last executing test programs: 2m10.942729998s ago: executing program 0 (id=2158): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x4f) 2m10.942284508s ago: executing program 0 (id=2159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000980)=[{{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010100}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)="59f1c6", 0x3}], 0x1, &(0x7f0000000740)=ANY=[], 0x240}}], 0x1, 0x5d2dd0c54751f8e3) 2m10.894166711s ago: executing program 0 (id=2160): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) socket(0x2b, 0x80801, 0x1) close(0x3) 2m10.833177454s ago: executing program 0 (id=2162): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb18000000000000, 0x54a623}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8990, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\xe0\xff\xff\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x38, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x6, 0x1, 0x6}]}, {0x4, 0x300}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x48080) 1m55.601479695s ago: executing program 32 (id=2166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x38, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x6, 0x1, 0x6}]}, {0x4, 0x300}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x48080) 1m41.3381678s ago: executing program 5 (id=2814): r0 = semget(0x3, 0x4, 0x222) semop(r0, &(0x7f00000010c0)=[{0x2, 0x8cfb, 0x1800}], 0x1) r1 = semget$private(0x0, 0x2, 0x200) semop(r1, &(0x7f0000001140)=[{0x0, 0x0, 0x1000}], 0x1) semop(0x0, &(0x7f00000023c0)=[{0x2, 0x100, 0x1800}], 0x1) 1m41.233885174s ago: executing program 5 (id=2820): connect$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f00000000c0)={[0x1]}) 1m41.149230689s ago: executing program 5 (id=2821): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m41.148732409s ago: executing program 5 (id=2823): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2002, 0x0) 1m41.131615319s ago: executing program 5 (id=2824): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000640)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000840)="079eb5b2c7fd4992", 0x8}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000d40)="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", 0xc39}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r1, 0xb}, 0x8) 1m40.853342573s ago: executing program 5 (id=2829): r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m40.843250803s ago: executing program 33 (id=2829): r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m30.694115325s ago: executing program 6 (id=3051): pipe2$9p(&(0x7f0000000240), 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m29.808285228s ago: executing program 6 (id=3061): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xa001, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x28030825) keyctl$describe(0x6, r0, 0x0, 0xfffffffffffffebc) 1m29.743256022s ago: executing program 6 (id=3065): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.510561073s ago: executing program 6 (id=3086): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 1m29.468889455s ago: executing program 6 (id=3078): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m29.233285016s ago: executing program 6 (id=3081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m29.220532147s ago: executing program 34 (id=3081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.228323562s ago: executing program 4 (id=5010): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0x2, r1, 0x0}]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.591069923s ago: executing program 4 (id=5019): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9) 3.551442865s ago: executing program 4 (id=5021): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x23, 0x5, 0x0) r1 = syz_io_uring_setup(0x12fb, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x4, 0x3ce}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.412969582s ago: executing program 2 (id=5024): syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000348cf7a40024004dbd28f8000024000000080000000000000900000002000000000d0000000000000700000000000000000d00000000002e305f2e2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) llistxattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 3.273675599s ago: executing program 2 (id=5025): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xeffffffb, 0x1, @perf_bp={0x0, 0xc}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) 3.165041444s ago: executing program 2 (id=5026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x304}, "b9c5ec18837993a6", "94dd7adf162b79d63db3cda2b4b7c3f2779d7b777112824651d28000", "6ebc780b", "3f23b1802d00cd92"}, 0x38) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000", @ANYBLOB="ac1e00010a01010000000000dc0000009bb2"], 0x170}, 0x4080) 3.025619851s ago: executing program 2 (id=5030): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1905406, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 3.025307791s ago: executing program 4 (id=5031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000480)={@val={0xa, 0x9100}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x2, 0x6, "ab5d68", 0x9, 0x2f, 0xff, @local, @private1, [@dstopts={0x16, 0x0, '\x00', [@ra={0x5, 0x2, 0x390}]}]}}}}}}}}, 0x7a) 2.949420185s ago: executing program 2 (id=5032): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @private=0xa010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) write(r1, &(0x7f0000000180)="ad2a", 0x2) 2.788265142s ago: executing program 3 (id=5036): timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040814}, 0x40000) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 2.691966537s ago: executing program 1 (id=5038): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/net\x00') 2.619763581s ago: executing program 4 (id=5039): preadv(0xffffffffffffffff, &(0x7f0000000d00), 0x0, 0x2, 0x200) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2047, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t<0&&\t') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x2, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) 2.565221434s ago: executing program 2 (id=5041): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) getgroups(0x8, &(0x7f0000001080)) 2.564512654s ago: executing program 3 (id=5042): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) 2.512167246s ago: executing program 35 (id=5041): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) getgroups(0x8, &(0x7f0000001080)) 2.506038467s ago: executing program 7 (id=5044): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.339459645s ago: executing program 4 (id=5045): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x1fffffffffffffe6, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) 2.339001525s ago: executing program 7 (id=5054): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 2.338758715s ago: executing program 3 (id=5046): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "000000000600000000ff00"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000140)=[{r1, 0x212e}], 0x1, 0x9e) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x200, 0x0, 0x3, 0xfffffffe, 0xb, "1917134163410a57e12a33c39e4988bdfdf51f"}) 1.82308781s ago: executing program 7 (id=5047): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r2, 0x1}, 0x20) 1.748193874s ago: executing program 7 (id=5048): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)="327a66c8", 0x4}], 0x1, 0x2e25, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r1, 0x3, 0xf00, 0x10000) 1.640738289s ago: executing program 7 (id=5049): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x84, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 1.555329154s ago: executing program 1 (id=5050): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 1.479956547s ago: executing program 3 (id=5051): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x9) 1.240312769s ago: executing program 3 (id=5052): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newchain={0xab0, 0x64, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0x8, 0xd}, {0x6, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x7b}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0xa44, 0x2, [@TCA_ROUTE4_ACT={0xa40, 0x6, [@m_tunnel_key={0x120, 0xc, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0xb9, 0x6, "50f4b63ad05d5f63422f4c8874d9c594e4065cf2b003356a81dfd3a1a5571f869a5c560a81d895ece5d265a3af796658eb02aca4b4d42e520a2cc70947602b7f364d391bc203661430c09bdc9cc627293f712cb1ab1a2a4aec75229edf895606a8d1c1202dfdccda3f2697f91196f18e62d80afb152051ae614844b70b8c1fcf486080febf1b689ca7a70284fa90aa2232a23abc7a13be1969371ff56016628515f32526f3d654f13fd93115ddf2c08863412e112d"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xd4, 0x19, 0x0, 0x0, {{0xc}, {0x4}, {0xa5, 0x6, "0a28c600d4688db05d2a2bec41066dcc0fcd230b12cc089656b4b43c8e8c7a0a2f702e66096050d8c0dba8b73d3046c4841ec606b85d75dbf5cf67f65b113c0cc58011018381b3dc59fb2a170661eb5e74fbd37956cb93cba1a98731ee2e9744108bd93a96244e0ef53c879214a876b89570d3ed70c4987e93baadd0b6df12c96de7a1af0841e6518ebbd82743878365ffaf6bef74e57464b509d9167c4e19a5c7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x848, 0x12, 0x0, 0x0, {{0xb}, {0x81c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x0, 0x10000, 0x5, 0x4, 0x2, 0x5, 0x0, 0x2, 0x8001, 0x5, 0x5, 0x3, 0x3, 0xdc1f, 0x6, 0x7, 0x9, 0xc2c8, 0x0, 0x1, 0x2, 0x200, 0x1, 0x3, 0x0, 0xac2, 0xfffffffd, 0x3, 0x8, 0x8, 0x1ff, 0x1000, 0x2, 0x7, 0x0, 0x4, 0x6, 0x4, 0xa, 0x100, 0xffff8001, 0x9, 0x7, 0x5, 0x7, 0xfc000000, 0xfffffff7, 0x4, 0x5, 0x4, 0x5f, 0xf419, 0x1ff, 0x0, 0x80000000, 0x2, 0x80, 0x5, 0x9, 0x6, 0x2, 0xa, 0xd, 0x1281, 0x8, 0x2, 0x21, 0x6a, 0x7, 0x4, 0x80000001, 0x8cf, 0x7, 0x8001, 0xb, 0xde07, 0x3, 0x6, 0x7f, 0x5, 0x10001, 0x6, 0xfffffff8, 0x2, 0x7, 0x5716380e, 0x5, 0x0, 0xa5, 0x3ff, 0x8, 0x7, 0x7f, 0x5, 0xd6, 0x2489, 0x5, 0x8, 0x9, 0x6, 0x200, 0xa, 0x80000000, 0x80000000, 0x8, 0x0, 0x3, 0xd8, 0x1, 0x6, 0x4, 0xfff, 0x7, 0x239, 0x3, 0x7ff, 0x2, 0x7, 0x5, 0x4, 0x2, 0x0, 0xffffff81, 0x3, 0x4a5, 0x0, 0xfffffffe, 0x1a, 0x3, 0xdd, 0x0, 0x7f0000, 0x5, 0x8, 0x5, 0x5, 0x9, 0x5, 0xf9, 0x80, 0x5, 0x3, 0x4, 0xfffffff8, 0x5, 0x80, 0x9, 0x4, 0xffff, 0x443, 0x3, 0x9, 0x9, 0xeae, 0x8, 0x6, 0x805c, 0x9, 0x81, 0x6, 0x3, 0x2, 0x3, 0x6dc6, 0xf5ca, 0x4, 0xd8, 0x6, 0x1000, 0xcb, 0x31a, 0x5, 0x40, 0x3, 0xffff0001, 0x6bf0, 0x1, 0x6, 0x7fffffff, 0xa8, 0x101, 0x75a, 0x5, 0xfffff800, 0x7, 0x28f663ec, 0x2, 0x21, 0xdc, 0x10000, 0x4, 0x7, 0xd0c, 0x6, 0x1, 0xdd61, 0x5, 0x2, 0xf3, 0x2800000, 0xd, 0xfffffffc, 0xfe, 0xdda, 0x80000001, 0x5, 0x2, 0x8, 0x6, 0x2, 0x0, 0x9, 0x82d, 0xca8, 0x7, 0xfff, 0x70f, 0x4, 0xd, 0xffffffa2, 0xa, 0x5, 0x8000, 0x1, 0x8, 0x6b1, 0x16, 0xbc24, 0xfffffffa, 0x3, 0x7fffffff, 0x3, 0xd2cde104, 0x6, 0x80, 0x5, 0x5, 0x0, 0x1c, 0x1ff, 0x7, 0x9, 0x3ff, 0x6ec, 0x6, 0xa5, 0x1ff, 0x3, 0xffffffff, 0xd, 0x4, 0xc20, 0x40, 0xffffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2c16, 0x9, 0xf, 0x9, 0xfffff959, 0x0, 0x2, 0xd, 0xf, 0x8, 0x4d, 0x3, 0x6, 0x5, 0xa, 0x0, 0x6a, 0x7ff, 0x3, 0x7, 0x411, 0x86, 0x8, 0x1, 0x8001, 0x1, 0x1, 0x7, 0x3, 0xffffffff, 0x200, 0x9, 0x5, 0x4, 0x0, 0x7, 0x0, 0xbd, 0xffff, 0x4, 0x2, 0x6, 0x101, 0x1, 0x3, 0x1a49, 0x3, 0x6, 0x8, 0x2, 0x9, 0xff, 0x3, 0x4, 0x3, 0x6, 0xad, 0x9, 0x8, 0x5000000, 0x4, 0x715, 0x9, 0x5, 0x7, 0x9, 0x9, 0x3, 0x4, 0x2, 0xaf7a, 0x5a7c, 0x3, 0x4, 0x2, 0x1, 0x1, 0x4, 0x7ff, 0xb76d16c2, 0xfffffff7, 0x8, 0x101, 0x4, 0x40c4, 0xf, 0xfffffffe, 0x0, 0x9, 0x2, 0xbf4, 0xd8b, 0x8, 0xa83, 0x6, 0x8b8, 0x2, 0xfffffff8, 0x31, 0x1, 0x9, 0xf49, 0x42, 0x8001, 0x7f4, 0x2, 0x7, 0xfffffff4, 0x6, 0x8, 0x2, 0x3b5, 0x6, 0x6, 0x2cee, 0x1, 0x3a, 0x0, 0xfffff000, 0x2, 0x2, 0x7f, 0x8, 0x8000, 0x7, 0x5, 0x8, 0x2, 0x996, 0x127, 0x2, 0x9, 0xffff, 0x7, 0x7, 0x5, 0x7fff, 0x6, 0x8, 0x0, 0x8, 0xe, 0x7, 0xffff, 0x2ea8, 0x4, 0x6, 0x0, 0x6, 0x4, 0x959d, 0x80, 0x10, 0x1, 0x3, 0x17, 0x3, 0x800, 0x1, 0x6, 0x1, 0x1, 0x6, 0x7, 0x6, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x3, 0x5, 0x2, 0xc383, 0xd3, 0x9, 0x96b, 0xdcb, 0x800, 0x3b, 0x1, 0x2, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x3ff, 0x6, 0xffffc746, 0x7, 0xc, 0x101, 0x80000001, 0xfffffff7, 0x3, 0x110df8c0, 0xa8fc, 0xc, 0x1, 0x3, 0x7, 0x7, 0xfffffff7, 0x100, 0x101, 0x8, 0x3, 0x80, 0x8001, 0x0, 0x6, 0x32, 0x3, 0x0, 0x101, 0x6, 0xf28, 0xc0000000, 0x9, 0x9, 0x9, 0x0, 0x8, 0x2, 0x0, 0x7, 0x0, 0x6, 0x8, 0x40e9, 0x0, 0x800, 0x7, 0x4, 0x3, 0x8001, 0x6, 0x1f, 0x38000, 0xfffffff7, 0x4, 0x7, 0x8, 0x46c20cd3, 0x6, 0x4, 0x9, 0x1, 0xfffffffa, 0x8000, 0x400, 0x591d, 0x8]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xab0}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.125372454s ago: executing program 1 (id=5053): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0xbd3a7481b18b840b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x3, @perf_bp={&(0x7f0000000200), 0xf}, 0x200, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) 945.428624ms ago: executing program 1 (id=5055): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r0, 0x0, 0x5, 0x8) write$binfmt_elf64(r2, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 781.534532ms ago: executing program 7 (id=5056): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 710.907285ms ago: executing program 3 (id=5057): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 687.078616ms ago: executing program 36 (id=5057): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 40.796088ms ago: executing program 1 (id=5059): syz_open_procfs(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x40) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f314000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 0s ago: executing program 1 (id=5060): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 00000000001 [ 177.390198][T12235] loop2: detected capacity change from 0 to 1024 [ 177.400312][T12235] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 177.412551][T12235] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 177.421152][T12235] EXT4-fs (loop2): orphan cleanup on readonly fs [ 177.428630][T12235] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.3392: Invalid inode table block 0 in block_group 0 [ 177.445139][T12235] fserror_report: 1 callbacks suppressed [ 177.445197][T12235] loop2: lost filesystem error report for type 5 error -117 [ 177.453730][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 177.467672][ C0] EXT4-fs (loop2): initial error at time 1774165213: __ext4_get_inode_loc:4782 [ 177.478510][ C0] EXT4-fs (loop2): last error at time 1774165213: __ext4_get_inode_loc:4782 [ 177.500353][T12235] EXT4-fs (loop2): Remounting filesystem read-only [ 177.512469][T12235] Quota error (device loop2): write_blk: dquota write failed [ 177.549764][T12235] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 177.560249][T12235] EXT4-fs (loop2): 1 truncate cleaned up [ 177.574394][T12235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.636543][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.681028][T12253] loop7: detected capacity change from 0 to 512 [ 177.753800][ T28] audit: type=1326 audit(1774165214.025:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 177.830066][T12269] syzkaller1: entered promiscuous mode [ 177.849432][ T28] audit: type=1326 audit(1774165214.035:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 177.880182][T12269] syzkaller1: entered allmulticast mode [ 177.896421][ T28] audit: type=1326 audit(1774165214.025:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 177.951285][ T28] audit: type=1326 audit(1774165214.045:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 178.022986][T12284] loop7: detected capacity change from 0 to 128 [ 178.060596][T12287] loop2: detected capacity change from 0 to 128 [ 178.067118][ T28] audit: type=1326 audit(1774165214.045:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 178.124548][T12287] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 178.133945][ T28] audit: type=1326 audit(1774165214.065:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz.1.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 178.206550][T12287] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 178.214967][T12287] FAT-fs (loop2): Filesystem has been set read-only [ 178.222178][T12287] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 178.361982][T12304] loop2: detected capacity change from 0 to 512 [ 178.373530][T12304] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 178.418830][T12304] EXT4-fs (loop2): 1 truncate cleaned up [ 178.427464][T12304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.451175][T12310] loop3: detected capacity change from 0 to 1024 [ 178.513002][T12310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 178.571293][T12306] loop7: detected capacity change from 0 to 8192 [ 178.578116][T12310] ext4 filesystem being mounted at /688/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.651057][T12310] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.3424: lblock 0 mapped to illegal pblock 0 (length 1) [ 178.718853][T12310] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 178.735257][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.767177][T12310] EXT4-fs (loop3): This should not happen!! Data will be lost [ 178.767177][T12310] [ 178.866563][T12324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.895124][T12324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.918910][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 179.056620][T12346] loop2: detected capacity change from 0 to 1024 [ 179.081798][T12346] EXT4-fs: Ignoring removed orlov option [ 179.123970][T12346] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 179.188143][T12346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.324223][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.631913][T12417] batadv_slave_1: entered promiscuous mode [ 179.657173][T12416] batadv_slave_1: left promiscuous mode [ 179.733988][T12423] loop3: detected capacity change from 0 to 512 [ 179.757751][T12423] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3453: bg 0: block 5: invalid block bitmap [ 179.800000][T12423] loop3: lost filesystem error report for type 5 error -117 [ 179.800299][T12423] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 179.807692][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 179.807737][ C0] EXT4-fs (loop3): initial error at time 1774165216: ext4_validate_block_bitmap:432 [ 179.807758][ C0] EXT4-fs (loop3): last error at time 1774165216: ext4_validate_block_bitmap:432 [ 179.862724][T12423] loop3: lost filesystem error report for type 5 error -117 [ 179.874443][T12423] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3453: invalid indirect mapped block 3 (level 2) [ 179.895662][T12423] fserror_report: 27 callbacks suppressed [ 179.895741][T12423] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.902126][T12423] EXT4-fs (loop3): 1 orphan inode deleted [ 179.957915][T12423] EXT4-fs (loop3): 1 truncate cleaned up [ 179.964864][T12423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.039053][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.346079][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3472'. [ 180.469910][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.498677][T12490] loop7: detected capacity change from 0 to 512 [ 180.541079][T12490] ------------[ cut here ]------------ [ 180.546727][T12490] EA inode 11 i_nlink=2 [ 180.546754][T12490] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.7.3477/12490 [ 180.561872][T12490] Modules linked in: [ 180.565846][T12490] CPU: 0 UID: 0 PID: 12490 Comm: syz.7.3477 Not tainted syzkaller #0 PREEMPT(full) [ 180.575291][T12490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.585592][T12490] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 180.592274][T12490] Code: 74 46 99 ff 4c 8d 2d 9d ad 5d 05 49 8d 7e 40 e8 14 e0 b5 ff 49 8b 6e 40 4c 89 e7 e8 48 db b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f 97 dd 03 66 66 66 66 66 66 2e [ 180.612054][T12490] RSP: 0018:ffffc900017ef778 EFLAGS: 00010246 [ 180.618246][T12490] RAX: ffff88810ac75e88 RBX: ffff88811a3a1788 RCX: ffffffff81c01878 [ 180.626322][T12490] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc600 [ 180.634451][T12490] RBP: 000000000000000b R08: 000188811a3a173b R09: 0000000000000000 [ 180.642528][T12490] R10: ffffc900017ef6a8 R11: 0001c900017ef6a8 R12: ffff88811a3a1738 [ 180.650648][T12490] R13: ffffffff871dc600 R14: ffff88811a3a16f0 R15: 0000000000000001 [ 180.658690][T12490] FS: 00007fcb76c3f6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 180.667714][T12490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.674360][T12490] CR2: 00007fa24f3b1a40 CR3: 000000011b9e0000 CR4: 00000000003506f0 [ 180.682373][T12490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.690455][T12490] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 180.698530][T12490] Call Trace: [ 180.701843][T12490] [ 180.704889][T12490] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 180.710869][T12490] ? errseq_check+0x2c/0x50 [ 180.715514][T12490] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 180.721335][T12490] ? ext4_truncate+0x92b/0xb00 [ 180.726295][T12490] ext4_evict_inode+0xa1f/0xd60 [ 180.731332][T12490] ? __pfx_ext4_evict_inode+0x10/0x10 [ 180.736917][T12490] evict+0x2af/0x510 [ 180.741013][T12490] ? __dquot_initialize+0x146/0x7c0 [ 180.746841][T12490] iput+0x41a/0x580 [ 180.750769][T12490] ext4_process_orphan+0x1a9/0x1c0 [ 180.756046][T12490] ext4_orphan_cleanup+0x6a8/0xa00 [ 180.761303][T12490] ext4_fill_super+0x3408/0x37c0 [ 180.766311][T12490] ? set_blocksize+0x14c/0x270 [ 180.771114][T12490] ? setup_bdev_super+0x30e/0x370 [ 180.776377][T12490] ? __pfx_ext4_fill_super+0x10/0x10 [ 180.781714][T12490] get_tree_bdev_flags+0x291/0x300 [ 180.786970][T12490] ? __pfx_ext4_fill_super+0x10/0x10 [ 180.792344][T12490] get_tree_bdev+0x1f/0x30 [ 180.796859][T12490] ext4_get_tree+0x1c/0x30 [ 180.801377][T12490] vfs_get_tree+0x57/0x1d0 [ 180.806000][T12490] do_new_mount+0x288/0x8d0 [ 180.810559][T12490] path_mount+0x4d0/0xbc0 [ 180.814979][T12490] __se_sys_mount+0x28c/0x2e0 [ 180.819705][T12490] __x64_sys_mount+0x67/0x80 [ 180.824471][T12490] x64_sys_call+0x2d61/0x3020 [ 180.829256][T12490] do_syscall_64+0x12c/0x370 [ 180.833942][T12490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.839940][T12490] RIP: 0033:0x7fcb781eda0a [ 180.844522][T12490] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.864296][T12490] RSP: 002b:00007fcb76c3ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.872948][T12490] RAX: ffffffffffffffda RBX: 00007fcb76c3eee0 RCX: 00007fcb781eda0a [ 180.881115][T12490] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fcb76c3eea0 [ 180.889257][T12490] RBP: 00002000000009c0 R08: 00007fcb76c3eee0 R09: 0000000000800718 [ 180.897308][T12490] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 180.905425][T12490] R13: 00007fcb76c3eea0 R14: 000000000000048d R15: 0000200000000200 [ 180.913989][T12490] [ 180.917101][T12490] ---[ end trace 0000000000000000 ]--- [ 180.926020][T12498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.946048][T12500] loop3: detected capacity change from 0 to 512 [ 180.978857][T12504] netlink: 'syz.4.3483': attribute type 39 has an invalid length. [ 180.990088][T12490] EXT4-fs (loop7): 1 orphan inode deleted [ 181.024920][T12490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.036162][T12500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.050019][T12500] ext4 filesystem being mounted at /698/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.091202][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.135258][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.147145][T12518] loop2: detected capacity change from 0 to 512 [ 181.157357][T12518] EXT4-fs: Ignoring removed oldalloc option [ 181.173514][T12518] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.224128][T12518] EXT4-fs (loop2): 1 truncate cleaned up [ 181.234143][T12518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.527456][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.587834][T12542] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 181.610805][T12542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.653397][T12542] bond1: (slave geneve2): making interface the new active one [ 181.662886][T12542] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 181.736986][T12557] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3504'. [ 181.824041][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3510'. [ 181.903096][T12580] netlink: 'syz.3.3515': attribute type 1 has an invalid length. [ 181.923601][T12580] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.943172][T12580] bond3: (slave geneve2): making interface the new active one [ 181.952247][T12580] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 182.091931][T12601] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.103612][T12604] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3526'. [ 182.130968][T12601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.170420][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.214949][ T3557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.215698][T12610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.319863][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.323513][T12617] netlink: 'syz.2.3530': attribute type 1 has an invalid length. [ 182.396537][T12617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.414611][T12623] bond2: (slave geneve2): making interface the new active one [ 182.423457][T12623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.432149][T12623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.440379][T12623] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 182.500602][ T1916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.520472][ T3557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.533970][ T3535] Bluetooth: hci0: command 0x1003 tx timeout [ 182.541570][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.581013][T12628] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.604699][T12630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.624754][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 182.624771][ T28] audit: type=1400 audit(1774165218.905:1959): avc: denied { create } for pid=12627 comm="syz.7.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.651476][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.670099][ T28] audit: type=1400 audit(1774165218.905:1960): avc: denied { getopt } for pid=12627 comm="syz.7.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.720142][T12635] netlink: 'syz.4.3538': attribute type 5 has an invalid length. [ 182.783904][ T3557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.806201][T12641] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3537'. [ 182.854482][ T3557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.895938][T12647] TCP: TCP_TX_DELAY enabled [ 182.920660][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.963594][T12651] ip6erspan0: entered promiscuous mode [ 183.034828][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3548'. [ 183.045833][T12661] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.3550'. [ 183.109497][T12668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.147164][T12668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.175148][T12674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.238291][T12682] netlink: 'syz.2.3558': attribute type 39 has an invalid length. [ 183.447599][T12483] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 183.529448][T12713] set_capacity_and_notify: 4 callbacks suppressed [ 183.529466][T12713] loop7: detected capacity change from 0 to 1024 [ 183.594520][T12713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.684945][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.781528][T12733] netlink: 'syz.1.3581': attribute type 1 has an invalid length. [ 183.823383][T12733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.837869][T12733] bond2: (slave veth0_to_bond): making interface the new active one [ 183.847506][T12733] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 184.080330][ T28] audit: type=1400 audit(1774165220.355:1961): avc: denied { read } for pid=12748 comm="syz.1.3588" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 184.602338][T12779] loop7: detected capacity change from 0 to 1024 [ 184.610683][T12781] syzkaller1: entered promiscuous mode [ 184.623922][T12781] syzkaller1: entered allmulticast mode [ 184.667631][T12779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.746176][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.905024][T12801] loop7: detected capacity change from 0 to 1024 [ 184.949017][T12801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 184.961478][T12801] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.007738][T12801] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.3612: lblock 0 mapped to illegal pblock 0 (length 1) [ 185.038355][T12801] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 185.072206][T12801] EXT4-fs (loop7): This should not happen!! Data will be lost [ 185.072206][T12801] [ 185.107643][ T128] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 185.135873][ T128] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 185.168440][ T28] audit: type=1326 audit(1774165221.445:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 185.192259][ T128] EXT4-fs (loop7): This should not happen!! Data will be lost [ 185.192259][ T128] [ 185.204896][ T128] EXT4-fs (loop7): Total free blocks count 0 [ 185.210930][ T128] EXT4-fs (loop7): Free/Dirty block details [ 185.218772][ T128] EXT4-fs (loop7): free_blocks=0 [ 185.224753][ T28] audit: type=1326 audit(1774165221.445:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 185.252331][ T128] EXT4-fs (loop7): dirty_blocks=64 [ 185.260539][ T28] audit: type=1326 audit(1774165221.445:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 185.274565][ T128] EXT4-fs (loop7): Block reservation details [ 185.308616][ T28] audit: type=1326 audit(1774165221.465:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 185.333590][ T28] audit: type=1326 audit(1774165221.475:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 185.405649][ T28] audit: type=1326 audit(1774165221.485:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 185.435655][ T28] audit: type=1326 audit(1774165221.495:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.1.3620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 185.478764][T12839] pim6reg1: entered promiscuous mode [ 185.510610][T12844] netlink: 'syz.4.3631': attribute type 7 has an invalid length. [ 185.526297][T12839] pim6reg1: entered allmulticast mode [ 185.554054][T12844] netlink: 'syz.4.3631': attribute type 7 has an invalid length. [ 185.651431][T12859] loop7: detected capacity change from 0 to 256 [ 185.689060][T12859] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.710670][T12859] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.723516][T12861] loop2: detected capacity change from 0 to 512 [ 185.744740][T12861] EXT4-fs: Ignoring removed orlov option [ 185.772445][T12861] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.796521][T12861] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.3639: corrupted in-inode xattr: e_value size too large [ 185.823762][T12861] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.824036][T12861] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3639: couldn't read orphan inode 15 (err -117) [ 185.833730][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 185.833751][ C1] EXT4-fs (loop2): initial error at time 1774165222: ext4_iget_extra_inode:5025: inode 15 [ 185.833787][ C1] EXT4-fs (loop2): last error at time 1774165222: ext4_iget_extra_inode:5025: inode 15 [ 185.879137][T12861] loop2: lost filesystem error report for type 5 error -117 [ 185.967761][T12861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.027496][T12861] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.3639: Logical block already allocated [ 186.080646][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.122439][T12881] net_ratelimit: 19 callbacks suppressed [ 186.122458][T12881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.309235][T12899] netlink: 'syz.4.3654': attribute type 1 has an invalid length. [ 186.327592][T12899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.349168][T12899] bond2: (slave geneve3): making interface the new active one [ 186.358270][T12899] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 186.850599][T12931] loop1: detected capacity change from 0 to 512 [ 186.857116][T12924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3665'. [ 186.914658][T12931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.943789][T12931] ext4 filesystem being mounted at /706/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.056385][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.109993][T12951] loop3: detected capacity change from 0 to 512 [ 187.149041][T12951] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.323780][T12951] EXT4-fs (loop3): 1 orphan inode deleted [ 187.329634][T12951] EXT4-fs (loop3): 1 truncate cleaned up [ 187.338799][T12951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.395528][T12951] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.3675: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 187.450628][T12962] loop1: detected capacity change from 0 to 4096 [ 187.479713][T12951] EXT4-fs (loop3): Remounting filesystem read-only [ 187.491771][T12962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.604429][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.667304][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.792818][T12977] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 187.856897][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 187.856914][ T28] audit: type=1326 audit(2000000001.670:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 187.913770][ T28] audit: type=1326 audit(2000000001.670:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 187.981020][T12984] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3689'. [ 187.988579][ T28] audit: type=1326 audit(2000000001.670:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 188.031398][T12986] loop2: detected capacity change from 0 to 2048 [ 188.039250][T12984] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3689'. [ 188.064143][ T28] audit: type=1326 audit(2000000001.670:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 188.099901][T12986] ext4 filesystem being mounted at /694/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.176238][ T28] audit: type=1326 audit(2000000001.670:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 188.242877][ T28] audit: type=1326 audit(2000000001.670:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 188.267328][ T28] audit: type=1326 audit(2000000001.700:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.2.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 188.292718][ T28] audit: type=1400 audit(2000000001.770:2000): avc: denied { write } for pid=12981 comm="syz.1.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.433839][ T28] audit: type=1400 audit(2000000002.220:2001): avc: denied { map } for pid=12969 comm="syz.3.3685" path="socket:[37201]" dev="sockfs" ino=37201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 188.556228][T13001] rdma_op ffff888104348580 conn xmit_rdma 0000000000000000 [ 188.603205][ T28] audit: type=1400 audit(2000000002.410:2002): avc: denied { create } for pid=13002 comm="syz.2.3696" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 188.675967][T13008] option changes via remount are deprecated (pid=13007 comm=syz.2.3698) [ 188.896749][T13033] netlink: 'syz.3.3709': attribute type 3 has an invalid length. [ 188.908304][T13034] loop7: detected capacity change from 0 to 512 [ 189.006365][T13044] @0Ù: renamed from bond_slave_1 (while UP) [ 189.437819][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3733'. [ 189.544729][T13078] loop3: detected capacity change from 0 to 256 [ 190.170009][T13115] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3742'. [ 190.717017][T13124] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3747'. [ 191.036079][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3751'. [ 191.345273][T13150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3758'. [ 191.365118][T13150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3758'. [ 191.415357][T13153] loop3: detected capacity change from 0 to 128 [ 191.747856][T13163] loop1: detected capacity change from 0 to 512 [ 191.774599][T13163] EXT4-fs: Ignoring removed nobh option [ 191.805332][T13163] EXT4-fs (loop1): 1 orphan inode deleted [ 192.059892][T13196] loop7: detected capacity change from 0 to 512 [ 192.074708][T13198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3779'. [ 192.272806][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3790'. [ 192.312041][ T3714] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.327738][ T3714] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.348869][T13226] netlink: 'syz.3.3793': attribute type 2 has an invalid length. [ 192.369082][T13230] loop2: detected capacity change from 0 to 128 [ 192.376187][ T3714] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.396615][T13232] loop7: detected capacity change from 0 to 128 [ 192.410145][ T3714] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.877448][T13268] loop3: detected capacity change from 0 to 4096 [ 193.011065][T13278] team0: entered promiscuous mode [ 193.035001][T13278] team_slave_0: entered promiscuous mode [ 193.042331][T13278] team_slave_1: entered promiscuous mode [ 193.048894][T13278] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.059515][T13278] macvlan2: entered promiscuous mode [ 193.077764][T13278] macvlan2: entered allmulticast mode [ 193.083546][T13278] team0: entered allmulticast mode [ 193.090176][T13278] team_slave_0: entered allmulticast mode [ 193.105726][T13278] team_slave_1: entered allmulticast mode [ 193.126850][T13278] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 193.531355][T13302] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 193.542830][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 193.542848][ T28] audit: type=1400 audit(2000000007.360:2016): avc: denied { read open } for pid=13308 comm="syz.7.3831" path="/" dev="configfs" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.720496][T13317] loop3: detected capacity change from 0 to 8192 [ 193.731725][T13317] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.746834][T13317] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.784488][T13317] FAT-fs (loop3): Filesystem has been set read-only [ 193.801409][T13317] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.814006][ T28] audit: type=1400 audit(2000000007.620:2017): avc: denied { write } for pid=13325 comm="syz.7.3838" lport=40485 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 193.838258][T13317] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.847603][T13317] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.857905][ T28] audit: type=1400 audit(2000000007.620:2018): avc: denied { setopt } for pid=13325 comm="syz.7.3838" lport=40485 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 193.882641][T13317] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.891696][T13317] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.905958][T13317] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.933500][T13317] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.934265][T13331] __nla_validate_parse: 5 callbacks suppressed [ 193.934314][T13331] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3839'. [ 193.943288][T13317] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 194.077052][T13340] loop3: detected capacity change from 0 to 128 [ 194.235301][ T28] audit: type=1326 audit(2000000008.050:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 194.259020][ T28] audit: type=1326 audit(2000000008.050:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 194.283009][ T28] audit: type=1326 audit(2000000008.050:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 194.307488][ T28] audit: type=1326 audit(2000000008.050:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 194.336908][ T28] audit: type=1326 audit(2000000008.080:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 194.362039][ T28] audit: type=1326 audit(2000000008.150:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 194.428384][ T28] audit: type=1326 audit(2000000008.150:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13352 comm="syz.4.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d2071c502 code=0x7ffc0000 [ 194.522545][T13369] loop1: detected capacity change from 0 to 1024 [ 194.574990][T13374] loop3: detected capacity change from 0 to 1024 [ 194.583204][T13369] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.3858: inode #1897035249: comm syz.1.3858: iget: illegal inode # [ 194.597744][T13374] EXT4-fs: Ignoring removed orlov option [ 194.611348][T13369] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3858: error while reading EA inode 1897035249 err=-117 [ 194.785950][T13398] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3868'. [ 194.795891][T13398] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3868'. [ 194.842022][ T10] IPVS: starting estimator thread 0... [ 194.933769][T13407] IPVS: using max 2304 ests per chain, 115200 per kthread [ 195.082766][T13420] team0: entered promiscuous mode [ 195.088185][T13420] team_slave_0: entered promiscuous mode [ 195.094023][T13420] team_slave_1: entered promiscuous mode [ 195.100224][T13420] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.114051][T13420] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 195.478120][T13446] atomic_op ffff8881452b9d28 conn xmit_atomic 0000000000000000 [ 195.617786][ T3557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 195.640587][ T3557] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.662202][T13457] loop3: detected capacity change from 0 to 512 [ 196.343857][T13469] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3898'. [ 196.364154][T13469] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.371960][T13469] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.395316][T13471] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3898'. [ 196.435123][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3900'. [ 196.453860][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3900'. [ 196.472718][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3900'. [ 196.514054][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3900'. [ 196.519961][ T3714] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.540217][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3900'. [ 196.595788][ T3714] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.611081][ T3714] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.724477][ T3714] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.016159][T13508] netlink: 'syz.2.3916': attribute type 1 has an invalid length. [ 197.038589][T13508] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 197.049193][T13508] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 197.060606][T13508] bond3: (slave ip6gre2): making interface the new active one [ 197.069106][T13508] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 197.454090][T13547] loop3: detected capacity change from 0 to 128 [ 197.497114][T13547] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.549297][T13547] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.751820][T13553] loop7: detected capacity change from 0 to 1024 [ 197.774272][T13553] EXT4-fs: Ignoring removed orlov option [ 197.853851][T13553] EXT4-fs mount: 14 callbacks suppressed [ 197.853872][T13553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.061241][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.697120][T13603] loop1: detected capacity change from 0 to 164 [ 198.833283][T13610] loop2: detected capacity change from 0 to 512 [ 198.854119][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 198.854139][ T28] audit: type=1400 audit(2000000012.660:2098): avc: denied { mount } for pid=13602 comm="syz.1.3959" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 198.889516][T13610] EXT4-fs (loop2): orphan cleanup on readonly fs [ 198.896592][T13610] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 198.907837][T13610] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 198.935354][T13610] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.3962: Failed to acquire dquot type 1 [ 198.956102][T13610] loop2: lost filesystem error report for type 5 error -117 [ 198.956330][T13610] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 198.963854][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 198.963877][ C1] EXT4-fs (loop2): last error at time 2000000012: ext4_acquire_dquot:7001 [ 198.964441][ T28] audit: type=1400 audit(2000000012.770:2099): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 199.016997][T13610] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 199.037327][T13610] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.3962: Failed to acquire dquot type 1 [ 199.049167][T13610] loop2: lost filesystem error report for type 5 error -117 [ 199.049472][T13618] netlink: 'syz.1.3964': attribute type 1 has an invalid length. [ 199.049586][T13610] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3962: bg 0: block 248: padding at end of block bitmap is not set [ 199.080041][T13610] loop2: lost filesystem error report for type 5 error -117 [ 199.080290][T13610] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 199.100609][T13610] loop2: lost filesystem error report for type 5 error -117 [ 199.100916][T13610] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 199.118850][T13610] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 199.171808][T13610] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.3962: Failed to acquire dquot type 1 [ 199.184222][T13610] loop2: lost filesystem error report for type 5 error -117 [ 199.184410][T13610] EXT4-fs (loop2): 1 orphan inode deleted [ 199.198802][T13610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.219048][T13618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.234527][T13620] bond3: (slave geneve2): making interface the new active one [ 199.244133][T13620] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 199.252856][ T3714] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.293907][ T3714] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.305552][ T3714] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.315473][ T70] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.348672][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.485386][ T28] audit: type=1400 audit(2000000013.300:2100): avc: denied { listen } for pid=13632 comm="syz.1.3970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.240692][T13667] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.332802][T13671] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 200.592626][T13707] loop1: detected capacity change from 0 to 128 [ 200.603325][T13707] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.616929][T13707] ext4 filesystem being mounted at /773/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 200.669018][ T28] audit: type=1400 audit(2000000014.480:2101): avc: denied { setattr } for pid=13706 comm="syz.1.4000" path="/773/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 200.755628][T13718] __nla_validate_parse: 8 callbacks suppressed [ 200.755646][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4003'. [ 201.359561][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.670829][T13759] loop7: detected capacity change from 0 to 1024 [ 201.712439][T13759] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.734442][T13759] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: comm syz.7.4019: inode #7114504: comm syz.7.4019: iget: illegal inode # [ 201.747974][T13767] loop2: detected capacity change from 0 to 128 [ 201.759975][T13759] EXT4-fs (loop7): Remounting filesystem read-only [ 201.766778][T13759] EXT4-fs warning (device loop7): ext4_xattr_block_set:2200: inode #19: comm syz.7.4019: dec ref error=-30 [ 201.775699][T13767] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.813272][T13767] ext4 filesystem being mounted at /750/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.818430][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.869110][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.920918][T13778] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 201.989000][T13783] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 202.486669][T13802] pimreg: entered allmulticast mode [ 202.496005][T13802] pimreg: left allmulticast mode [ 202.506745][T13804] loop3: detected capacity change from 0 to 512 [ 202.539263][T13804] EXT4-fs (loop3): 1 truncate cleaned up [ 202.551176][T13804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.578723][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.652415][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4042'. [ 202.734831][T13827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.742891][T13826] loop3: detected capacity change from 0 to 128 [ 202.752784][T13827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.768833][T13826] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.792687][T13826] ext4 filesystem being mounted at /838/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.837100][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.841406][T13831] loop1: detected capacity change from 0 to 2048 [ 202.866715][T13831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.880026][T13831] ext4 filesystem being mounted at /780/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.895936][T13833] delete_channel: no stack [ 202.900478][T13833] delete_channel: no stack [ 202.997334][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.010829][T13827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.024174][T13827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.205857][T13856] loop7: detected capacity change from 0 to 512 [ 203.217408][T13856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.230584][T13856] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.245409][T13857] loop3: detected capacity change from 0 to 512 [ 203.257232][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4060'. [ 203.281762][T13857] EXT4-fs: Ignoring removed bh option [ 203.287840][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4060'. [ 203.297345][T13860] netlink: 'syz.1.4060': attribute type 7 has an invalid length. [ 203.313810][T13857] EXT4-fs: inline encryption not supported [ 203.320733][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.333750][T13857] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.357545][T13857] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 203.373929][T13857] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4057: bg 0: block 248: padding at end of block bitmap is not set [ 203.389228][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4060'. [ 203.398741][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4060'. [ 203.404054][T13857] loop3: lost filesystem error report for type 5 error -117 [ 203.408204][T13860] netlink: 'syz.1.4060': attribute type 7 has an invalid length. [ 203.411618][T13857] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.4057: Failed to acquire dquot type 1 [ 203.423458][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 203.423480][ C0] EXT4-fs (loop3): last error at time 2000000017: ext4_validate_block_bitmap:441 [ 203.460210][T13857] loop3: lost filesystem error report for type 5 error -117 [ 203.460697][T13857] EXT4-fs (loop3): 1 truncate cleaned up [ 203.474493][T13857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 203.512110][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 203.652411][ T3391] kernel write not supported for file /vcs (pid: 3391 comm: kworker/0:3) [ 203.731393][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4071'. [ 203.805081][T13893] netlink: 'syz.4.4072': attribute type 1 has an invalid length. [ 203.820116][T13893] bond3: entered promiscuous mode [ 203.840722][T13893] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.882933][T13893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.906714][T13893] bond3: (slave bond4): making interface the new active one [ 203.915829][T13893] bond4: entered promiscuous mode [ 203.921963][T13893] bond3: (slave bond4): Enslaving as an active interface with an up link [ 204.787175][T13927] loop1: detected capacity change from 0 to 512 [ 204.825661][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 204.825677][ T28] audit: type=1400 audit(2000000018.640:2107): avc: denied { mounton } for pid=13926 comm="syz.1.4085" path="/790/file0/bus" dev="loop1" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 205.000556][T13935] netlink: 'syz.1.4088': attribute type 13 has an invalid length. [ 205.023880][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 205.222808][T13939] loop3: detected capacity change from 0 to 1024 [ 205.266134][T13939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.304403][T13939] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.4090: inode #7114504: comm syz.3.4090: iget: illegal inode # [ 205.339648][T13939] EXT4-fs (loop3): Remounting filesystem read-only [ 205.357571][T13939] EXT4-fs warning (device loop3): ext4_xattr_block_set:2200: inode #19: comm syz.3.4090: dec ref error=-30 [ 205.462959][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.493992][T13935] netlink: 'syz.1.4088': attribute type 13 has an invalid length. [ 205.503836][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 205.803923][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4097'. [ 206.114075][T13971] loop3: detected capacity change from 0 to 2048 [ 206.147998][T13971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.182595][T13971] ext4 filesystem being mounted at /861/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.213565][ T28] audit: type=1400 audit(2000000020.020:2108): avc: denied { setattr } for pid=13970 comm="syz.3.4103" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.274835][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.662336][T13996] loop3: detected capacity change from 0 to 512 [ 206.705132][T13996] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.721987][T13999] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 206.794660][T13996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.808119][T13996] ext4 filesystem being mounted at /863/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.840958][T13996] EXT4-fs (loop3): shut down requested (1) [ 206.913246][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.923547][T14015] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4123'. [ 206.967420][T14021] loop2: detected capacity change from 0 to 256 [ 207.004440][T14021] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.037853][T14021] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.170791][T14042] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4134'. [ 207.245722][ T3425] kernel write not supported for file /vcs (pid: 3425 comm: kworker/1:5) [ 207.328980][ T28] audit: type=1400 audit(2000000021.140:2109): avc: denied { ioctl } for pid=14057 comm="syz.3.4140" path="socket:[39734]" dev="sockfs" ino=39734 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.517816][T14064] loop3: detected capacity change from 0 to 512 [ 207.527661][T14064] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.554700][T14064] EXT4-fs (loop3): 1 truncate cleaned up [ 207.560858][T14064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.700902][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.762449][ T28] audit: type=1326 audit(2000000021.570:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcaabc799 code=0x7ffc0000 [ 207.770660][T14071] loop3: detected capacity change from 0 to 1024 [ 207.794424][ T28] audit: type=1326 audit(2000000021.570:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcaabc799 code=0x7ffc0000 [ 207.821381][ T28] audit: type=1326 audit(2000000021.570:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6bcaabc799 code=0x7ffc0000 [ 207.845613][ T28] audit: type=1326 audit(2000000021.570:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6bcaabc502 code=0x7ffc0000 [ 207.869624][ T28] audit: type=1326 audit(2000000021.570:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6bcaa7cfce code=0x7ffc0000 [ 207.893611][ T28] audit: type=1326 audit(2000000021.570:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6bcaabc5c7 code=0x7ffc0000 [ 207.926655][ T28] audit: type=1326 audit(2000000021.570:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.3.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bcaa7cfce code=0x7ffc0000 [ 207.955680][T14071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.035581][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.211514][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 208.293938][ T3391] kernel read not supported for file /vcs (pid: 3391 comm: kworker/0:3) [ 208.927347][T14143] loop3: detected capacity change from 0 to 4096 [ 208.934706][T14143] EXT4-fs: test_dummy_encryption option not supported [ 208.988421][T14147] loop3: detected capacity change from 0 to 1024 [ 208.995433][T14147] EXT4-fs: Ignoring removed orlov option [ 209.005011][T14147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.039856][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.173552][T14151] loop3: detected capacity change from 0 to 32768 [ 209.529487][T14171] loop3: detected capacity change from 0 to 512 [ 209.539572][T14171] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.555543][T14171] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 209.565906][T14171] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 209.584964][T14171] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 209.595200][T14171] System zones: 0-2, 18-18, 34-34 [ 209.604865][T14171] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.4187: bad orphan inode 15 [ 209.623832][T14171] loop3: lost filesystem error report for type 5 error -117 [ 209.624034][T14171] ext4_test_bit(bit=14, block=18) = 1 [ 209.636830][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 209.636858][ C0] EXT4-fs (loop3): initial error at time 2000000023: ext4_orphan_get:1417 [ 209.636897][ C0] EXT4-fs (loop3): last error at time 2000000023: ext4_orphan_get:1417 [ 209.676266][T14171] is_bad_inode(inode)=0 [ 209.680481][T14171] NEXT_ORPHAN(inode)=2264924160 [ 209.685661][T14171] max_ino=32 [ 209.736561][T14171] i_nlink=0 [ 209.742613][T14171] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.4187: corrupted inode contents [ 209.754556][T14171] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.754854][T14171] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.4187: mark_inode_dirty error [ 209.775555][T14171] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.775830][T14171] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.4187: corrupted inode contents [ 209.797524][T14171] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.797799][T14171] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.4187: mark_inode_dirty error [ 209.818993][T14171] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.822374][T14171] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.4187: mark inode dirty (error -117) [ 209.845863][T14171] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.846068][T14171] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 209.865410][T14171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.030577][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.078867][T14187] SELinux: failed to load policy [ 210.250587][T14047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.398156][T14207] pimreg: entered allmulticast mode [ 210.495565][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 210.495583][ T28] audit: type=1400 audit(2000000024.310:2181): avc: denied { name_connect } for pid=14220 comm="syz.1.4206" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 210.588891][T14233] loop7: detected capacity change from 0 to 256 [ 210.625366][T14233] syz.7.4211: attempt to access beyond end of device [ 210.625366][T14233] loop7: rw=8912896, sector=256, nr_sectors = 20 limit=256 [ 210.669689][ T28] audit: type=1400 audit(2000000024.480:2182): avc: denied { listen } for pid=14237 comm="syz.1.4214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 210.673926][T14233] syz.7.4211: attempt to access beyond end of device [ 210.673926][T14233] loop7: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 210.714539][ T28] audit: type=1400 audit(2000000024.480:2183): avc: denied { accept } for pid=14237 comm="syz.1.4214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 210.724892][T14239] syz.7.4211: attempt to access beyond end of device [ 210.724892][T14239] loop7: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 210.754202][T14233] syz.7.4211: attempt to access beyond end of device [ 210.754202][T14233] loop7: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 210.790546][T14232] syz.7.4211: attempt to access beyond end of device [ 210.790546][T14232] loop7: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 210.824774][T14233] syz.7.4211: attempt to access beyond end of device [ 210.824774][T14233] loop7: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 210.838971][T14232] syz.7.4211: attempt to access beyond end of device [ 210.838971][T14232] loop7: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 210.853135][T14233] syz.7.4211: attempt to access beyond end of device [ 210.853135][T14233] loop7: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 210.867760][T14232] syz.7.4211: attempt to access beyond end of device [ 210.867760][T14232] loop7: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 210.881746][T14233] syz.7.4211: attempt to access beyond end of device [ 210.881746][T14233] loop7: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 211.545341][T14278] loop7: detected capacity change from 0 to 512 [ 211.563248][T14278] EXT4-fs: Ignoring removed bh option [ 211.571376][T14278] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 211.594443][T14278] EXT4-fs (loop7): orphan cleanup on readonly fs [ 211.601196][T14278] EXT4-fs (loop7): 1 truncate cleaned up [ 211.635384][T14278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 211.677060][T14283] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.4232'. [ 212.265917][T14299] loop1: detected capacity change from 0 to 4096 [ 212.284587][T14299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.298250][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.412109][ T28] audit: type=1326 audit(2000000026.220:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.7.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb781ec799 code=0x7ffc0000 [ 212.443759][ T28] audit: type=1326 audit(2000000026.220:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.7.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcb781ec799 code=0x7ffc0000 [ 212.446147][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.467865][ T28] audit: type=1326 audit(2000000026.220:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.7.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb781ec799 code=0x7ffc0000 [ 212.500599][ T28] audit: type=1326 audit(2000000026.220:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.7.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb781acfce code=0x7ffc0000 [ 212.525073][ T28] audit: type=1326 audit(2000000026.250:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.7.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fcb781ec799 code=0x7ffc0000 [ 212.548930][ T28] audit: type=1326 audit(2000000026.250:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.7.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb781ec799 code=0x7ffc0000 [ 212.664798][ T28] audit: type=1326 audit(2000000026.250:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.7.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb781ec799 code=0x7ffc0000 [ 212.923842][T14342] loop7: detected capacity change from 0 to 512 [ 213.115534][T14342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.140570][T14342] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.213474][T14362] netlink: 'syz.4.4264': attribute type 1 has an invalid length. [ 213.226715][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.237600][T14362] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.280872][T14362] bond5: (slave gretap1): making interface the new active one [ 213.292093][T14362] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 213.323669][T14367] loop1: detected capacity change from 0 to 128 [ 213.379766][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4268'. [ 213.380351][T14367] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.402728][T14367] ext4 filesystem being mounted at /830/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.445349][T14367] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 20: comm syz.1.4266: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 213.517759][T14367] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem [ 213.555672][T14375] loop7: detected capacity change from 0 to 8192 [ 213.577568][T14375] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008114) [ 213.604188][T14375] FAT-fs (loop7): Filesystem has been set read-only [ 213.604954][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.833247][T14402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=14402 comm=syz.2.4281 [ 214.040291][T14416] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.4287'. [ 214.102626][T14419] loop2: detected capacity change from 0 to 1024 [ 214.132054][T14419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.180633][T14419] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.4289: Allocating blocks 385-513 which overlap fs metadata [ 214.197296][ T3704] EXT4-fs (loop2): pa ffff888108247770: logic 16, phys. 129, len 24 [ 214.205473][ T3704] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 214.225456][T14428] loop1: detected capacity change from 0 to 4096 [ 214.266267][T14428] EXT4-fs: Ignoring removed bh option [ 214.298424][T14428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.417252][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.434260][T14441] loop3: detected capacity change from 0 to 128 [ 214.467287][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.538361][T14446] netlink: 'syz.1.4298': attribute type 7 has an invalid length. [ 214.643949][T14446] netlink: 'syz.1.4298': attribute type 7 has an invalid length. [ 214.843267][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4307'. [ 214.871378][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4307'. [ 214.895544][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4307'. [ 214.904820][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4307'. [ 215.106387][T14480] netlink: 'syz.2.4312': attribute type 19 has an invalid length. [ 215.143366][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4312'. [ 215.154938][T14480] netlink: 'syz.2.4312': attribute type 19 has an invalid length. [ 215.162881][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4312'. [ 215.337036][T14488] loop7: detected capacity change from 0 to 1024 [ 215.347876][T14488] EXT4-fs: Ignoring removed bh option [ 215.373445][T14488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 215.527268][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 215.643081][T14500] loop7: detected capacity change from 0 to 4096 [ 215.668836][T14500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.699592][T14505] bio_check_eod: 11718 callbacks suppressed [ 215.699612][T14505] syz.1.4323: attempt to access beyond end of device [ 215.699612][T14505] loop1: rw=8912896, sector=256, nr_sectors = 20 limit=256 [ 215.801286][T14505] syz.1.4323: attempt to access beyond end of device [ 215.801286][T14505] loop1: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 215.854084][T14505] syz.1.4323: attempt to access beyond end of device [ 215.854084][T14505] loop1: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 215.881095][T14507] syz.1.4323: attempt to access beyond end of device [ 215.881095][T14507] loop1: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 215.919214][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.953846][T14505] syz.1.4323: attempt to access beyond end of device [ 215.953846][T14505] loop1: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 215.983971][T14505] syz.1.4323: attempt to access beyond end of device [ 215.983971][T14505] loop1: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 216.013827][T14503] syz.1.4323: attempt to access beyond end of device [ 216.013827][T14503] loop1: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 216.040593][T14505] syz.1.4323: attempt to access beyond end of device [ 216.040593][T14505] loop1: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 216.078843][T14503] syz.1.4323: attempt to access beyond end of device [ 216.078843][T14503] loop1: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 216.115701][T14518] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.127786][T14505] syz.1.4323: attempt to access beyond end of device [ 216.127786][T14505] loop1: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 216.172910][T14518] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.262649][T14521] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.309983][T14521] EXT4-fs (loop3): 1 truncate cleaned up [ 216.335545][T14521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.559651][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.598640][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4330'. [ 216.614638][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 216.614655][ T28] audit: type=1400 audit(2000000030.430:2250): avc: denied { wake_alarm } for pid=14525 comm="syz.3.4330" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.699799][ T28] audit: type=1400 audit(2000000030.510:2251): avc: denied { rename } for pid=14530 comm="syz.4.4333" name="file0" dev="tmpfs" ino=4902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 216.906162][T14544] set_capacity_and_notify: 3 callbacks suppressed [ 216.906181][T14544] loop7: detected capacity change from 0 to 512 [ 216.983760][T14544] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 217.019474][T14544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 217.031563][T14544] System zones: 1-12 [ 217.037820][T14544] EXT4-fs (loop7): orphan cleanup on readonly fs [ 217.054051][T14544] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4339: bg 0: block 361: padding at end of block bitmap is not set [ 217.068722][T14544] loop7: lost filesystem error report for type 5 error -117 [ 217.070778][T14544] EXT4-fs (loop7): Remounting filesystem read-only [ 217.078139][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 217.078164][ C0] EXT4-fs (loop7): initial error at time 2000000030: ext4_validate_block_bitmap:441 [ 217.078196][ C0] EXT4-fs (loop7): last error at time 2000000030: ext4_validate_block_bitmap:441 [ 217.110128][T14544] EXT4-fs (loop7): 1 truncate cleaned up [ 217.116287][T14544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 217.142274][T11341] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 217.265923][T14554] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.412170][T14563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.456987][T14563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.554691][T14574] loop1: detected capacity change from 0 to 512 [ 217.563108][T14574] EXT4-fs (loop1): 1 truncate cleaned up [ 217.590583][T14574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.623531][T14574] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4353: bg 0: block 465: padding at end of block bitmap is not set [ 217.639176][T14574] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 217.654396][T14574] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4353: invalid indirect mapped block 234881024 (level 0) [ 217.725921][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.637046][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4379'. [ 218.648839][T14636] sctp: [Deprecated]: syz.7.4378 (pid 14636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.648839][T14636] Use struct sctp_sack_info instead [ 218.676990][ T28] audit: type=1326 audit(2000000032.480:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.4.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 218.742058][ T10] IPVS: starting estimator thread 0... [ 218.760463][ T28] audit: type=1326 audit(2000000032.480:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.4.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 218.785056][ T28] audit: type=1326 audit(2000000032.480:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.4.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 218.816354][ T28] audit: type=1326 audit(2000000032.480:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.4.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 218.840495][ T28] audit: type=1326 audit(2000000032.480:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.4.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 218.864448][ T28] audit: type=1326 audit(2000000032.480:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.4.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 218.874043][T14645] IPVS: using max 2304 ests per chain, 115200 per kthread [ 218.889934][ T28] audit: type=1326 audit(2000000032.480:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14638 comm="syz.4.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 218.991109][T14659] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4389'. [ 219.003675][T14664] loop2: detected capacity change from 0 to 128 [ 219.029691][T14664] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.049426][T14659] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4389'. [ 219.058643][T14664] ext4 filesystem being mounted at /804/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.084885][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.127900][T14673] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4396'. [ 219.138220][T14673] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4396'. [ 219.239442][T14688] loop1: detected capacity change from 0 to 512 [ 219.255768][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4403'. [ 219.325746][T14688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.353854][T14688] ext4 filesystem being mounted at /851/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.421929][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.500380][ T28] audit: type=1400 audit(2000000033.310:2259): avc: denied { connect } for pid=14708 comm="syz.1.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.547530][T14712] loop1: detected capacity change from 0 to 256 [ 219.557918][T14712] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.725753][T14712] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200) [ 219.744443][T14712] FAT-fs (loop1): Filesystem has been set read-only [ 219.802931][T14711] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2057) [ 220.239315][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4421'. [ 220.431424][T14737] loop1: detected capacity change from 0 to 1024 [ 220.476535][T14737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.512408][T14737] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 220.533013][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4426'. [ 220.554216][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.638503][T14757] syz.4.4432 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 221.205896][T14779] vlan0: entered promiscuous mode [ 221.457078][T14799] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.464251][T14799] bridge0: port 2(bridge_slave_1) entered listening state [ 221.471485][T14799] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.478788][T14799] bridge0: port 1(bridge_slave_0) entered listening state [ 221.522192][T14799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.786842][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 221.786861][ T28] audit: type=1400 audit(2000000035.590:2290): avc: denied { map } for pid=14816 comm="syz.7.4458" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 221.862695][T14823] loop2: detected capacity change from 0 to 256 [ 221.870261][T14823] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.932363][T14791] loop3: detected capacity change from 0 to 1024 [ 221.996226][T14791] EXT4-fs: inline encryption not supported [ 222.007943][T14791] ext4: Bad value for 'mb_optimize_scan' [ 222.120108][T14822] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 222.130506][T14822] FAT-fs (loop2): Filesystem has been set read-only [ 222.139199][T14822] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 222.147233][T14822] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 222.171623][T14822] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 222.192049][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4465'. [ 222.341382][T14854] hsr0: entered promiscuous mode [ 222.347153][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4473'. [ 222.870718][T14861] loop7: detected capacity change from 0 to 256 [ 223.430915][T14872] netlink: 'syz.1.4491': attribute type 10 has an invalid length. [ 223.443769][T14872] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 224.082913][T14892] __nla_validate_parse: 1 callbacks suppressed [ 224.082936][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4489'. [ 224.122990][T14895] loop3: detected capacity change from 0 to 256 [ 224.181759][T14895] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.301245][T14905] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8200) [ 224.333945][T14904] xt_hashlimit: size too large, truncated to 1048576 [ 224.361830][T14905] FAT-fs (loop3): Filesystem has been set read-only [ 224.458720][T14905] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2057) [ 224.534491][ T3535] Bluetooth: hci0: command 0x1003 tx timeout [ 224.540565][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 225.119661][T14917] tipc: Started in network mode [ 225.128792][T14917] tipc: Node identity ac1414aa, cluster identity 4711 [ 225.144413][T14917] tipc: Enabled bearer , priority 10 [ 225.312065][T14942] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 225.312065][T14942] program syz.2.4511 not setting count and/or reply_len properly [ 225.339408][T14946] hsr0: entered promiscuous mode [ 225.345319][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4510'. [ 225.438550][ T28] audit: type=1400 audit(2000000039.250:2291): avc: denied { mount } for pid=14954 comm="syz.4.4516" name="/" dev="hugetlbfs" ino=43159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 225.476087][ T28] audit: type=1400 audit(2000000039.290:2292): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 225.728485][ T28] audit: type=1400 audit(2000000039.540:2293): avc: denied { read } for pid=14973 comm="syz.3.4523" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 225.910206][T14976] netlink: 'syz.3.4524': attribute type 10 has an invalid length. [ 225.927752][ T28] audit: type=1400 audit(2000000039.540:2294): avc: denied { open } for pid=14973 comm="syz.3.4523" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 225.974088][T14976] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4524'. [ 225.996224][T14976] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 226.138126][T14987] loop1: detected capacity change from 0 to 4096 [ 226.153840][ T23] tipc: Node number set to 2886997162 [ 226.387401][T14987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.485876][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.560949][T14998] loop3: detected capacity change from 0 to 512 [ 226.777973][T14998] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 226.849366][T15013] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4537'. [ 227.246975][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'. [ 227.259084][T15055] loop2: detected capacity change from 0 to 1024 [ 227.268122][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'. [ 227.278845][T15055] EXT4-fs: Ignoring removed orlov option [ 227.419895][T15070] loop2: detected capacity change from 0 to 512 [ 227.429010][T15070] EXT4-fs: Ignoring removed oldalloc option [ 227.451790][T15070] EXT4-fs (loop2): 1 truncate cleaned up [ 227.539590][T15080] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4568'. [ 227.742266][T15097] loop3: detected capacity change from 0 to 256 [ 227.793084][T15097] bio_check_eod: 3677 callbacks suppressed [ 227.793104][T15097] syz.3.4576: attempt to access beyond end of device [ 227.793104][T15097] loop3: rw=8912896, sector=256, nr_sectors = 20 limit=256 [ 227.819278][T15097] syz.3.4576: attempt to access beyond end of device [ 227.819278][T15097] loop3: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 227.835998][T15097] syz.3.4576: attempt to access beyond end of device [ 227.835998][T15097] loop3: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 227.850046][T15097] syz.3.4576: attempt to access beyond end of device [ 227.850046][T15097] loop3: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 227.863985][T15097] syz.3.4576: attempt to access beyond end of device [ 227.863985][T15097] loop3: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 227.886126][T15103] syz.3.4576: attempt to access beyond end of device [ 227.886126][T15103] loop3: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 227.907773][T15097] syz.3.4576: attempt to access beyond end of device [ 227.907773][T15097] loop3: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 227.921776][T15097] syz.3.4576: attempt to access beyond end of device [ 227.921776][T15097] loop3: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 227.942655][T15097] syz.3.4576: attempt to access beyond end of device [ 227.942655][T15097] loop3: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 227.948241][T15104] Process accounting resumed [ 227.957397][T15096] syz.3.4576: attempt to access beyond end of device [ 227.957397][T15096] loop3: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 228.422028][T15120] loop2: detected capacity change from 0 to 512 [ 228.560417][T15137] loop2: detected capacity change from 0 to 128 [ 228.589358][T15137] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.626730][T15137] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.675611][ T3714] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.721108][T15145] delete_channel: no stack [ 228.725661][ T28] audit: type=1400 audit(2000000042.530:2295): avc: denied { ioctl } for pid=15145 comm="syz.2.4597" path="socket:[46300]" dev="sockfs" ino=46300 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 228.947603][T15162] loop3: detected capacity change from 0 to 1024 [ 228.985325][T15162] EXT4-fs mount: 4 callbacks suppressed [ 228.985344][T15162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.202228][ T28] audit: type=1326 audit(2000000043.010:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 229.251171][ T28] audit: type=1326 audit(2000000043.010:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 229.319557][ T28] audit: type=1326 audit(2000000043.010:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 229.321639][T15175] sit1: entered allmulticast mode [ 229.363403][ T28] audit: type=1326 audit(2000000043.020:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 229.420453][ T28] audit: type=1326 audit(2000000043.020:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 229.446378][ T28] audit: type=1326 audit(2000000043.020:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 229.471536][ T28] audit: type=1326 audit(2000000043.110:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2071c799 code=0x7ffc0000 [ 229.507380][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.516650][ T28] audit: type=1326 audit(2000000043.110:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d2071c502 code=0x7ffc0000 [ 229.547280][ T28] audit: type=1326 audit(2000000043.110:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9d2071c597 code=0x7ffc0000 [ 229.767502][T15189] loop1: detected capacity change from 0 to 512 [ 229.817163][T15189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.829932][T15189] ext4 filesystem being mounted at /886/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.842867][T15189] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #4: comm syz.1.4611: corrupted inode contents [ 229.863957][T15189] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #4: comm syz.1.4611: mark_inode_dirty error [ 229.875915][T15189] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #4: comm syz.1.4611: corrupted inode contents [ 229.888253][T15189] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.4611: mark_inode_dirty error [ 229.906550][T15189] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.4611: Failed to acquire dquot type 1 [ 229.936854][T15196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.995955][T15196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.025118][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.410266][T15234] loop3: detected capacity change from 0 to 512 [ 230.437399][T15234] EXT4-fs: Ignoring removed bh option [ 230.463201][T15234] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 230.513030][T15234] EXT4-fs (loop3): 1 truncate cleaned up [ 230.533538][T15234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.304938][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.406525][T15255] ªªªªªª: renamed from vlan0 (while UP) [ 231.452073][T15261] vcan0: tx address claim with different name [ 232.007265][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4660'. [ 232.871630][T15336] netlink: 'syz.1.4675': attribute type 1 has an invalid length. [ 233.186873][T15351] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.4682'. [ 233.678267][T15392] loop3: detected capacity change from 0 to 512 [ 233.687508][T15392] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.714540][T15392] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 233.733757][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 233.740341][ C1] EXT4-fs (loop3): initial error at time 2000000047: ext4_mb_generate_buddy:1315 [ 233.744965][T15392] EXT4-fs (loop3): 1 truncate cleaned up [ 233.749497][ C1] EXT4-fs (loop3): last error at time 2000000047: ext4_mb_generate_buddy:1315 [ 233.770339][T15392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.786990][T15392] EXT4-fs (loop3): shut down requested (1) [ 233.805045][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.399165][T15425] loop1: detected capacity change from 0 to 4096 [ 234.408454][T15425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.439956][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.035448][T15452] ªªªªªª: renamed from vlan0 (while UP) [ 235.452991][T15465] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.489139][T15468] loop2: detected capacity change from 0 to 512 [ 235.504230][T15468] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 235.549423][T15468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.586778][T15468] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.4731: path /897/file0: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 235.615133][T15468] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 12: comm syz.2.4731: path /897/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 235.640665][T15468] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 13: comm syz.2.4731: path /897/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 235.670477][T15479] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 18: comm syz.2.4731: lblock 23 mapped to illegal pblock 18 (length 1) [ 235.732113][T15483] netlink: 'syz.1.4736': attribute type 4 has an invalid length. [ 235.741377][T15483] netlink: 'syz.1.4736': attribute type 4 has an invalid length. [ 235.793871][ T3319] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 235.836693][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.876058][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4746'. [ 235.885269][T15502] IPv6: Can't replace route, no match found [ 235.943800][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4748'. [ 235.969125][T15511] netlink: 'syz.1.4750': attribute type 83 has an invalid length. [ 235.982291][T15506] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 236.004860][T15506] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 236.295605][T15521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.302896][T15521] IPv6: NLM_F_CREATE should be set when creating new route [ 236.614300][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 236.621644][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 236.935008][T15544] loop3: detected capacity change from 0 to 512 [ 236.972458][T15544] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 236.983240][T15544] EXT4-fs (loop3): 1 truncate cleaned up [ 236.989793][T15544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.005409][T15544] EXT4-fs (loop3): shut down requested (2) [ 237.011766][T15544] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 237.022174][T15544] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 237.031321][T15544] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 237.040444][T15544] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 237.049459][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 237.049473][ T28] audit: type=1400 audit(2000000050.870:2344): avc: denied { add_name } for pid=15543 comm="syz.3.4764" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.086297][T15544] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 237.107853][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.893812][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.894492][ T4131] Bluetooth: hci0: command 0x1003 tx timeout [ 237.936838][T15574] loop2: detected capacity change from 0 to 512 [ 237.984646][T15574] EXT4-fs: Ignoring removed bh option [ 238.047886][T15574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.067034][ T3535] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 238.071321][ T43] Bluetooth: hci1: command 0x1003 tx timeout [ 238.104105][T15574] ext4 filesystem being mounted at /906/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.171217][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.256089][T15598] loop3: detected capacity change from 0 to 512 [ 238.315145][T15598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.408103][T15598] ext4 filesystem being mounted at /1010/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.440640][T15598] Quota error (device loop3): write_blk: dquota write failed [ 238.450355][ T28] audit: type=1326 audit(2000000052.250:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15616 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 238.486606][T15598] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 238.506990][ T28] audit: type=1326 audit(2000000052.250:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15616 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 238.510742][T15598] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.4786: Failed to acquire dquot type 1 [ 238.530892][ T28] audit: type=1400 audit(2000000052.250:2347): avc: denied { link } for pid=15597 comm="syz.3.4786" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.566906][ T28] audit: type=1326 audit(2000000052.270:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15616 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 238.584244][T15598] EXT4-fs (loop3): Remounting filesystem read-only [ 238.591240][ T28] audit: type=1326 audit(2000000052.270:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15616 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 238.621107][ T28] audit: type=1326 audit(2000000052.270:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15616 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 238.645005][ T28] audit: type=1326 audit(2000000052.270:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15616 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a323c799 code=0x7ffc0000 [ 238.678654][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.753142][T15622] loop3: detected capacity change from 0 to 1024 [ 238.766127][T15623] loop2: detected capacity change from 0 to 1024 [ 238.800926][T15623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.813643][T15622] EXT4-fs: inline encryption not supported [ 238.834027][T15622] EXT4-fs: Ignoring removed bh option [ 238.869164][T15622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.952100][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.985768][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.034242][T15632] SELinux: ebitmap start bit (32) is not a multiple of the map unit size (64) [ 239.061078][T15632] SELinux: failed to load policy [ 239.494590][T15670] loop4: detected capacity change from 512 to 0 [ 239.626273][T15677] loop2: detected capacity change from 0 to 1024 [ 239.668329][T15677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.743123][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.821305][T15693] loop1: detected capacity change from 0 to 512 [ 239.828741][T15692] loop2: detected capacity change from 0 to 512 [ 239.835556][T15693] msdos: Unknown parameter 'ÿÿ' [ 239.872914][T15692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.906059][T15692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.939430][T15692] ext4 filesystem being mounted at /923/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.027861][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.103603][T15709] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.287612][T15729] netlink: 'syz.7.4838': attribute type 4 has an invalid length. [ 240.315903][T15731] loop1: detected capacity change from 0 to 512 [ 240.346692][T15731] EXT4-fs: Mount option(s) incompatible with ext2 [ 240.720309][T15748] loop2: detected capacity change from 0 to 512 [ 240.754260][T15748] EXT4-fs: Ignoring removed bh option [ 240.763034][T15748] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 240.792399][T15748] EXT4-fs (loop2): 1 truncate cleaned up [ 240.814516][T15748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.893033][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4847'. [ 240.903338][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4847'. [ 240.921165][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.079488][T15776] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 242.528389][T15797] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.535816][T15797] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.647805][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 242.647823][ T28] audit: type=1326 audit(2000000056.460:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.7.4871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb781ec799 code=0x0 [ 242.656783][T15819] loop1: detected capacity change from 0 to 512 [ 242.710478][T15819] EXT4-fs: Ignoring removed orlov option [ 242.732896][T15819] EXT4-fs: Ignoring removed i_version option [ 242.741815][T15819] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.4870: corrupted in-inode xattr: e_value size too large [ 242.756351][T15819] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.756605][T15819] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4870: couldn't read orphan inode 15 (err -117) [ 242.765818][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 242.765842][ C0] EXT4-fs (loop1): initial error at time 2000000056: ext4_iget_extra_inode:5025: inode 15 [ 242.765877][ C0] EXT4-fs (loop1): last error at time 2000000056: ext4_iget_extra_inode:5025: inode 15 [ 242.805543][T15819] loop1: lost filesystem error report for type 5 error -117 [ 242.806138][T15819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.835571][T15819] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.4870: lblock 3 mapped to illegal pblock 12 (length 1) [ 242.896123][T15797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.952250][T15797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.954746][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.059911][ T28] audit: type=1400 audit(2000000056.860:2377): avc: denied { ioctl } for pid=15831 comm="syz.1.4872" path="socket:[57185]" dev="sockfs" ino=57185 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 243.183585][T15816] loop2: detected capacity change from 0 to 512 [ 243.203618][T15797] team0: left promiscuous mode [ 243.253804][T15797] team_slave_0: left promiscuous mode [ 243.279640][T15816] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 243.289724][T15797] team_slave_1: left promiscuous mode [ 244.190316][T15849] loop3: detected capacity change from 0 to 512 [ 244.199063][T15849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.217156][T15849] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4880: invalid indirect mapped block 4294967295 (level 1) [ 244.234532][T15849] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 244.234654][T15849] EXT4-fs (loop3): Remounting filesystem read-only [ 244.243821][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 244.243843][ C1] EXT4-fs (loop3): initial error at time 2000000058: ext4_free_branches:1023: inode 11 [ 244.243893][ C1] EXT4-fs (loop3): last error at time 2000000058: ext4_free_branches:1023: inode 11 [ 244.282233][T15849] EXT4-fs (loop3): 2 truncates cleaned up [ 244.288713][T15849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.335530][T15849] EXT4-fs (loop3): shut down requested (1) [ 244.355260][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.370408][ T70] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.386474][ T70] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.396619][ T70] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.406498][T15857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4881'. [ 244.415883][ T70] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.469225][T15863] netlink: 'syz.3.4883': attribute type 1 has an invalid length. [ 244.507092][T15863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.563256][T15872] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4887'. [ 244.685455][T15878] syz_tun: entered allmulticast mode [ 244.692057][T15878] syz_tun: left allmulticast mode [ 244.903148][T15916] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.921867][T15918] netlink: 'syz.1.4909': attribute type 1 has an invalid length. [ 244.937524][T15918] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.958491][T15918] bond4: (slave bridge1): making interface the new active one [ 244.969403][T15918] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 245.108363][ T28] audit: type=1400 audit(2000000058.920:2378): avc: denied { ioctl } for pid=15925 comm="syz.1.4912" path="socket:[57826]" dev="sockfs" ino=57826 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 245.254117][T15940] loop2: detected capacity change from 0 to 1024 [ 245.267014][T15940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 245.286180][T15940] ext4 filesystem being mounted at /938/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.301810][T15939] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.4918: lblock 0 mapped to illegal pblock 0 (length 1) [ 245.316917][T15940] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.4918: lblock 0 mapped to illegal pblock 0 (length 1) [ 245.330981][T15940] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.4918: lblock 0 mapped to illegal pblock 0 (length 1) [ 245.372544][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 245.733471][T15974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.750999][T15970] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 245.859634][T15980] loop1: detected capacity change from 0 to 512 [ 245.925135][T15980] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.962884][T15980] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.4934: bad orphan inode 131083 [ 245.973420][T15980] loop1: lost filesystem error report for type 5 error -117 [ 245.974936][T15980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.046026][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.118447][ T28] audit: type=1326 audit(2000000059.930:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16003 comm="syz.3.4944" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bcaabc799 code=0x0 [ 246.272143][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4950'. [ 246.295116][ T28] audit: type=1326 audit(2000000060.100:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16022 comm="syz.1.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 246.319626][ T28] audit: type=1326 audit(2000000060.110:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16022 comm="syz.1.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 246.343436][ T28] audit: type=1326 audit(2000000060.110:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16022 comm="syz.1.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 246.370134][ T28] audit: type=1326 audit(2000000060.110:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16022 comm="syz.1.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 246.383265][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4950'. [ 246.394702][ T28] audit: type=1326 audit(2000000060.110:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16022 comm="syz.1.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 246.428253][ T28] audit: type=1326 audit(2000000060.180:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16022 comm="syz.1.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa11dc799 code=0x7ffc0000 [ 246.521243][T16029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16029 comm=syz.1.4953 [ 246.586135][T16033] loop1: detected capacity change from 0 to 128 [ 246.593174][T16033] EXT4-fs: Ignoring removed i_version option [ 246.601092][T16033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0003] [ 246.616368][T16033] System zones: 1-3, 19-19, 35-36 [ 246.630326][T16033] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.664780][T16033] ext4 filesystem being mounted at /963/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.692203][T16033] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 475318719 (only 1 groups) [ 246.743979][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.900842][T16049] syzkaller1: entered promiscuous mode [ 246.906589][T16049] syzkaller1: entered allmulticast mode [ 247.085484][T16058] loop3: detected capacity change from 0 to 512 [ 247.115333][T16058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.139600][T16058] ext4 filesystem being mounted at /1032/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.170149][T16068] netlink: 'syz.4.4969': attribute type 4 has an invalid length. [ 247.182878][T16068] netlink: 'syz.4.4969': attribute type 4 has an invalid length. [ 247.194361][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.727781][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 247.727856][ T28] audit: type=1400 audit(2000000061.540:2446): avc: denied { accept } for pid=16107 comm="syz.2.4987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.897005][T16145] bridge0: port 3(syz_tun) entered disabled state [ 248.918397][T16145] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.030668][T16145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.042110][T16145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.086436][T16145] bond0: left promiscuous mode [ 249.091356][T16145] bond_slave_0: left promiscuous mode [ 249.096950][T16145] bond_slave_1: left promiscuous mode [ 249.177887][T16154] netlink: 'syz.1.5007': attribute type 14 has an invalid length. [ 249.185985][ T3704] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.196495][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5007'. [ 249.224650][ T3704] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.247477][ T3704] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.294469][ T3704] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.347304][ T3704] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.373852][ T3704] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.404957][T16154] netlink: 'syz.1.5007': attribute type 14 has an invalid length. [ 249.424233][ T3704] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.426527][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5007'. [ 249.442901][ T3704] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.728689][T16193] loop3: detected capacity change from 0 to 1024 [ 249.747523][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5020'. [ 249.774268][T16193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.804609][T16200] loop1: detected capacity change from 0 to 512 [ 249.811752][T16193] ext4 filesystem being mounted at /1052/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.822511][T16200] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.845602][T16193] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.5022: lblock 0 mapped to illegal pblock 0 (length 1) [ 249.865771][T16202] loop2: detected capacity change from 0 to 512 [ 249.904581][T16200] EXT4-fs (loop1): 1 truncate cleaned up [ 249.910711][T16200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.928572][T16193] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 250.021324][T16193] EXT4-fs (loop3): This should not happen!! Data will be lost [ 250.021324][T16193] [ 250.094039][ T70] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 250.135135][ T70] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 250.150764][ T70] EXT4-fs (loop3): This should not happen!! Data will be lost [ 250.150764][ T70] [ 250.175635][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.194407][ T70] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 250.225094][ T70] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 250.267466][ T70] EXT4-fs (loop3): This should not happen!! Data will be lost [ 250.267466][ T70] [ 250.299591][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 250.430337][T16217] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 250.495587][T11065] syz_tun (unregistering): left allmulticast mode [ 250.513755][T11065] syz_tun (unregistering): left promiscuous mode [ 250.521222][T16226] loop3: detected capacity change from 0 to 4096 [ 250.532500][T11065] bridge0: port 3(syz_tun) entered disabled state [ 250.553621][T16226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.697816][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.056755][T16239] loop1: detected capacity change from 0 to 32768 [ 251.167473][T16258] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.174814][T16258] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.217405][T16258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.289435][ T3704] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.306707][ T3704] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.338138][ T3704] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.380522][ T3704] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.410498][ T3704] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.426995][ T3704] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.443573][ T3704] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.453121][ T3704] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.553473][T16246] chnl_net:caif_netlink_parms(): no params data found [ 251.617935][T16239] loop1: p1 p3 < > [ 251.776275][T16246] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.799222][T16280] loop3: detected capacity change from 0 to 512 [ 251.816015][T16246] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.835215][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 251.836177][ T5071] udevd[5071]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 251.854828][T16280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 251.874124][T16246] bridge_slave_0: entered allmulticast mode [ 251.875589][T16280] EXT4-fs (loop3): 1 truncate cleaned up [ 251.881519][T16246] bridge_slave_0: entered promiscuous mode [ 251.895453][T16280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.925440][T16280] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 251.935958][T16246] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.943120][ T28] audit: type=1400 audit(2000000065.740:2447): avc: denied { mounton } for pid=16279 comm="syz.3.5051" path="/1057/file2/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.967141][T16246] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.984026][T16246] bridge_slave_1: entered allmulticast mode [ 252.003239][T16246] bridge_slave_1: entered promiscuous mode [ 252.019947][ T3320] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 252.043354][ T3320] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 252.065117][T16246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.089440][T16246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.152061][T16246] team0: Port device team_slave_0 added [ 252.157867][ T28] audit: type=1400 audit(2000000065.960:2448): avc: denied { write } for pid=16284 comm="syz.1.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 252.181626][T16246] team0: Port device team_slave_1 added [ 252.212403][T16246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.217458][ T9096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.228528][T16246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.283770][T16246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.334725][T16246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.351870][T16246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.407161][T16246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.436253][T16246] hsr_slave_0: entered promiscuous mode [ 252.442404][T16246] hsr_slave_1: entered promiscuous mode [ 252.462744][T16246] debugfs: 'hsr0' already exists in 'hsr' [ 252.468658][T16246] Cannot create hsr debugfs directory [ 252.609328][T16246] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 252.630177][T16246] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 252.647827][T16246] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 252.658692][T16246] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 252.777308][T16246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.848831][T16246] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.867833][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.874938][ T3704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.919914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.927071][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.006378][T16295] chnl_net:caif_netlink_parms(): no params data found [ 253.089349][T16295] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.096765][T16295] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.104231][T16295] bridge_slave_0: entered allmulticast mode [ 253.110730][T16295] bridge_slave_0: entered promiscuous mode [ 253.117819][T16295] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.125001][T16295] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.132235][T16295] bridge_slave_1: entered allmulticast mode [ 253.139131][T16295] bridge_slave_1: entered promiscuous mode [ 253.157953][T16295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.169798][T16295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.190557][T16295] team0: Port device team_slave_0 added [ 253.205237][T16295] team0: Port device team_slave_1 added [ 253.257376][T16291] ================================================================== [ 253.265522][T16291] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 253.274146][T16291] [ 253.276486][T16291] write to 0xffff88811bb1d9a8 of 8 bytes by task 16293 on cpu 0: [ 253.284210][T16291] shmem_file_splice_read+0x470/0x600 [ 253.289609][T16291] splice_direct_to_actor+0x26e/0x670 [ 253.294995][T16291] do_splice_direct+0x119/0x1a0 [ 253.299874][T16291] do_sendfile+0x382/0x650 [ 253.304303][T16291] __x64_sys_sendfile64+0x105/0x150 [ 253.309509][T16291] x64_sys_call+0x2dc4/0x3020 [ 253.314199][T16291] do_syscall_64+0x12c/0x370 [ 253.318801][T16291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.324727][T16291] [ 253.327062][T16291] write to 0xffff88811bb1d9a8 of 8 bytes by task 16291 on cpu 1: [ 253.334803][T16291] shmem_file_splice_read+0x470/0x600 [ 253.340204][T16291] splice_direct_to_actor+0x26e/0x670 [ 253.345594][T16291] do_splice_direct+0x119/0x1a0 [ 253.350476][T16291] do_sendfile+0x382/0x650 [ 253.354909][T16291] __x64_sys_sendfile64+0x105/0x150 [ 253.360119][T16291] x64_sys_call+0x2dc4/0x3020 [ 253.364819][T16291] do_syscall_64+0x12c/0x370 [ 253.369454][T16291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.375387][T16291] [ 253.377716][T16291] value changed: 0x0000000000006188 -> 0x0000000000006189 [ 253.384846][T16291] [ 253.387181][T16291] Reported by Kernel Concurrency Sanitizer on: [ 253.393352][T16291] CPU: 1 UID: 0 PID: 16291 Comm: syz.7.5056 Tainted: G W syzkaller #0 PREEMPT(full) [ 253.404318][T16291] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 253.408131][T16291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.418207][T16291] ================================================================== [ 253.429904][ T28] audit: type=1400 audit(2000000067.240:2449): avc: denied { write } for pid=3303 comm="syz-executor" path="pipe:[643]" dev="pipefs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 253.544187][T16295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.551163][T16295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.599613][T16295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.735610][ T3704] bridge_slave_1: left allmulticast mode [ 253.741315][ T3704] bridge_slave_1: left promiscuous mode [ 253.747080][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.764243][ T3704] bridge_slave_0: left allmulticast mode [ 253.769898][ T3704] bridge_slave_0: left promiscuous mode [ 253.783835][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.836042][ T3704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.845890][ T3704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.855531][ T3704] bond0 (unregistering): Released all slaves [ 253.905466][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.918762][ T3704] team0 (unregistering): Port device team_slave_1 removed [ 253.929035][ T3704] team0 (unregistering): Port device team_slave_0 removed [ 254.318209][T16256] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.327456][T16256] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 254.335841][T16256] EXT4-fs (loop4): I/O error while writing superblock [ 254.347863][ T3704] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.358343][ T3704] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.368674][ T3704] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 254.418862][ T3704] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.429282][ T3704] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.439670][ T3704] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 254.497340][ T3704] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.508023][ T3704] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.518496][ T3704] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 254.586283][ T3704] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.596678][ T3704] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.607681][ T3704] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 254.872820][ T3704] bridge_slave_1: left allmulticast mode [ 254.878748][ T3704] bridge_slave_1: left promiscuous mode [ 254.884719][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.892502][ T3704] bridge_slave_0: left allmulticast mode [ 254.898400][ T3704] bridge_slave_0: left promiscuous mode [ 254.904136][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.912577][ T3704] bridge_slave_1: left allmulticast mode [ 254.918357][ T3704] bridge_slave_1: left promiscuous mode [ 254.924265][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.932045][ T3704] bridge_slave_0: left allmulticast mode [ 254.940237][ T3704] bridge_slave_0: left promiscuous mode [ 254.946049][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.015938][ T3704] bond3 (unregistering): (slave geneve2): Releasing active interface [ 255.065266][ T3704] bond4 (unregistering): (slave bridge1): Releasing active interface [ 255.115600][ T3704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.125409][ T3704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.135098][ T3704] bond0 (unregistering): Released all slaves [ 255.142572][ T3704] bond1 (unregistering): Released all slaves [ 255.151472][ T3704] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 255.161204][ T3704] bond2 (unregistering): Released all slaves [ 255.169538][ T3704] bond3 (unregistering): Released all slaves [ 255.178233][ T3704] bond4 (unregistering): Released all slaves [ 255.246670][ T3704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.256056][ T3704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.265195][ T3704] bond0 (unregistering): Released all slaves [ 255.313119][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.320647][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.328499][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.336128][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.346169][ T3704] hsr_slave_0: left promiscuous mode [ 255.351841][ T3704] hsr_slave_1: left promiscuous mode [ 255.357797][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.370017][ T3704] veth1_macvtap: left promiscuous mode [ 255.375821][ T3704] veth0_macvtap: left promiscuous mode [ 255.433993][ T3704] team0 (unregistering): Port device team_slave_1 removed [ 255.443369][ T3704] team0 (unregistering): Port device team_slave_0 removed [ 255.500776][ T3704] team0 (unregistering): Port device team_slave_1 removed [ 255.511333][ T3704] team0 (unregistering): Port device team_slave_0 removed [ 255.850130][ T3704] IPVS: stop unused estimator thread 0... [ 256.186368][ T3704] bridge_slave_1: left allmulticast mode [ 256.192110][ T3704] bridge_slave_1: left promiscuous mode [ 256.198352][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.206147][ T3704] bridge_slave_0: left allmulticast mode [ 256.211783][ T3704] bridge_slave_0: left promiscuous mode [ 256.217565][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.305511][ T3704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.315330][ T3704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.324926][ T3704] bond0 (unregistering): Released all slaves [ 256.357726][ T3704] hsr_slave_0: left promiscuous mode [ 256.363427][ T3704] hsr_slave_1: left promiscuous mode [ 256.369564][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.377191][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.443411][ T3704] team0 (unregistering): Port device team_slave_1 removed [ 256.457806][ T3704] team0 (unregistering): Port device team_slave_0 removed