] FS: 00007faedd5676c0(0000) GS:ffff8882ae8dd000(0000) knlGS:0000000000000000 [ 261.737636][T15595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.749122][T15595] CR2: 00007fbf15368060 CR3: 0000000110ed6000 CR4: 00000000003506f0 [ 261.757925][T15595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.768114][T15595] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 261.777535][T15595] Call Trace: [ 261.781734][T15595] [ 261.785446][T15595] reg_set_min_max+0x21c/0x260 [ 261.791653][T15595] check_cond_jmp_op+0x13b0/0x1ab0 [ 261.798433][T15595] do_check+0x4a9b/0x9860 [ 261.803665][T15595] ? irqentry_exit+0x91/0x520 [ 261.809526][T15595] do_check_common+0xd0b/0x1630 [ 261.815953][T15595] bpf_check+0x2f6d/0xcc10 [ 261.821925][T15595] ? __vmap_pages_range_noflush+0xc7c/0xcc0 [ 261.828554][T15595] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 261.835093][T15595] ? irqentry_exit+0x91/0x520 [ 261.840595][T15595] ? pcpu_block_update+0x377/0x3b0 [ 261.847155][T15595] ? _find_next_zero_bit+0x64/0xa0 [ 261.853668][T15595] ? pcpu_block_refresh_hint+0x157/0x170 [ 261.859954][T15595] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 261.866523][T15595] ? irqentry_exit+0x91/0x520 [ 261.872064][T15595] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 261.878853][T15595] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 261.885389][T15595] ? irqentry_exit+0x91/0x520 [ 261.890946][T15595] ? pcpu_next_fit_region+0x1b1/0x380 [ 261.896765][T15595] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 261.903996][T15595] ? css_rstat_updated+0xbb/0x280 [ 261.910175][T15595] ? irqentry_exit+0x91/0x520 [ 261.915672][T15595] ? __rcu_read_unlock+0x4e/0x70 [ 261.921094][T15595] ? avc_has_perm_noaudit+0xab/0x130 [ 261.926923][T15595] ? avc_has_perm+0x101/0x190 [ 261.933156][T15595] ? selinux_bpf_prog_load+0x197/0x1c0 [ 261.940795][T15595] ? security_bpf_prog_load+0x9e/0x140 [ 261.946936][T15595] bpf_prog_load+0xf76/0x1140 [ 261.952483][T15595] ? security_bpf+0x2b/0x90 [ 261.957684][T15595] __sys_bpf+0x505/0x7e0 [ 261.963885][T15595] __x64_sys_bpf+0x41/0x50 [ 261.969524][T15595] x64_sys_call+0x10cb/0x3020 [ 261.974735][T15595] do_syscall_64+0x12c/0x370 [ 261.980162][T15595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.986915][T15595] RIP: 0033:0x7faedeb0c629 [ 261.992315][T15595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.013485][T15595] RSP: 002b:00007faedd567028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.022982][T15595] RAX: ffffffffffffffda RBX: 00007faeded85fa0 RCX: 00007faedeb0c629 [ 262.031738][T15595] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 262.040334][T15595] RBP: 00007faedeba2b39 R08: 0000000000000000 R09: 0000000000000000 [ 262.050176][T15595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.059206][T15595] R13: 00007faeded86038 R14: 00007faeded85fa0 R15: 00007ffd9e09b298 [ 262.068459][T15595] [ 262.071914][T15595] ---[ end trace 0000000000000000 ]--- [ 262.131913][T15607] lo speed is unknown, defaulting to 1000 [ 262.197588][T15611] lo speed is unknown, defaulting to 1000 [ 262.291694][T15618] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15618 comm=syz.2.3868 [ 262.323744][T15607] lo speed is unknown, defaulting to 1000 [ 262.462876][T15637] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 262.509849][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3878'. [ 262.541997][T15642] chnl_net:caif_netlink_parms(): no params data found [ 262.955502][T15676] loop8: detected capacity change from 0 to 512 [ 262.981028][T15676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.016917][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 263.016935][ T28] audit: type=1400 audit(1771432133.584:1498): avc: denied { connect } for pid=15682 comm="syz.6.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 263.028955][T15676] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.066367][ T28] audit: type=1400 audit(1771432133.634:1499): avc: denied { read } for pid=15682 comm="syz.6.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 263.097235][T15687] A link change request failed with some changes committed already. Interface sit3 may have been left with an inconsistent configuration, please check. [ 263.183813][ T28] audit: type=1400 audit(1771432133.744:1500): avc: denied { bind } for pid=15692 comm="syz.2.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.238641][ T28] audit: type=1400 audit(1771432133.744:1501): avc: denied { node_bind } for pid=15692 comm="syz.2.3900" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 263.283547][T15701] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 263.313227][T15701] bond2 (unregistering): Released all slaves [ 263.332051][ T28] audit: type=1400 audit(1771432133.744:1502): avc: denied { name_bind } for pid=15692 comm="syz.2.3900" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 263.392021][ T28] audit: type=1400 audit(1771432133.904:1503): avc: denied { setopt } for pid=15710 comm="syz.5.3908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.486353][ T28] audit: type=1400 audit(1771432134.054:1504): avc: denied { create } for pid=15721 comm="syz.2.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 263.522606][ T28] audit: type=1400 audit(1771432134.094:1505): avc: denied { setopt } for pid=15721 comm="syz.2.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 263.547393][T13860] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.574581][ T28] audit: type=1400 audit(1771432134.144:1506): avc: denied { connect } for pid=15724 comm="syz.5.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 263.595770][ T28] audit: type=1400 audit(1771432134.144:1507): avc: denied { write } for pid=15724 comm="syz.5.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 263.777612][T15736] loop8: detected capacity change from 0 to 4096 [ 263.802757][T15736] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.862505][T13860] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.201113][T15758] loop8: detected capacity change from 0 to 512 [ 264.242097][T15758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.266357][T15758] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.505316][T13860] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.610679][T15784] futex_wake_op: syz.8.3934 tries to shift op by 32; fix this program [ 264.636844][T15788] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.648267][T15788] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 264.660377][T15788] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.740215][T15788] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.771775][T15788] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 264.795564][T15788] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.883662][T15788] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.909188][T15788] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 264.913527][T15814] SELinux: policydb magic number 0x20 does not match expected magic number 0xf97cff8c [ 264.929835][T15788] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.940975][T15814] SELinux: failed to load policy [ 264.992845][T15788] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.020886][T15788] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 265.031876][T15788] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.086012][ T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.102351][ T12] netdevsim netdevsim6 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 265.119736][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.152758][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.166211][ T12] netdevsim netdevsim6 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 265.206968][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.233366][ T8440] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.253135][ T8440] netdevsim netdevsim6 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 265.278540][ T8440] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.308193][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.317324][ T12] netdevsim netdevsim6 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 265.350354][T15841] loop2: detected capacity change from 0 to 512 [ 265.357233][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.375699][T15841] EXT4-fs (loop2): 1 truncate cleaned up [ 265.405448][T15841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.538387][T15850] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3959: bg 0: block 465: padding at end of block bitmap is not set [ 265.571043][T15850] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 265.639416][T12120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.845338][T15880] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15880 comm=syz.3.3976 [ 266.140500][T15913] ================================================================== [ 266.148768][T15913] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 266.160369][T15913] [ 266.162953][T15913] write to 0xffff88813472bbb0 of 8 bytes by task 15912 on cpu 1: [ 266.171498][T15913] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 266.177629][T15913] page_pool_alloc_pages+0xd0/0x130 [ 266.182966][T15913] bpf_test_run_xdp_live+0x66c/0x1360 [ 266.188569][T15913] bpf_prog_test_run_xdp+0x57b/0xa10 [ 266.193918][T15913] bpf_prog_test_run+0x204/0x340 [ 266.199119][T15913] __sys_bpf+0x52e/0x7e0 [ 266.203406][T15913] __x64_sys_bpf+0x41/0x50 [ 266.207934][T15913] x64_sys_call+0x10cb/0x3020 [ 266.212851][T15913] do_syscall_64+0x12c/0x370 [ 266.217494][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.223525][T15913] [ 266.225966][T15913] read to 0xffff88813472bbb0 of 8 bytes by task 15913 on cpu 0: [ 266.233743][T15913] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 266.240316][T15913] napi_pp_put_page+0xe9/0x200 [ 266.245428][T15913] skb_release_data+0x624/0x670 [ 266.250419][T15913] __kfree_skb+0x44/0x150 [ 266.255053][T15913] sk_skb_reason_drop+0xbd/0x290 [ 266.260204][T15913] skb_vlan_untag+0x52a/0x690 [ 266.265331][T15913] __netif_receive_skb_core+0x24a/0x1980 [ 266.271134][T15913] __netif_receive_skb_list_core+0x113/0x500 [ 266.277279][T15913] netif_receive_skb_list_internal+0x47d/0x5f0 [ 266.283617][T15913] gro_receive_skb+0x374/0x590 [ 266.288442][T15913] cpu_map_kthread_run+0x1159/0x1680 [ 266.293790][T15913] kthread+0x22a/0x280 [ 266.297940][T15913] ret_from_fork+0x150/0x360 [ 266.302676][T15913] ret_from_fork_asm+0x1a/0x30 [ 266.307786][T15913] [ 266.310351][T15913] value changed: 0xffffea0004d1d800 -> 0x0000000000000000 [ 266.317846][T15913] [ 266.320196][T15913] Reported by Kernel Concurrency Sanitizer on: [ 266.326485][T15913] CPU: 0 UID: 0 PID: 15913 Comm: cpumap/0/map:31 Tainted: G W syzkaller #0 PREEMPT(full) [ 266.338002][T15913] Tainted: [W]=WARN [ 266.341926][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.352115][T15913] ==================================================================