last executing test programs: 49.812556034s ago: executing program 32 (id=609): r0 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 40.712461169s ago: executing program 33 (id=774): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000100)=""/41, 0x29) 39.182314353s ago: executing program 34 (id=780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "cb1883cd5ede02ce", "b0fb9bb76a01b55afd3e0a9a6231f29a", "34b63c89", "17219368e16fa796"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "25e0af6f52bb7edc", "7ec4e0b644bfdf51a2896fa41fa1717bea35535b84d810542e540415a69abaf9", "7c371401", "00000000b55500"}, 0x38) 37.548274278s ago: executing program 5 (id=816): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 37.366350926s ago: executing program 5 (id=820): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) 37.144569048s ago: executing program 5 (id=830): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x5d5e43) r1 = fcntl$dupfd(r0, 0x406, r0) unshare(0x6020400) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 37.075902866s ago: executing program 5 (id=831): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, 0x0, 0x0) 36.784927225s ago: executing program 5 (id=849): prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000140)='fdinfo/3\x00') 36.428944603s ago: executing program 5 (id=846): io_setup(0x2, &(0x7f0000001700)=0x0) r1 = eventfd2(0x0, 0x0) io_getevents(r0, 0x4, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0) io_submit(r0, 0x1, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_destroy(r0) 36.428802233s ago: executing program 35 (id=846): io_setup(0x2, &(0x7f0000001700)=0x0) r1 = eventfd2(0x0, 0x0) io_getevents(r0, 0x4, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0) io_submit(r0, 0x1, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_destroy(r0) 24.959576716s ago: executing program 7 (id=1085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 24.851306387s ago: executing program 7 (id=1087): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') 24.421509202s ago: executing program 7 (id=1096): r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) 24.35146745s ago: executing program 7 (id=1099): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) 24.175923069s ago: executing program 7 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 23.903374092s ago: executing program 7 (id=1107): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 23.867641635s ago: executing program 36 (id=1107): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 23.4914895s ago: executing program 6 (id=1117): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}}, 0x20}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") setxattr(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 23.397381824s ago: executing program 6 (id=1119): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.181445446s ago: executing program 6 (id=1120): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 23.168357024s ago: executing program 6 (id=1122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@sb={'sb', 0x3d, 0x1}}, {@lazytime}]}, 0x2, 0x467, &(0x7f0000000fc0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 22.968034759s ago: executing program 6 (id=1126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 22.678486818s ago: executing program 6 (id=1130): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1, 0x8}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 22.636813321s ago: executing program 37 (id=1130): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1, 0x8}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 18.503586351s ago: executing program 2 (id=1202): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x3c, r2, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}]}, 0x3c}}, 0x20) 18.476882227s ago: executing program 2 (id=1204): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES64=r0], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3080000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 18.428019579s ago: executing program 2 (id=1206): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 18.217748182s ago: executing program 2 (id=1211): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 18.177824605s ago: executing program 2 (id=1213): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010003704fe00"/20, @ANYRES32=r2, @ANYBLOB="c30407001b1cbf262000128008000100736974001400028008000200ac14141a"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 17.070426892s ago: executing program 2 (id=1240): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$TIOCMBIS(r2, 0x5416, 0x0) 17.015816432s ago: executing program 38 (id=1240): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$TIOCMBIS(r2, 0x5416, 0x0) 15.316570887s ago: executing program 4 (id=1268): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 15.242221943s ago: executing program 4 (id=1269): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x3c, r3, 0x7, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15.133906375s ago: executing program 4 (id=1270): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20004045}, 0x4084) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x300, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 15.077693885s ago: executing program 4 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe83, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 14.943570871s ago: executing program 4 (id=1275): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/14, 0xe}, 0x2}], 0x1, 0x12161, 0x0) 14.391184056s ago: executing program 4 (id=1286): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) 14.36033887s ago: executing program 39 (id=1286): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) 5.45693329s ago: executing program 1 (id=1491): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x48084) 5.147343866s ago: executing program 1 (id=1495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.260180231s ago: executing program 1 (id=1505): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 3.823070175s ago: executing program 3 (id=1514): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) 3.808564883s ago: executing program 3 (id=1515): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1, 0x3) 3.79520605s ago: executing program 3 (id=1516): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000006d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/125, 0x7d}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)}, 0x7ff}], 0x2, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.727822328s ago: executing program 3 (id=1518): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000003880)=""/4105, 0x1009}], 0x1, 0x0, 0x0, 0x0) 3.611041978s ago: executing program 3 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x60866}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3.239223403s ago: executing program 3 (id=1532): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x1, 0x8, 0x4, 0x5}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 3.239100233s ago: executing program 40 (id=1532): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0x1, 0x8, 0x4, 0x5}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 3.013377434s ago: executing program 9 (id=1536): pipe2(&(0x7f0000000080), 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) futex_waitv(&(0x7f0000009e80)=[{0x4, 0x0, 0x6}, {0x4, 0x0}], 0x2, 0x0, 0x0, 0x1) r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) time(0x0) 2.952678754s ago: executing program 9 (id=1537): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r0 = syz_io_uring_setup(0x4dc, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.693117938s ago: executing program 9 (id=1542): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x7, 0x1, "9f"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x7, 0x1, 'r'}, 0x9) 2.659944323s ago: executing program 9 (id=1543): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioprio_get$pid(0x3, 0x0) 2.64455043s ago: executing program 9 (id=1544): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000a00)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.547476713s ago: executing program 9 (id=1547): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 2.193228822s ago: executing program 1 (id=1554): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) 1.980702474s ago: executing program 1 (id=1557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) sendmmsg$inet(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x0) 1.89615495s ago: executing program 1 (id=1560): truncate(0x0, 0x2fffffd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 1.200706978s ago: executing program 8 (id=1568): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) 1.166021202s ago: executing program 0 (id=1569): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket(0x2d, 0x1, 0x43) 1.089711229s ago: executing program 0 (id=1570): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x19101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbffffbffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.086343949s ago: executing program 8 (id=1571): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003000)={{r0}, &(0x7f0000002ec0), &(0x7f0000002fc0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1, r0}, 0x6) 1.062224304s ago: executing program 8 (id=1572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$binfmt_misc(r1, &(0x7f00000002c0)="0f70cf", 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.010939016s ago: executing program 0 (id=1573): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xc) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0xfffffffffffffffd, 0x58) 996.960183ms ago: executing program 8 (id=1574): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in6=@empty, 0x0, 0xfffe, 0x4e24, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x2, 0x800000003, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x32}, 0x2, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x1, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) close(0x3) 962.567447ms ago: executing program 0 (id=1575): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@init_itable}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@lazytime}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x1c8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r2, 0x10, 0x7, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xea, 0x18, 0x0, 0xfffffffffe000001}) 914.790889ms ago: executing program 8 (id=1576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 910.694198ms ago: executing program 0 (id=1577): io_setup(0x1, &(0x7f0000000b80)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x34}}, 0x44084) io_setup(0x2, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000280)={0x1900000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x6}, 0x0) 5.5208ms ago: executing program 8 (id=1578): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x2) setxattr(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0xc7) 0s ago: executing program 0 (id=1579): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) kernel console output (not intermixed with test programs): tdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.706692][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.735634][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.750281][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.762111][ T28] audit: type=1400 audit(1772843829.923:449): avc: denied { mounton } for pid=5096 comm="syz-executor" path="/root/syzkaller.vVnBWU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 55.932285][ T5345] loop3: detected capacity change from 0 to 512 [ 55.940143][ T5342] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 55.956243][ T5345] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.984638][ T5342] bond2 (unregistering): Released all slaves [ 56.144055][ T5358] netlink: 'syz.0.677': attribute type 9 has an invalid length. [ 56.152197][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 56.168727][ T5358] netlink: 'syz.0.677': attribute type 9 has an invalid length. [ 56.188291][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 56.360377][ T28] audit: type=1326 audit(1772843830.513:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.0.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a9bc799 code=0x0 [ 56.423066][ T28] audit: type=1400 audit(1772843830.583:451): avc: denied { watch watch_reads } for pid=5378 comm="syz.3.685" path="/157" dev="tmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.587112][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 56.596873][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'. [ 56.609844][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 56.669970][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 56.690284][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'. [ 56.700306][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 56.788237][ T5410] pim6reg: entered allmulticast mode [ 56.814145][ T5410] syz_tun: entered allmulticast mode [ 56.821846][ T5410] pim6reg: left allmulticast mode [ 56.835459][ T5410] syz_tun: left allmulticast mode [ 56.892571][ T5424] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.907413][ T5428] loop1: detected capacity change from 0 to 128 [ 56.934474][ T5428] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.966404][ T5428] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.031235][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.132329][ T5459] loop1: detected capacity change from 0 to 512 [ 57.153334][ T5459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.168270][ T5459] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.383625][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.425831][ T5482] loop4: detected capacity change from 0 to 128 [ 57.456562][ T5484] loop4: detected capacity change from 0 to 512 [ 57.483485][ T5484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.498031][ T5484] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.567671][ T5489] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #19: comm syz.4.717: corrupted inode contents [ 57.579533][ T5489] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 57.579921][ T5489] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #19: comm syz.4.717: mark_inode_dirty error [ 57.602545][ T5489] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 57.602792][ T5489] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #19: comm syz.4.717: corrupted inode contents [ 57.624119][ T5489] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 57.624356][ T5489] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #19: comm syz.4.717: mark_inode_dirty error [ 57.645508][ T5489] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 57.645965][ T5489] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #19: comm syz.4.717: mark inode dirty (error -117) [ 57.670319][ T5489] loop4: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 57.670565][ T5489] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 57.689968][ T5491] loop3: detected capacity change from 0 to 512 [ 57.710533][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.730380][ T5491] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #12: comm syz.3.718: corrupted in-inode xattr: bad e_name length [ 57.744849][ T5491] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 57.746357][ T5491] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.718: couldn't read orphan inode 12 (err -117) [ 57.755520][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 57.755538][ C1] EXT4-fs (loop3): initial error at time 1772843831: ext4_iget_extra_inode:5025: inode 12 [ 57.755578][ C1] EXT4-fs (loop3): last error at time 1772843831: ext4_iget_extra_inode:5025: inode 12 [ 57.799192][ T5491] loop3: lost filesystem error report for type 5 error -117 [ 57.800288][ T5491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.204869][ T5500] loop5: detected capacity change from 0 to 512 [ 58.213957][ T5500] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.227650][ T5500] EXT4-fs (loop5): 1 orphan inode deleted [ 58.236896][ T5500] EXT4-fs (loop5): 1 truncate cleaned up [ 58.250246][ T5500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.611565][ T5096] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.833268][ T5527] capability: warning: `syz.5.735' uses 32-bit capabilities (legacy support in use) [ 60.399040][ T5475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.408129][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 60.444413][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.735583][ T5596] loop1: detected capacity change from 0 to 512 [ 60.762624][ T5596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.843943][ T5596] EXT4-fs (loop1): 1 truncate cleaned up [ 60.850084][ T5596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.882538][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 60.882552][ T28] audit: type=1400 audit(1772843835.043:461): avc: denied { rename } for pid=5595 comm="syz.1.762" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.882695][ T5596] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.1.762: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 60.941889][ T5596] EXT4-fs (loop1): Remounting filesystem read-only [ 60.948578][ T5596] EXT4-fs warning (device loop1): ext4_rename_delete:3729: inode #2: comm syz.1.762: Deleting old file: nlink 5, error=-117 [ 60.963367][ T28] audit: type=1400 audit(1772843835.043:462): avc: denied { rmdir } for pid=5595 comm="syz.1.762" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.004653][ T28] audit: type=1400 audit(1772843835.133:463): avc: denied { add_name } for pid=5595 comm="syz.1.762" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.038400][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.246362][ T28] audit: type=1400 audit(1772843835.403:464): avc: denied { mount } for pid=5617 comm="syz.3.769" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.279621][ T28] audit: type=1400 audit(1772843835.433:465): avc: denied { mounton } for pid=5617 comm="syz.3.769" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 61.336929][ T28] audit: type=1400 audit(1772843835.433:466): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.390633][ T5621] loop4: detected capacity change from 0 to 128 [ 61.424882][ T5621] syz.4.772: attempt to access beyond end of device [ 61.424882][ T5621] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 61.440242][ T5621] syz.4.772: attempt to access beyond end of device [ 61.440242][ T5621] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 61.469771][ T5621] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 61.490793][ T5621] syz.4.772: attempt to access beyond end of device [ 61.490793][ T5621] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 61.514574][ T5621] syz.4.772: attempt to access beyond end of device [ 61.514574][ T5621] loop4: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 61.537745][ T5621] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 61.547425][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.551651][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.567766][ T5621] syz.4.772: attempt to access beyond end of device [ 61.567766][ T5621] loop4: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 61.582224][ T5621] syz.4.772: attempt to access beyond end of device [ 61.582224][ T5621] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 61.587168][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.597855][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.629653][ T5621] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 61.650901][ T5621] syz.4.772: attempt to access beyond end of device [ 61.650901][ T5621] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 61.671118][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.684244][ T5621] syz.4.772: attempt to access beyond end of device [ 61.684244][ T5621] loop4: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 61.694070][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.706944][ T5621] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 61.724684][ T5621] syz.4.772: attempt to access beyond end of device [ 61.724684][ T5621] loop4: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 61.739126][ T5624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.773'. [ 61.751517][ T5621] syz.4.772: attempt to access beyond end of device [ 61.751517][ T5621] loop4: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 61.766082][ T5621] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 61.777113][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.787730][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.799280][ T5621] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 61.823826][ T5621] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 61.841287][ T5621] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 61.872413][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.890633][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.901854][ T5621] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 61.911949][ T5621] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 61.946436][ T5628] chnl_net:caif_netlink_parms(): no params data found [ 62.032966][ T30] bridge_slave_1: left allmulticast mode [ 62.038656][ T30] bridge_slave_1: left promiscuous mode [ 62.044329][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.052206][ T30] bridge_slave_0: left allmulticast mode [ 62.057892][ T30] bridge_slave_0: left promiscuous mode [ 62.068454][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.149783][ T3586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.269722][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.291774][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.303891][ T30] bond0 (unregistering): Released all slaves [ 62.314170][ T5663] loop1: detected capacity change from 0 to 1024 [ 62.318713][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.327812][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.335397][ T5628] bridge_slave_0: entered allmulticast mode [ 62.342094][ T5628] bridge_slave_0: entered promiscuous mode [ 62.350469][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.358902][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.366866][ T5628] bridge_slave_1: entered allmulticast mode [ 62.373840][ T5628] bridge_slave_1: entered promiscuous mode [ 62.380174][ T5663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.400605][ T30] hsr_slave_0: left promiscuous mode [ 62.406468][ T30] hsr_slave_1: left promiscuous mode [ 62.412441][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.420221][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.427953][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.435566][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.447146][ T30] veth1_macvtap: left promiscuous mode [ 62.452760][ T30] veth0_macvtap: left promiscuous mode [ 62.458496][ T30] veth1_vlan: left promiscuous mode [ 62.464255][ T30] veth0_vlan: left promiscuous mode [ 62.469643][ T5663] loop1: detected capacity change from 1024 to 0 [ 62.470156][ C1] I/O error, dev loop1, sector 32 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 62.485723][ T5668] EXT4-fs error (device loop1): __ext4_find_entry:1615: inode #2: comm syz.1.778: reading directory lblock 0 [ 62.502588][ T5668] EXT4-fs (loop1): I/O error while writing superblock [ 62.583251][ T5417] EXT4-fs error (device loop1): ext4_get_inode_loc:4920: inode #2: block 5: comm syz.1.702: unable to read itable block [ 62.611151][ T5417] EXT4-fs (loop1): I/O error while writing superblock [ 62.625043][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.634277][ T5417] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: IO failure [ 62.644423][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.653537][ T5417] EXT4-fs (loop1): I/O error while writing superblock [ 62.667886][ T5417] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.702: mark_inode_dirty error [ 62.684635][ T5628] team0: Port device team_slave_0 added [ 62.691940][ T5628] team0: Port device team_slave_1 added [ 62.699853][ T5417] EXT4-fs (loop1): I/O error while writing superblock [ 62.716252][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.723641][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.723755][ T56] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 62.750573][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.776476][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.783658][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.794019][ T56] EXT4-fs (loop1): I/O error while writing superblock [ 62.824572][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.835880][ T5417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.846616][ T5417] EXT4-fs (loop1): I/O error while writing superblock [ 62.887285][ T5628] hsr_slave_0: entered promiscuous mode [ 62.894881][ T5628] hsr_slave_1: entered promiscuous mode [ 62.901526][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 62.907255][ T5628] Cannot create hsr debugfs directory [ 62.983884][ T30] IPVS: stop unused estimator thread 0... [ 63.010990][ T5628] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 63.028051][ T5628] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 63.036865][ T5628] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 63.052878][ T5628] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 63.090936][ T28] audit: type=1326 audit(1772843837.243:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81720c799 code=0x7ffc0000 [ 63.146428][ T28] audit: type=1326 audit(1772843837.243:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81720c799 code=0x7ffc0000 [ 63.172021][ T28] audit: type=1326 audit(1772843837.243:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb81720c799 code=0x7ffc0000 [ 63.176920][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.200670][ T28] audit: type=1326 audit(1772843837.243:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5694 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81720c799 code=0x7ffc0000 [ 63.271006][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.311106][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.318185][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.341606][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.348692][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.517064][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.549730][ T5752] sctp: [Deprecated]: syz.4.791 (pid 5752) Use of int in max_burst socket option deprecated. [ 63.549730][ T5752] Use struct sctp_assoc_value instead [ 63.590396][ T5709] chnl_net:caif_netlink_parms(): no params data found [ 63.687507][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.694968][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.712005][ T5709] bridge_slave_0: entered allmulticast mode [ 63.722794][ T5709] bridge_slave_0: entered promiscuous mode [ 63.740605][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.747910][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.758146][ T5709] bridge_slave_1: entered allmulticast mode [ 63.768986][ T5709] bridge_slave_1: entered promiscuous mode [ 63.793074][ T5709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.803730][ T5709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.838981][ T5709] team0: Port device team_slave_0 added [ 63.845829][ T5709] team0: Port device team_slave_1 added [ 63.862278][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.869337][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.901227][ T5709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.918255][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.925450][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.953692][ T5709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.991510][ T5709] hsr_slave_0: entered promiscuous mode [ 63.997590][ T5709] hsr_slave_1: entered promiscuous mode [ 64.003777][ T5709] debugfs: 'hsr0' already exists in 'hsr' [ 64.009904][ T5709] Cannot create hsr debugfs directory [ 64.021340][ T5628] veth0_vlan: entered promiscuous mode [ 64.031690][ T5628] veth1_vlan: entered promiscuous mode [ 64.081818][ T5628] veth0_macvtap: entered promiscuous mode [ 64.095374][ T5628] veth1_macvtap: entered promiscuous mode [ 64.116966][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.131330][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.146223][ T3456] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.155105][ T3456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.164183][ T5709] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 64.174770][ T5709] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 64.184132][ T3456] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.192991][ T3456] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.205220][ T5709] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 64.215848][ T5709] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 64.222605][ T3586] Bluetooth: hci0: command 0x1003 tx timeout [ 64.228592][ T5561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.258692][ T5806] sctp: [Deprecated]: syz.5.802 (pid 5806) Use of int in max_burst socket option deprecated. [ 64.258692][ T5806] Use struct sctp_assoc_value instead [ 64.340546][ T5709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.352272][ T5709] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.371941][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.379345][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.417810][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.424929][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.563961][ T5709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.709206][ T5850] netlink: zone id is out of range [ 64.800988][ T5709] veth0_vlan: entered promiscuous mode [ 64.818979][ T5709] veth1_vlan: entered promiscuous mode [ 64.884653][ T5709] veth0_macvtap: entered promiscuous mode [ 64.899490][ T5709] veth1_macvtap: entered promiscuous mode [ 64.921635][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.969997][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.003701][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.016470][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.035063][ T5880] loop6: detected capacity change from 0 to 1024 [ 65.054852][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.070425][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.088500][ T5880] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.110393][ T5880] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 65.120004][ T5880] EXT4-fs (loop6): orphan cleanup on readonly fs [ 65.132497][ T5880] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.825: Invalid inode table block 0 in block_group 0 [ 65.146795][ T5889] loop0: detected capacity change from 0 to 1024 [ 65.155000][ T5880] loop6: lost filesystem error report for type 5 error -117 [ 65.159621][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 65.173618][ C0] EXT4-fs (loop6): initial error at time 1772843839: __ext4_get_inode_loc:4782 [ 65.182726][ C0] EXT4-fs (loop6): last error at time 1772843839: __ext4_get_inode_loc:4782 [ 65.193987][ T5880] EXT4-fs (loop6): Remounting filesystem read-only [ 65.215567][ T5880] EXT4-fs (loop6): 1 truncate cleaned up [ 65.235716][ T5889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.249430][ T5880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.249510][ T5891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.269075][ T5898] loop5: detected capacity change from 0 to 1024 [ 65.315806][ T5898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.331881][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.373896][ T5898] loop5: detected capacity change from 1024 to 0 [ 65.381884][ C1] I/O error, dev loop5, sector 24 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 65.408898][ T5628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.414860][ T5898] EXT4-fs error (device loop5): __ext4_find_entry:1615: inode #2: comm syz.5.831: reading directory lblock 0 [ 65.431703][ T5898] EXT4-fs (loop5): I/O error while writing superblock [ 65.461349][ T5910] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 65.492644][ T5919] veth1_to_bridge: entered promiscuous mode [ 65.501435][ T5919] veth1_to_bridge: left promiscuous mode [ 65.538668][ T5436] EXT4-fs error (device loop5): ext4_get_inode_loc:4920: inode #2: block 5: comm syz.5.708: unable to read itable block [ 65.552240][ T5436] EXT4-fs (loop5): I/O error while writing superblock [ 65.559064][ T5436] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: IO failure [ 65.575584][ T5436] EXT4-fs (loop5): I/O error while writing superblock [ 65.577874][ T5923] rdma_op ffff88813cbf9980 conn xmit_rdma 0000000000000000 [ 65.591298][ T5436] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.708: mark_inode_dirty error [ 65.602605][ T5436] EXT4-fs (loop5): I/O error while writing superblock [ 65.609981][ T41] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u8:2: unable to read itable block [ 65.624074][ T41] EXT4-fs (loop5): I/O error while writing superblock [ 65.632536][ T5436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.642777][ T5436] EXT4-fs (loop5): I/O error while writing superblock [ 65.853716][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.893743][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 65.893758][ T28] audit: type=1400 audit(1772843840.053:525): avc: denied { connect } for pid=5964 comm="syz.6.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.931036][ T28] audit: type=1400 audit(1772843840.083:526): avc: denied { setopt } for pid=5964 comm="syz.6.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.951033][ T28] audit: type=1400 audit(1772843840.083:527): avc: denied { ioctl } for pid=5964 comm="syz.6.848" path="socket:[13044]" dev="sockfs" ino=13044 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.981152][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.997592][ T5976] loop6: detected capacity change from 0 to 512 [ 66.042976][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.054960][ T5976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.083998][ T5976] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.172977][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.271038][ T5991] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #19: comm syz.6.853: corrupted inode contents [ 66.308348][ T5991] loop6: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 66.308548][ T5991] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #19: comm syz.6.853: mark_inode_dirty error [ 66.330123][ T5991] loop6: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 66.330691][ T5991] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #19: comm syz.6.853: corrupted inode contents [ 66.358440][ T5991] loop6: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 66.358603][ T5991] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #19: comm syz.6.853: mark_inode_dirty error [ 66.360715][ T30] bridge_slave_1: left allmulticast mode [ 66.369459][ T5991] loop6: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 66.386057][ T5991] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #19: comm syz.6.853: mark inode dirty (error -117) [ 66.407039][ T30] bridge_slave_1: left promiscuous mode [ 66.407689][ T5991] loop6: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -117 [ 66.413450][ T5991] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 66.415839][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.443869][ T30] bridge_slave_0: left allmulticast mode [ 66.454360][ T30] bridge_slave_0: left promiscuous mode [ 66.469183][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.490812][ T5628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.603000][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.613805][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.628264][ T30] bond0 (unregistering): Released all slaves [ 66.667536][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 66.707453][ T30] hsr_slave_0: left promiscuous mode [ 66.714955][ T30] hsr_slave_1: left promiscuous mode [ 66.723506][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.731325][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.739077][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.748209][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.759796][ T30] veth1_macvtap: left promiscuous mode [ 66.765503][ T30] veth0_macvtap: left promiscuous mode [ 66.790833][ T30] veth1_vlan: left promiscuous mode [ 66.796263][ T30] veth0_vlan: left promiscuous mode [ 67.261642][ T30] team0 (unregistering): Port device team_slave_1 removed [ 67.271353][ T30] team0 (unregistering): Port device team_slave_0 removed [ 67.380622][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.388925][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.396690][ T5970] bridge_slave_0: entered allmulticast mode [ 67.403356][ T5970] bridge_slave_0: entered promiscuous mode [ 67.413157][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.420554][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.427941][ T5970] bridge_slave_1: entered allmulticast mode [ 67.434794][ T5970] bridge_slave_1: entered promiscuous mode [ 67.453840][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.475730][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.488072][ T28] audit: type=1400 audit(1772843841.643:528): avc: denied { read } for pid=6079 comm="syz.7.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.508734][ T3586] Bluetooth: hci0: command 0x1003 tx timeout [ 67.515122][ T5561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.536542][ T5970] team0: Port device team_slave_0 added [ 67.546331][ T5970] team0: Port device team_slave_1 added [ 67.562986][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.581562][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.645484][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.662826][ T6095] loop6: detected capacity change from 0 to 128 [ 67.681444][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.691447][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.718176][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.764426][ T6101] xt_hashlimit: size too large, truncated to 1048576 [ 67.777080][ T6105] loop6: detected capacity change from 0 to 1024 [ 67.822761][ T6105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.838411][ T5970] hsr_slave_0: entered promiscuous mode [ 67.857893][ T5970] hsr_slave_1: entered promiscuous mode [ 67.864726][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 67.873405][ T5628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.884327][ T5970] Cannot create hsr debugfs directory [ 67.958382][ T6114] loop6: detected capacity change from 0 to 512 [ 67.992596][ T6114] EXT4-fs: Ignoring removed i_version option [ 68.045280][ T6114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.061333][ T6119] xt_hashlimit: size too large, truncated to 1048576 [ 68.107037][ T5970] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 68.118276][ T5970] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 68.154530][ T5970] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 68.177942][ T5628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.200010][ T5970] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 68.249347][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.256468][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.263817][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.270922][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.282818][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 68.293314][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 68.332867][ T28] audit: type=1400 audit(1772843842.493:529): avc: denied { watch } for pid=6151 comm="syz.6.886" path="/25/file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.372223][ T6151] Process accounting resumed [ 68.390526][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 68.402227][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 68.409918][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.419143][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.438841][ T30] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.458376][ T23] IPVS: starting estimator thread 0... [ 68.476710][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.494350][ T30] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.516980][ T30] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.539492][ T28] audit: type=1400 audit(1772843842.693:530): avc: denied { connect } for pid=6178 comm="syz.4.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.563505][ T30] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.572311][ T6167] IPVS: using max 2496 ests per chain, 124800 per kthread [ 68.575368][ T12] tipc: Subscription rejected, illegal request [ 68.602966][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.624862][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.632015][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.663721][ T5970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.675255][ T5970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.692137][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.699453][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.830700][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.848079][ T28] audit: type=1400 audit(1772843843.003:531): avc: denied { firmware_load } for pid=6207 comm="syz.4.900" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 68.993822][ T28] audit: type=1400 audit(1772843843.153:532): avc: denied { connect } for pid=6222 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.044825][ T28] audit: type=1400 audit(1772843843.183:533): avc: denied { bind } for pid=6222 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.048840][ T6226] bridge_slave_0: left allmulticast mode [ 69.071565][ T6226] bridge_slave_0: left promiscuous mode [ 69.090482][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.101698][ T6226] bridge_slave_1: left allmulticast mode [ 69.107355][ T6226] bridge_slave_1: left promiscuous mode [ 69.113287][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.124366][ T6226] bond0: (slave bond_slave_0): Releasing backup interface [ 69.136158][ T6226] bond0: (slave bond_slave_1): Releasing backup interface [ 69.152558][ T6226] team0: Port device team_slave_0 removed [ 69.163441][ T6226] team0: Port device team_slave_1 removed [ 69.170537][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.177966][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.187475][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.195159][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.206204][ T6226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 69.246331][ T5970] veth0_vlan: entered promiscuous mode [ 69.258581][ T5970] veth1_vlan: entered promiscuous mode [ 69.289943][ T5970] veth0_macvtap: entered promiscuous mode [ 69.302206][ T5970] veth1_macvtap: entered promiscuous mode [ 69.318523][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.328857][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.358249][ T30] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.367513][ T30] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.381027][ T30] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.393168][ T6243] loop6: detected capacity change from 0 to 1024 [ 69.400433][ T28] audit: type=1400 audit(1772843843.563:534): avc: denied { write } for pid=6244 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 69.407268][ T6243] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.421258][ T30] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465572][ T6243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.640391][ T5628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.022871][ T6300] netlink: 52 bytes leftover after parsing attributes in process `syz.7.928'. [ 70.040520][ T6294] loop6: detected capacity change from 0 to 8192 [ 70.129976][ T6308] mmap: syz.7.931 (6308) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.224015][ T6315] loop6: detected capacity change from 0 to 128 [ 70.442765][ T6325] loop4: detected capacity change from 0 to 512 [ 70.469946][ T6325] EXT4-fs: Ignoring removed i_version option [ 70.473297][ T6327] loop7: detected capacity change from 0 to 128 [ 70.495144][ T6325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.528115][ T41] bio_check_eod: 21 callbacks suppressed [ 70.528130][ T41] kworker/u8:2: attempt to access beyond end of device [ 70.528130][ T41] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 70.597675][ T41] kworker/u8:2: attempt to access beyond end of device [ 70.597675][ T41] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 70.611425][ T41] kworker/u8:2: attempt to access beyond end of device [ 70.611425][ T41] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 70.625037][ T41] kworker/u8:2: attempt to access beyond end of device [ 70.625037][ T41] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 70.630542][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.638581][ T41] kworker/u8:2: attempt to access beyond end of device [ 70.638581][ T41] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 70.661175][ T41] kworker/u8:2: attempt to access beyond end of device [ 70.661175][ T41] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 70.707702][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.944'. [ 70.722867][ T41] kworker/u8:2: attempt to access beyond end of device [ 70.722867][ T41] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 70.736940][ T41] kworker/u8:2: attempt to access beyond end of device [ 70.736940][ T41] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 70.780815][ T41] kworker/u8:2: attempt to access beyond end of device [ 70.780815][ T41] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 70.804584][ T6343] loop7: detected capacity change from 0 to 512 [ 70.849608][ T41] kworker/u8:2: attempt to access beyond end of device [ 70.849608][ T41] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 70.859691][ T6343] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 70.894373][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.939'. [ 70.910623][ T6343] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 70.929626][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 70.936107][ C0] EXT4-fs (loop7): initial error at time 1772843845: mb_free_blocks:2047: inode 11: block 64 [ 70.946544][ C0] EXT4-fs (loop7): last error at time 1772843845: mb_free_blocks:2047: inode 11: block 64 [ 70.973521][ T6343] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #11: comm syz.7.946: corrupted inode contents [ 70.985313][ T6343] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.985651][ T6343] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #11: comm syz.7.946: mark_inode_dirty error [ 71.006455][ T6343] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.006698][ T6343] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.946: invalid indirect mapped block 1 (level 1) [ 71.030272][ T6343] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.030430][ T6343] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #11: comm syz.7.946: corrupted inode contents [ 71.051523][ T6343] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.051687][ T6343] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 71.069839][ T6343] loop7: lost filesystem error report for type 5 error -117 [ 71.080780][ T6343] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #11: comm syz.7.946: corrupted inode contents [ 71.110684][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 71.110700][ T28] audit: type=1326 audit(1772843845.273:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6291 comm="syz.8.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b27b56517 code=0x7fc00000 [ 71.140337][ T6343] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.140488][ T6343] EXT4-fs error (device loop7): ext4_truncate:4587: inode #11: comm syz.7.946: mark_inode_dirty error [ 71.175342][ T6358] loop8: detected capacity change from 0 to 128 [ 71.192749][ T6343] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 71.193008][ T6358] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.226308][ T6358] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.253081][ T6343] loop7: lost filesystem error report for type 5 error -117 [ 71.253336][ T6343] EXT4-fs (loop7): 1 truncate cleaned up [ 71.298527][ T6361] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.320299][ T6343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.341913][ T6361] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.382763][ T28] audit: type=1400 audit(1772843845.543:541): avc: denied { remount } for pid=6360 comm="syz.4.951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.406541][ T6361] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.408469][ T5970] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.456427][ T5709] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.506467][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.651514][ T28] audit: type=1400 audit(1772843845.813:542): avc: denied { bind } for pid=6391 comm="syz.0.964" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.673150][ T28] audit: type=1400 audit(1772843845.813:543): avc: denied { name_bind } for pid=6391 comm="syz.0.964" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 71.781187][ T28] audit: type=1400 audit(1772843845.943:544): avc: denied { create } for pid=6403 comm="syz.8.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 71.889432][ T6414] netlink: 'syz.8.974': attribute type 83 has an invalid length. [ 71.904971][ T28] audit: type=1326 audit(1772843846.063:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.7.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 71.937784][ T28] audit: type=1326 audit(1772843846.063:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.7.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 71.969614][ T28] audit: type=1326 audit(1772843846.063:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.7.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 72.012872][ T28] audit: type=1400 audit(1772843846.063:548): avc: denied { setattr } for pid=6411 comm="syz.7.973" name="UDPLITEv6" dev="sockfs" ino=15742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.039618][ T28] audit: type=1326 audit(1772843846.063:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6411 comm="syz.7.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 72.189637][ T6422] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 72.261369][ T6441] xt_hashlimit: size too large, truncated to 1048576 [ 72.313334][ T6447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'. [ 72.337276][ T6447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'. [ 72.383545][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 72.558166][ T6449] ip6gre1: entered promiscuous mode [ 72.563458][ T6449] ip6gre1: entered allmulticast mode [ 73.054770][ T6475] set_capacity_and_notify: 1 callbacks suppressed [ 73.054787][ T6475] loop6: detected capacity change from 0 to 512 [ 73.170187][ T6475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.207744][ T6475] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.242723][ T6475] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 93 vs 96 free clusters [ 73.298831][ T6475] EXT4-fs (loop6): Remounting filesystem read-only [ 73.358573][ T6487] xt_hashlimit: size too large, truncated to 1048576 [ 73.425582][ T5628] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.580102][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 73.608397][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 73.616075][ T3368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 73.685597][ T6495] loop7: detected capacity change from 0 to 1024 [ 73.702559][ T6495] EXT4-fs: quotafile must be on filesystem root [ 74.089643][ T3368] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.619908][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 74.910151][ T6544] netlink: 'syz.0.1025': attribute type 20 has an invalid length. [ 74.941526][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 74.941656][ T6544] netlink: 'syz.0.1025': attribute type 20 has an invalid length. [ 74.941667][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 75.086729][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1032'. [ 75.090156][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1033'. [ 75.133430][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 75.144340][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1033'. [ 75.151347][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1032'. [ 75.168698][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 75.171938][ T41] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.189059][ T56] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.189346][ T6581] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1036'. [ 75.204613][ T56] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.232360][ T56] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.172958][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 76.172973][ T28] audit: type=1400 audit(1772843850.333:564): avc: denied { ioctl } for pid=6677 comm="syz.7.1060" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 76.717437][ T6605] kexec: Could not allocate control_code_buffer [ 76.781824][ T6699] loop0: detected capacity change from 0 to 128 [ 76.788662][ T6699] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 76.818307][ T6699] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.830922][ T6699] ext2 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.854798][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.943560][ T3402] IPVS: starting estimator thread 0... [ 76.958994][ T6716] netlink: 'syz.0.1076': attribute type 10 has an invalid length. [ 76.973771][ T6716] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1076'. [ 76.985106][ T6716] bond0: entered promiscuous mode [ 76.997581][ T6716] bond_slave_0: entered promiscuous mode [ 77.004530][ T6716] bond_slave_1: entered promiscuous mode [ 77.014148][ T6716] bridge0: port 3(bond0) entered blocking state [ 77.024753][ T6716] bridge0: port 3(bond0) entered disabled state [ 77.033002][ T6716] bond0: entered allmulticast mode [ 77.038609][ T6716] bond_slave_0: entered allmulticast mode [ 77.049641][ T6717] IPVS: using max 2832 ests per chain, 141600 per kthread [ 77.060796][ T6708] loop6: detected capacity change from 0 to 32768 [ 77.070649][ T6716] bond_slave_1: entered allmulticast mode [ 77.089835][ T6716] bridge0: port 3(bond0) entered blocking state [ 77.095037][ T28] audit: type=1326 audit(1772843851.253:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.7.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 77.096543][ T6716] bridge0: port 3(bond0) entered forwarding state [ 77.123701][ T28] audit: type=1326 audit(1772843851.253:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.7.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 77.154279][ T28] audit: type=1326 audit(1772843851.253:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.7.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 77.178890][ T6708] loop6: p1 p3 < > [ 77.185527][ T28] audit: type=1326 audit(1772843851.253:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.7.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 77.258149][ T28] audit: type=1326 audit(1772843851.253:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.7.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 77.340844][ T6735] netlink: 'syz.8.1083': attribute type 12 has an invalid length. [ 77.356790][ T28] audit: type=1326 audit(1772843851.253:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.7.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 77.390398][ T6740] loop0: detected capacity change from 0 to 512 [ 77.395791][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 77.407724][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 77.425485][ T6740] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.434799][ T28] audit: type=1326 audit(1772843851.253:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.7.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 77.475058][ T6740] EXT4-fs (loop0): 1 truncate cleaned up [ 77.487484][ T6740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.510515][ T28] audit: type=1326 audit(1772843851.253:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.7.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5554c799 code=0x7ffc0000 [ 77.535952][ T28] audit: type=1400 audit(1772843851.473:573): avc: denied { listen } for pid=6731 comm="syz.0.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.686343][ T6761] netlink: 'syz.4.1093': attribute type 10 has an invalid length. [ 77.708037][ T6761] bond0: entered promiscuous mode [ 77.711946][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.713749][ T6761] bond_slave_0: entered promiscuous mode [ 77.729130][ T6761] bond_slave_1: entered promiscuous mode [ 77.737301][ T6761] bridge0: port 3(bond0) entered blocking state [ 77.756743][ T6752] loop7: detected capacity change from 0 to 32768 [ 77.777699][ T6761] bridge0: port 3(bond0) entered disabled state [ 77.788490][ T6761] bond0: entered allmulticast mode [ 77.796530][ T6761] bond_slave_0: entered allmulticast mode [ 77.802692][ T6761] bond_slave_1: entered allmulticast mode [ 77.808730][ T3301] loop7: p1 p3 < > [ 77.816644][ T6752] loop7: p1 p3 < > [ 77.823419][ T6761] bridge0: port 3(bond0) entered blocking state [ 77.830078][ T6761] bridge0: port 3(bond0) entered forwarding state [ 77.899638][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.014229][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 78.025421][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 78.105000][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 78.116013][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 78.166669][ T6781] loop0: detected capacity change from 0 to 512 [ 78.189974][ T6781] EXT4-fs: Ignoring removed i_version option [ 78.208065][ T6781] EXT4-fs: Ignoring removed bh option [ 78.248031][ T6781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.269737][ T6781] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.413232][ T50] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.497090][ T50] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.580669][ T6804] loop8: detected capacity change from 0 to 128 [ 78.610978][ T50] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.682748][ T50] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.698749][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.805649][ T6821] loop0: detected capacity change from 0 to 1024 [ 78.820757][ T6823] loop6: detected capacity change from 0 to 512 [ 78.826394][ T6821] EXT4-fs: Ignoring removed bh option [ 78.842594][ T30] bio_check_eod: 101 callbacks suppressed [ 78.842611][ T30] kworker/u8:1: attempt to access beyond end of device [ 78.842611][ T30] loop8: rw=1, sector=145, nr_sectors = 16 limit=128 [ 78.864244][ T30] kworker/u8:1: attempt to access beyond end of device [ 78.864244][ T30] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 78.879333][ T30] kworker/u8:1: attempt to access beyond end of device [ 78.879333][ T30] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 78.893223][ T30] kworker/u8:1: attempt to access beyond end of device [ 78.893223][ T30] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 78.906950][ T30] kworker/u8:1: attempt to access beyond end of device [ 78.906950][ T30] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 78.911135][ T50] bond0 (unregistering): Released all slaves [ 78.922159][ T6821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.928571][ T50] bond1 (unregistering): Released all slaves [ 78.938470][ T30] kworker/u8:1: attempt to access beyond end of device [ 78.938470][ T30] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 78.958214][ T30] kworker/u8:1: attempt to access beyond end of device [ 78.958214][ T30] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 78.972920][ T30] kworker/u8:1: attempt to access beyond end of device [ 78.972920][ T30] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 78.976903][ T6821] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 7: comm syz.0.1116: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 78.986372][ T30] kworker/u8:1: attempt to access beyond end of device [ 78.986372][ T30] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 79.011846][ T6821] EXT4-fs (loop0): Remounting filesystem read-only [ 79.019431][ T30] kworker/u8:1: attempt to access beyond end of device [ 79.019431][ T30] loop8: rw=1, sector=297, nr_sectors = 8 limit=128 [ 79.070681][ T50] hsr_slave_0: left promiscuous mode [ 79.086487][ T50] hsr_slave_1: left promiscuous mode [ 79.099776][ T50] veth1_macvtap: left promiscuous mode [ 79.105268][ T50] veth0_macvtap: left promiscuous mode [ 79.115715][ T50] veth1_vlan: left promiscuous mode [ 79.115720][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.130100][ T50] veth0_vlan: left promiscuous mode [ 79.160139][ T6836] loop6: detected capacity change from 0 to 512 [ 79.182467][ T6836] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 79.205989][ T6836] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1122: bad orphan inode 16 [ 79.222585][ T6836] loop6: lost filesystem error report for type 5 error -117 [ 79.222795][ T6836] ext4_test_bit(bit=15, block=4) = 0 [ 79.230136][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 79.230172][ C0] EXT4-fs (loop6): initial error at time 1772843853: ext4_orphan_get:1417 [ 79.230190][ C0] EXT4-fs (loop6): last error at time 1772843853: ext4_orphan_get:1417 [ 79.260295][ T6836] EXT4-fs (loop6): 1 orphan inode deleted [ 79.267157][ T6836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.280541][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.291863][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.328866][ T5628] EXT4-fs error (device loop6): __ext4_iget:5378: inode #11: block 524051: comm syz-executor: invalid block [ 79.338668][ T6799] chnl_net:caif_netlink_parms(): no params data found [ 79.348175][ T5628] EXT4-fs error (device loop6): __ext4_iget:5378: inode #11: block 524051: comm syz-executor: invalid block [ 79.409745][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.417139][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.424600][ T6799] bridge_slave_0: entered allmulticast mode [ 79.431258][ T6799] bridge_slave_0: entered promiscuous mode [ 79.438537][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.445897][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.453222][ T6799] bridge_slave_1: entered allmulticast mode [ 79.459928][ T6799] bridge_slave_1: entered promiscuous mode [ 79.477538][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.488705][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.507956][ T6799] team0: Port device team_slave_0 added [ 79.525961][ T6799] team0: Port device team_slave_1 added [ 79.546193][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.554265][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.582128][ T6846] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.591221][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.611099][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.626797][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.659668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.675128][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.724481][ T6799] hsr_slave_0: entered promiscuous mode [ 79.732238][ T6799] hsr_slave_1: entered promiscuous mode [ 79.738166][ T6799] debugfs: 'hsr0' already exists in 'hsr' [ 79.749645][ T6799] Cannot create hsr debugfs directory [ 79.774757][ T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.788630][ T6896] loop0: detected capacity change from 0 to 512 [ 79.797605][ T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.825097][ T6896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.839460][ T6896] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.855493][ T6896] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.1134: corrupted inode contents [ 79.856377][ T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.877652][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810b512200: rx timeout, send abort [ 79.885930][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810b512200: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 79.902996][ T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.909669][ T6896] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.1134: mark_inode_dirty error [ 79.934737][ T6896] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.1134: corrupted inode contents [ 79.971775][ T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.980812][ T6896] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1134: mark_inode_dirty error [ 79.989605][ T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.000007][ T6905] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.1134: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 80.000007][ T6905] [ 80.048503][ T6896] EXT4-fs error (device loop0): ext4_lookup:1782: inode #19: comm syz.0.1134: 'file0' linked to parent dir [ 80.088494][ T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.101942][ T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.112964][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.130732][ T6799] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 80.154056][ T6799] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 80.184296][ T6799] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 80.191268][ T6930] loop0: detected capacity change from 0 to 8192 [ 80.206183][ T6799] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 80.280988][ T50] bridge_slave_1: left allmulticast mode [ 80.288405][ T50] bridge_slave_1: left promiscuous mode [ 80.294634][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.314485][ T50] bridge_slave_0: left allmulticast mode [ 80.329746][ T50] bridge_slave_0: left promiscuous mode [ 80.342371][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.491530][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.501321][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.511115][ T50] bond0 (unregistering): Released all slaves [ 80.558321][ T6799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.567658][ T50] hsr_slave_0: left promiscuous mode [ 80.586385][ T50] hsr_slave_1: left promiscuous mode [ 80.596676][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.609630][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.617556][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.626631][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.641535][ T50] veth1_vlan: left promiscuous mode [ 80.652707][ T50] veth0_vlan: left promiscuous mode [ 80.734083][ T50] team0 (unregistering): Port device team_slave_1 removed [ 80.744815][ T50] team0 (unregistering): Port device team_slave_0 removed [ 80.804985][ T6884] chnl_net:caif_netlink_parms(): no params data found [ 80.822071][ T6799] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.829101][ T6989] loop4: detected capacity change from 0 to 1024 [ 80.853120][ T6989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.872239][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.879324][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.893132][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.900386][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.953288][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.051721][ T7020] loop8: detected capacity change from 0 to 512 [ 81.059258][ T7020] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 81.073285][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.078753][ T7020] EXT4-fs (loop8): 1 truncate cleaned up [ 81.087146][ T7020] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.111291][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.133742][ T6884] bridge_slave_0: entered allmulticast mode [ 81.148993][ T6884] bridge_slave_0: entered promiscuous mode [ 81.149696][ T5970] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.156256][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.170868][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.178406][ T6884] bridge_slave_1: entered allmulticast mode [ 81.190553][ T6884] bridge_slave_1: entered promiscuous mode [ 81.194346][ T7029] netlink: 'syz.0.1157': attribute type 8 has an invalid length. [ 81.219148][ T7029] __nla_validate_parse: 3 callbacks suppressed [ 81.219163][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 81.237201][ T7031] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1158'. [ 81.238249][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.280697][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.311834][ T6799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.315779][ T7039] loop4: detected capacity change from 0 to 2048 [ 81.339882][ T6884] team0: Port device team_slave_0 added [ 81.370566][ T6884] team0: Port device team_slave_1 added [ 81.412098][ T50] IPVS: stop unused estimator thread 0... [ 81.427668][ T7039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.447529][ T7039] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 81.464406][ T7039] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 81.464622][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.476826][ T7039] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.476826][ T7039] [ 81.493432][ T7039] EXT4-fs (loop4): Total free blocks count 0 [ 81.499496][ T7039] EXT4-fs (loop4): Free/Dirty block details [ 81.505678][ T7039] EXT4-fs (loop4): free_blocks=66060288 [ 81.511504][ T7039] EXT4-fs (loop4): dirty_blocks=32 [ 81.515560][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.518393][ T7039] EXT4-fs (loop4): Block reservation details [ 81.548528][ T7039] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 81.562668][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.587401][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.594771][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.627098][ T3456] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 81.632019][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.690171][ T7076] EXT4-fs: Ignoring removed i_version option [ 81.705434][ T7076] EXT4-fs: Ignoring removed bh option [ 81.717636][ T6884] hsr_slave_0: entered promiscuous mode [ 81.724177][ T6884] hsr_slave_1: entered promiscuous mode [ 81.730925][ T6884] debugfs: 'hsr0' already exists in 'hsr' [ 81.736720][ T6884] Cannot create hsr debugfs directory [ 81.744762][ T7076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.798827][ T7076] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.815169][ T7090] sch_fq: defrate 4294967295 ignored. [ 81.920504][ T7096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 81.932295][ T7096] System zones: 1-12 [ 81.936688][ T7096] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.1169: corrupted in-inode xattr: e_value size too large [ 81.951685][ T7096] fserror_report: 1 callbacks suppressed [ 81.951698][ T7096] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.957681][ T7096] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1169: couldn't read orphan inode 15 (err -117) [ 81.966846][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 81.966865][ C0] EXT4-fs (loop0): initial error at time 1772843856: ext4_iget_extra_inode:5025: inode 15 [ 81.966894][ C0] EXT4-fs (loop0): last error at time 1772843856: ext4_iget_extra_inode:5025: inode 15 [ 82.005022][ T7096] loop0: lost filesystem error report for type 5 error -117 [ 82.008067][ T7096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.028536][ T6799] veth0_vlan: entered promiscuous mode [ 82.044707][ T6799] veth1_vlan: entered promiscuous mode [ 82.086273][ T6799] veth0_macvtap: entered promiscuous mode [ 82.124466][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.134538][ T6799] veth1_macvtap: entered promiscuous mode [ 82.141931][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.157881][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.201240][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.280436][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.298764][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.328194][ T56] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.360381][ T3456] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.435435][ T6884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.442693][ T7132] netlink: 'syz.8.1179': attribute type 1 has an invalid length. [ 82.468596][ T6884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.481788][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 82.481801][ T28] audit: type=1400 audit(1772843856.643:586): avc: denied { setopt } for pid=7136 comm="syz.4.1180" lport=59582 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 82.515480][ T7135] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.527802][ T7132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.544256][ T7135] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.556885][ T28] audit: type=1400 audit(1772843856.673:587): avc: denied { getopt } for pid=7136 comm="syz.4.1180" lport=59582 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 82.583331][ T7141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.594097][ T7141] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 82.605787][ T7141] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 82.613777][ T6799] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.643379][ T6884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.679710][ T6884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.839918][ T7179] netlink: 'syz.8.1188': attribute type 12 has an invalid length. [ 82.860312][ T7179] netlink: 'syz.8.1188': attribute type 29 has an invalid length. [ 82.878311][ T7179] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1188'. [ 82.921376][ T6884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.948330][ T6884] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.973586][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.980681][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.030893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.037993][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.089405][ T6884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.213299][ T6884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.241001][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.261039][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.332699][ T6884] veth0_vlan: entered promiscuous mode [ 83.341071][ T6884] veth1_vlan: entered promiscuous mode [ 83.359933][ T6884] veth0_macvtap: entered promiscuous mode [ 83.367797][ T6884] veth1_macvtap: entered promiscuous mode [ 83.380795][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.393221][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.404220][ T3456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.414329][ T3456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.425776][ T3456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.434812][ T3456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.575020][ T7258] set_capacity_and_notify: 4 callbacks suppressed [ 83.575038][ T7258] loop2: detected capacity change from 0 to 8192 [ 83.630109][ T7258] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 83.637597][ T7258] loop2: partition table partially beyond EOD, truncated [ 83.646007][ T7258] loop2: p1 start 30976 is beyond EOD, truncated [ 83.653010][ T7258] loop2: p2 size 16128 extends beyond EOD, truncated [ 83.661694][ T7258] loop2: p3 start 327168 is beyond EOD, truncated [ 83.668878][ T7258] loop2: p5 start 30976 is beyond EOD, truncated [ 83.680245][ T7258] loop2: p6 size 16128 extends beyond EOD, truncated [ 83.696033][ T2998] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 83.703871][ T2998] loop2: partition table partially beyond EOD, truncated [ 83.718858][ T2998] loop2: p1 start 30976 is beyond EOD, truncated [ 83.725647][ T2998] loop2: p2 size 16128 extends beyond EOD, truncated [ 83.733636][ T2998] loop2: p3 start 327168 is beyond EOD, truncated [ 83.741335][ T2998] loop2: p5 start 30976 is beyond EOD, truncated [ 83.747739][ T2998] loop2: p6 size 16128 extends beyond EOD, truncated [ 83.847514][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 83.871581][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 83.881948][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 83.928480][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 83.933307][ T7307] netlink: 'syz.2.1206': attribute type 6 has an invalid length. [ 83.938748][ T28] audit: type=1400 audit(2000000001.210:588): avc: denied { create } for pid=7306 comm="syz.2.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.967646][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 83.980872][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 84.041830][ T28] audit: type=1400 audit(2000000001.210:589): avc: denied { write } for pid=7306 comm="syz.2.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.096198][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1209'. [ 84.141896][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 84.146792][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1209'. [ 84.175995][ T7330] chnl_net:caif_netlink_parms(): no params data found [ 84.232290][ T7341] loop8: detected capacity change from 0 to 128 [ 84.250284][ T7341] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.263617][ T7341] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.287726][ T5970] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.359991][ T28] audit: type=1400 audit(2000000001.650:590): avc: denied { map } for pid=7348 comm="syz.8.1219" path="socket:[19403]" dev="sockfs" ino=19403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 84.831574][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1235'. [ 85.247476][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.284957][ T7487] netlink: 'syz.0.1241': attribute type 29 has an invalid length. [ 85.329723][ T7487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1241'. [ 85.512497][ T7517] loop0: detected capacity change from 0 to 128 [ 85.549543][ T7517] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.581602][ T7517] ext4 filesystem being mounted at /269/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.633955][ T7494] chnl_net:caif_netlink_parms(): no params data found [ 85.676296][ T7517] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.1245: No space for directory leaf checksum. Please run e2fsck -D. [ 85.740161][ T7494] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.749969][ T7494] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.757234][ T7494] bridge_slave_0: entered allmulticast mode [ 85.770226][ T7494] bridge_slave_0: entered promiscuous mode [ 85.779695][ T7494] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.781753][ T7517] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.1245: checksumming directory block 0 [ 85.788297][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.806175][ T7494] bridge_slave_1: entered allmulticast mode [ 85.812859][ T7494] bridge_slave_1: entered promiscuous mode [ 85.830944][ T7494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.842112][ T7494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.861404][ T7494] team0: Port device team_slave_0 added [ 85.868315][ T7494] team0: Port device team_slave_1 added [ 85.894719][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.901706][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.929304][ T7494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.940886][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.948210][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.986859][ T7494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.013360][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.042967][ T7494] hsr_slave_0: entered promiscuous mode [ 86.049118][ T7494] hsr_slave_1: entered promiscuous mode [ 86.060615][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 86.084537][ T28] audit: type=1400 audit(2000000003.370:591): avc: denied { ioctl } for pid=7547 comm="syz.0.1250" path="socket:[19677]" dev="sockfs" ino=19677 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.102367][ T7494] debugfs: 'hsr0' already exists in 'hsr' [ 86.147578][ T7494] Cannot create hsr debugfs directory [ 86.413881][ T28] audit: type=1400 audit(2000000003.700:592): avc: denied { append } for pid=7568 comm="syz.8.1258" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.632500][ T7583] bond2: entered allmulticast mode [ 86.637973][ T7583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.675062][ T7583] xt_TCPMSS: Only works on TCP SYN packets [ 86.732985][ T7583] kernel profiling enabled (shift: 16) [ 86.933416][ T7494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.967182][ T7494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.999325][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.018391][ T7494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.034485][ T7494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.069736][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.114535][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.201069][ T7494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.233347][ T7494] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.275465][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.282641][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.314116][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.321240][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.398461][ T41] bridge_slave_1: left allmulticast mode [ 87.442715][ T41] bridge_slave_1: left promiscuous mode [ 87.448388][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.472937][ T28] audit: type=1400 audit(2000000004.760:593): avc: denied { read write } for pid=7658 comm="syz.0.1277" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.475233][ T7661] loop8: detected capacity change from 0 to 1024 [ 87.498713][ T28] audit: type=1400 audit(2000000004.790:594): avc: denied { open } for pid=7658 comm="syz.0.1277" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.527037][ T7661] EXT4-fs: inline encryption not supported [ 87.540087][ T41] bridge_slave_0: left allmulticast mode [ 87.544681][ T28] audit: type=1400 audit(2000000004.790:595): avc: denied { ioctl } for pid=7658 comm="syz.0.1277" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.545743][ T41] bridge_slave_0: left promiscuous mode [ 87.545848][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.583054][ T7661] EXT4-fs: Ignoring removed bh option [ 87.617129][ T7661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.638707][ T28] audit: type=1400 audit(2000000004.920:596): avc: denied { open } for pid=7660 comm="syz.8.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 87.659550][ T28] audit: type=1400 audit(2000000004.920:597): avc: denied { kernel } for pid=7660 comm="syz.8.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 87.702535][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.712678][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.722473][ T5970] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.723908][ T41] bond0 (unregistering): Released all slaves [ 87.797768][ T41] hsr_slave_0: left promiscuous mode [ 87.814123][ T41] hsr_slave_1: left promiscuous mode [ 87.823011][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.835144][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.850406][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.863760][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.877304][ T41] veth1_macvtap: left promiscuous mode [ 87.890207][ T41] veth0_macvtap: left promiscuous mode [ 87.895862][ T41] veth1_vlan: left promiscuous mode [ 87.908009][ T41] veth0_vlan: left promiscuous mode [ 88.032834][ T41] team0 (unregistering): Port device team_slave_1 removed [ 88.044162][ T41] team0 (unregistering): Port device team_slave_0 removed [ 88.086441][ T7494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.269488][ T28] audit: type=1400 audit(2000000005.540:598): avc: denied { write } for pid=7752 comm="syz.8.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 88.300191][ T7494] veth0_vlan: entered promiscuous mode [ 88.328063][ T7494] veth1_vlan: entered promiscuous mode [ 88.478770][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1294'. [ 88.495202][ T7709] chnl_net:caif_netlink_parms(): no params data found [ 88.536385][ T7494] veth0_macvtap: entered promiscuous mode [ 88.561630][ T7494] veth1_macvtap: entered promiscuous mode [ 88.573376][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.580852][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.590234][ T7709] bridge_slave_0: entered allmulticast mode [ 88.596834][ T7709] bridge_slave_0: entered promiscuous mode [ 88.607052][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.614706][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.622449][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.629615][ T7709] bridge_slave_1: entered allmulticast mode [ 88.636162][ T7709] bridge_slave_1: entered promiscuous mode [ 88.645592][ T28] audit: type=1326 audit(2000000005.940:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7773 comm="syz.8.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b27b5c799 code=0x7fc00000 [ 88.656696][ T7709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.679753][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.706715][ T7709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.723383][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.740982][ T7709] team0: Port device team_slave_0 added [ 88.750771][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.771848][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.792206][ T7709] team0: Port device team_slave_1 added [ 88.803563][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.821807][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.830761][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.856870][ T7709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.869204][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.887605][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.915668][ T7709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.969017][ T7709] hsr_slave_0: entered promiscuous mode [ 88.977034][ T7709] hsr_slave_1: entered promiscuous mode [ 88.983489][ T7709] debugfs: 'hsr0' already exists in 'hsr' [ 89.006188][ T7709] Cannot create hsr debugfs directory [ 89.162914][ T28] audit: type=1326 audit(2000000006.450:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7852 comm="syz.9.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2476b8c799 code=0x7ffc0000 [ 89.189005][ T28] audit: type=1326 audit(2000000006.450:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7852 comm="syz.9.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2476b8c799 code=0x7ffc0000 [ 89.227148][ T28] audit: type=1326 audit(2000000006.480:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7852 comm="syz.9.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2476b8c799 code=0x7ffc0000 [ 89.250908][ T28] audit: type=1326 audit(2000000006.480:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7852 comm="syz.9.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2476b8c799 code=0x7ffc0000 [ 89.293114][ T7709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.362811][ T7709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.410211][ T7866] netlink: 'syz.0.1318': attribute type 1 has an invalid length. [ 89.445876][ T7709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.530612][ T7709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.601563][ T7709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.618357][ T7709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.631662][ T7709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.650145][ T7709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.931329][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.957977][ T56] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.967890][ T7709] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.983045][ T7900] loop8: detected capacity change from 0 to 32768 [ 89.995853][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.002976][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.041197][ T3301] loop8: p1 p2 p3 < p5 p6 > [ 90.050438][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.057527][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.065929][ T3301] loop8: p2 size 16775168 extends beyond EOD, truncated [ 90.077526][ T3301] loop8: p5 start 4294970168 is beyond EOD, truncated [ 90.095991][ T7900] loop8: p1 p2 p3 < p5 p6 > [ 90.120902][ T7900] loop8: p2 size 16775168 extends beyond EOD, truncated [ 90.144467][ T7900] loop8: p5 start 4294970168 is beyond EOD, truncated [ 90.226479][ T7709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.371650][ T6352] udevd[6352]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 90.372311][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 90.397189][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 90.397195][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 90.425274][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 90.425429][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 90.436697][ T7972] udevd[7972]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 90.446308][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 90.470956][ T7709] veth0_vlan: entered promiscuous mode [ 90.531790][ T7983] netlink: 'syz.3.1332': attribute type 2 has an invalid length. [ 90.545865][ T7709] veth1_vlan: entered promiscuous mode [ 90.658853][ T7709] veth0_macvtap: entered promiscuous mode [ 90.667751][ T7709] veth1_macvtap: entered promiscuous mode [ 90.683303][ T7709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.697842][ T7709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.729441][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.746953][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.764676][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.784124][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.862186][ T8018] loop8: detected capacity change from 0 to 1024 [ 90.901103][ T8018] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.915731][ T8018] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.933852][ T8018] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.1340: lblock 0 mapped to illegal pblock 0 (length 6) [ 90.966287][ T8018] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 90.991001][ T8018] EXT4-fs (loop8): This should not happen!! Data will be lost [ 90.991001][ T8018] [ 91.021753][ T8032] loop3: detected capacity change from 0 to 8192 [ 91.042036][ T30] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 91.062984][ T3301] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 91.073254][ T3301] loop3: partition table partially beyond EOD, truncated [ 91.082202][ T30] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 91.097425][ T3301] loop3: p1 start 30976 is beyond EOD, truncated [ 91.105992][ T3301] loop3: p2 size 16128 extends beyond EOD, truncated [ 91.113958][ T30] EXT4-fs (loop8): This should not happen!! Data will be lost [ 91.113958][ T30] [ 91.124692][ T3301] loop3: p3 start 327168 is beyond EOD, truncated [ 91.132498][ T50] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 91.132891][ T3301] loop3: p5 start 30976 is beyond EOD, truncated [ 91.160372][ T50] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 91.164256][ T3301] loop3: p6 size 16128 extends beyond EOD, truncated [ 91.194936][ T8032] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 91.202036][ T50] EXT4-fs (loop8): This should not happen!! Data will be lost [ 91.202036][ T50] [ 91.209855][ T8032] loop3: partition table partially beyond EOD, [ 91.213068][ T50] EXT4-fs (loop8): Total free blocks count 0 [ 91.215206][ T8032] truncated [ 91.219529][ T50] EXT4-fs (loop8): Free/Dirty block details [ 91.219545][ T50] EXT4-fs (loop8): free_blocks=0 [ 91.266796][ T8032] loop3: p1 start 30976 is beyond EOD, truncated [ 91.291815][ T8032] loop3: p2 size 16128 extends beyond EOD, truncated [ 91.323090][ T8032] loop3: p3 start 327168 is beyond EOD, truncated [ 91.340849][ T8032] loop3: p5 start 30976 is beyond EOD, truncated [ 91.347551][ T8032] loop3: p6 size 16128 extends beyond EOD, truncated [ 91.499385][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 91.511655][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 91.643984][ T8077] loop3: detected capacity change from 0 to 128 [ 91.660218][ T8077] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.672316][ T8079] loop8: detected capacity change from 0 to 4096 [ 91.688097][ T8079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.722875][ T8077] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.779432][ T30] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.810216][ T5970] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.925209][ T8090] syzkaller1: entered promiscuous mode [ 91.939623][ T8090] syzkaller1: entered allmulticast mode [ 91.979670][ T3586] Bluetooth: hci0: command 0x1003 tx timeout [ 91.979780][ T5561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.107900][ T8099] delete_channel: no stack [ 92.261940][ T8121] IPv4: Oversized IP packet from 127.202.26.0 [ 92.378904][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 92.415380][ T8138] loop3: detected capacity change from 0 to 512 [ 92.450638][ T8138] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.481118][ T8138] EXT4-fs (loop3): 1 truncate cleaned up [ 92.487312][ T8138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.509661][ T9] Process accounting resumed [ 92.655451][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 92.655468][ T28] audit: type=1400 audit(2000000009.940:637): avc: denied { create } for pid=8158 comm="syz.9.1394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 92.709953][ T28] audit: type=1400 audit(2000000009.940:638): avc: denied { create } for pid=8158 comm="syz.9.1394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 92.793371][ T7494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.906983][ T8176] loop1: detected capacity change from 0 to 1024 [ 92.945263][ T8176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.970098][ T8176] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 93.003497][ T8184] loop8: detected capacity change from 0 to 1024 [ 93.017931][ T8176] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 93.036286][ T8176] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 93.060168][ T8176] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: comm syz.1.1388: inode #1: comm syz.1.1388: iget: illegal inode # [ 93.073904][ T8176] loop1: lost filesystem error report for type 5 error -117 [ 93.075087][ T8184] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.082475][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 93.082497][ C1] EXT4-fs (loop1): initial error at time 2000000010: ext4_get_journal_inode:5863 [ 93.082538][ C1] EXT4-fs (loop1): last error at time 2000000010: ext4_get_journal_inode:5863 [ 93.103823][ T8176] EXT4-fs (loop1): Remounting filesystem read-only [ 93.128584][ T28] audit: type=1400 audit(2000000010.410:639): avc: denied { create } for pid=8183 comm="syz.8.1392" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.170912][ T8176] EXT4-fs (loop1): no journal found [ 93.242781][ T8197] loop3: detected capacity change from 0 to 512 [ 93.266079][ T8197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.289494][ T5970] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.305950][ T8197] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.358393][ T8203] netlink: 1347 bytes leftover after parsing attributes in process `syz.8.1396'. [ 93.392869][ T7494] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.458067][ T8209] loop1: detected capacity change from 0 to 512 [ 93.474482][ T8211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.501747][ T28] audit: type=1400 audit(2000000010.790:640): avc: denied { remount } for pid=8206 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 93.503475][ T8211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.557487][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 93.581376][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 93.586410][ T28] audit: type=1400 audit(2000000010.870:641): avc: denied { getopt } for pid=8210 comm="syz.8.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.617045][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.626341][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 93.636824][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.646374][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.655526][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 93.667564][ T3456] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.878638][ T28] audit: type=1400 audit(2000000011.160:642): avc: denied { listen } for pid=8244 comm="syz.1.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.945656][ T28] audit: type=1400 audit(2000000011.230:643): avc: denied { ioctl } for pid=8254 comm="syz.1.1415" path="socket:[22048]" dev="sockfs" ino=22048 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.992957][ T28] audit: type=1400 audit(2000000011.270:644): avc: denied { name_bind } for pid=8257 comm="syz.9.1417" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 94.170657][ T8269] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 94.405714][ T8292] netlink: 'syz.3.1432': attribute type 4 has an invalid length. [ 94.862413][ T28] audit: type=1400 audit(2000000012.150:645): avc: denied { getopt } for pid=8336 comm="syz.0.1444" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.169549][ T8356] loop8: detected capacity change from 0 to 512 [ 95.180071][ T8356] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 95.198932][ T8356] EXT4-fs (loop8): 1 truncate cleaned up [ 95.215891][ T8356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.288495][ T5970] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.077500][ T28] audit: type=1400 audit(2000000013.350:646): avc: denied { name_bind } for pid=8405 comm="syz.3.1474" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 96.262888][ T8422] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1477'. [ 96.387364][ T8438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1481'. [ 96.826429][ T8457] netlink: 'syz.9.1489': attribute type 1 has an invalid length. [ 96.850361][ T8463] netlink: 'syz.1.1491': attribute type 10 has an invalid length. [ 96.867252][ T8457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.870153][ T8463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1491'. [ 96.897524][ T8457] bond1: (slave geneve2): making interface the new active one [ 96.908375][ T8457] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 96.918854][ T8463] batadv0: entered promiscuous mode [ 96.926222][ T8463] batadv0: entered allmulticast mode [ 96.956807][ T8463] bridge0: port 3(batadv0) entered blocking state [ 96.967541][ T8473] loop9: detected capacity change from 0 to 128 [ 96.979036][ T8463] bridge0: port 3(batadv0) entered disabled state [ 97.015658][ T8463] bridge0: port 3(batadv0) entered blocking state [ 97.022246][ T8463] bridge0: port 3(batadv0) entered forwarding state [ 97.189652][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 97.198903][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 97.220993][ T8142] bio_check_eod: 101 callbacks suppressed [ 97.221009][ T8142] kworker/u8:9: attempt to access beyond end of device [ 97.221009][ T8142] loop9: rw=1, sector=145, nr_sectors = 40 limit=128 [ 97.249762][ T8142] kworker/u8:9: attempt to access beyond end of device [ 97.249762][ T8142] loop9: rw=1, sector=193, nr_sectors = 8 limit=128 [ 97.268454][ T8142] kworker/u8:9: attempt to access beyond end of device [ 97.268454][ T8142] loop9: rw=1, sector=209, nr_sectors = 8 limit=128 [ 97.289817][ T8142] kworker/u8:9: attempt to access beyond end of device [ 97.289817][ T8142] loop9: rw=1, sector=225, nr_sectors = 8 limit=128 [ 97.318670][ T8142] kworker/u8:9: attempt to access beyond end of device [ 97.318670][ T8142] loop9: rw=1, sector=241, nr_sectors = 8 limit=128 [ 97.369064][ T8142] kworker/u8:9: attempt to access beyond end of device [ 97.369064][ T8142] loop9: rw=1, sector=257, nr_sectors = 8 limit=128 [ 97.407010][ T8142] kworker/u8:9: attempt to access beyond end of device [ 97.407010][ T8142] loop9: rw=1, sector=273, nr_sectors = 8 limit=128 [ 97.677716][ T8142] kworker/u8:9: attempt to access beyond end of device [ 97.677716][ T8142] loop9: rw=1, sector=289, nr_sectors = 8 limit=128 [ 97.692060][ T8142] kworker/u8:9: attempt to access beyond end of device [ 97.692060][ T8142] loop9: rw=1, sector=305, nr_sectors = 8 limit=128 [ 97.714565][ T8142] kworker/u8:9: attempt to access beyond end of device [ 97.714565][ T8142] loop9: rw=1, sector=321, nr_sectors = 8 limit=128 [ 97.832476][ T8516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.908815][ T8526] loop9: detected capacity change from 0 to 4096 [ 97.931823][ T8526] EXT4-fs: Ignoring removed bh option [ 97.944961][ T8526] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.008349][ T8526] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.049104][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.056082][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 98.056161][ T28] audit: type=1400 audit(2000000015.350:649): avc: denied { connect } for pid=8546 comm="syz.1.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.271873][ T28] audit: type=1400 audit(2000000015.560:650): avc: denied { create } for pid=8566 comm="syz.3.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 98.292626][ T28] audit: type=1400 audit(2000000015.560:651): avc: denied { ioctl } for pid=8566 comm="syz.3.1510" path="socket:[23323]" dev="sockfs" ino=23323 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 98.352555][ T8571] syzkaller1: entered promiscuous mode [ 98.358196][ T8571] syzkaller1: entered allmulticast mode [ 98.557923][ T6799] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.587036][ T8582] loop3: detected capacity change from 0 to 512 [ 98.608041][ T8582] EXT4-fs: Ignoring removed nobh option [ 98.616239][ T8582] EXT4-fs: Ignoring removed bh option [ 98.627532][ T8582] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.651044][ T8582] EXT4-fs (loop3): 1 truncate cleaned up [ 98.657206][ T8582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.684824][ T7494] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 98.704284][ T7494] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 98.707749][ T28] audit: type=1400 audit(2000000015.990:652): avc: denied { unlink } for pid=7494 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.717858][ T7494] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 98.786068][ T8606] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1522'. [ 98.794616][ T8499] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.961086][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1530'. [ 98.970748][ T8622] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1530'. [ 98.997614][ T8624] team0: Device gtp0 is of different type [ 99.064672][ T28] audit: type=1400 audit(2000000016.350:653): avc: denied { sys_module } for pid=8626 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.186538][ T8626] chnl_net:caif_netlink_parms(): no params data found [ 99.232701][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.241118][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.248698][ T8626] bridge_slave_0: entered allmulticast mode [ 99.257066][ T8626] bridge_slave_0: entered promiscuous mode [ 99.264411][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.271953][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.279475][ T8626] bridge_slave_1: entered allmulticast mode [ 99.291846][ T8626] bridge_slave_1: entered promiscuous mode [ 99.297883][ T8436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.307204][ T28] audit: type=1326 audit(2000000016.580:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.9.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2476b8c799 code=0x7ffc0000 [ 99.325603][ T8626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.343965][ T28] audit: type=1326 audit(2000000016.580:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.9.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2476b8c799 code=0x7ffc0000 [ 99.377699][ T28] audit: type=1326 audit(2000000016.580:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.9.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2476b8c799 code=0x7ffc0000 [ 99.402038][ T28] audit: type=1326 audit(2000000016.580:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.9.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2476b8c799 code=0x7ffc0000 [ 99.432441][ T28] audit: type=1326 audit(2000000016.580:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.9.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2476b8c799 code=0x7ffc0000 [ 99.469864][ T3456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.486963][ T8626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.523406][ T8626] team0: Port device team_slave_0 added [ 99.530423][ T8626] team0: Port device team_slave_1 added [ 99.548343][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.555557][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.611805][ T8626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.623125][ T8649] tipc: Started in network mode [ 99.628011][ T8649] tipc: Node identity ac14140f, cluster identity 4711 [ 99.660151][ T8649] tipc: New replicast peer: 255.255.255.255 [ 99.666477][ T8649] tipc: Enabled bearer , priority 10 [ 99.680081][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.687276][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.716707][ T8626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.762430][ T3456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.796146][ T8626] hsr_slave_0: entered promiscuous mode [ 99.810709][ T8626] hsr_slave_1: entered promiscuous mode [ 99.816733][ T8626] debugfs: 'hsr0' already exists in 'hsr' [ 99.831742][ T8626] Cannot create hsr debugfs directory [ 99.844802][ T3456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.023684][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 100.034077][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 100.063192][ T3586] Bluetooth: hci0: command 0x1003 tx timeout [ 100.073441][ T3456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.079607][ T5561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.114758][ T8683] geneve3: entered promiscuous mode [ 100.129289][ T8683] geneve3: entered allmulticast mode [ 100.273472][ T3456] bridge_slave_1: left allmulticast mode [ 100.294259][ T3456] bridge_slave_1: left promiscuous mode [ 100.370836][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.434408][ T3456] bridge_slave_0: left allmulticast mode [ 100.449721][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.484376][ T3456] bridge_slave_0: left promiscuous mode [ 100.514168][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.911846][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.926444][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.952206][ T3456] bond0 (unregistering): Released all slaves [ 100.966858][ T3456] bond1 (unregistering): Released all slaves [ 100.998312][ T8725] syzkaller1: entered promiscuous mode [ 101.007075][ T8725] syzkaller1: entered allmulticast mode [ 101.021123][ T23] tipc: Node number set to 2886997007 [ 101.042565][ T3456] hsr_slave_0: left promiscuous mode [ 101.048473][ T3456] hsr_slave_1: left promiscuous mode [ 101.054556][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.062663][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.070444][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.077946][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.109003][ T3456] veth1_macvtap: left promiscuous mode [ 101.118549][ T3456] veth0_macvtap: left promiscuous mode [ 101.138732][ T3456] veth1_vlan: left promiscuous mode [ 101.144098][ T3456] veth0_vlan: left promiscuous mode [ 101.266382][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 101.276603][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 101.710656][ T8626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.731673][ T8626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.752314][ T8626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.772042][ T8626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.870597][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.906040][ T8626] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.927347][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.935122][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.970810][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.978802][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.078963][ T8626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.322247][ T8626] veth0_vlan: entered promiscuous mode [ 102.332543][ T8626] veth1_vlan: entered promiscuous mode [ 102.338946][ T8839] loop8: detected capacity change from 0 to 128 [ 102.340011][ T8836] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1579'. [ 102.367366][ T8626] veth0_macvtap: entered promiscuous mode [ 102.381277][ T8626] veth1_macvtap: entered promiscuous mode [ 102.396650][ T3456] ================================================================== [ 102.404848][ T3456] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 102.412236][ T3456] [ 102.414650][ T3456] write to 0xffff888104a39830 of 4 bytes by task 8142 on cpu 0: [ 102.422477][ T3456] touch_atime+0x1d7/0x330 [ 102.426904][ T3456] shmem_file_read_iter+0x477/0x540 [ 102.432145][ T3456] lo_rw_aio+0x67d/0x730 [ 102.436401][ T3456] loop_process_work+0x56c/0xac0 [ 102.441356][ T3456] loop_rootcg_workfn+0x22/0x30 [ 102.446479][ T3456] process_scheduled_works+0x4de/0x9e0 [ 102.451951][ T3456] worker_thread+0x581/0x770 [ 102.456550][ T3456] kthread+0x22a/0x280 [ 102.460621][ T3456] ret_from_fork+0x150/0x360 [ 102.465244][ T3456] ret_from_fork_asm+0x1a/0x30 [ 102.470004][ T3456] [ 102.472317][ T3456] read to 0xffff888104a39830 of 4 bytes by task 3456 on cpu 1: [ 102.479884][ T3456] atime_needs_update+0x25f/0x3e0 [ 102.484928][ T3456] touch_atime+0x4a/0x330 [ 102.489349][ T3456] shmem_file_read_iter+0x477/0x540 [ 102.494566][ T3456] lo_rw_aio+0x67d/0x730 [ 102.498979][ T3456] loop_process_work+0x56c/0xac0 [ 102.506830][ T3456] loop_workfn+0x31/0x40 [ 102.509157][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.511094][ T3456] process_scheduled_works+0x4de/0x9e0 [ 102.511126][ T3456] worker_thread+0x581/0x770 [ 102.522944][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.523923][ T3456] kthread+0x22a/0x280 [ 102.539448][ T8142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.539899][ T3456] ret_from_fork+0x150/0x360 [ 102.548692][ T8142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.553225][ T3456] ret_from_fork_asm+0x1a/0x30 [ 102.553251][ T3456] [ 102.553255][ T3456] value changed: 0x27ef6435 -> 0x2887fab5 [ 102.553266][ T3456] [ 102.553269][ T3456] Reported by Kernel Concurrency Sanitizer on: [ 102.553299][ T3456] CPU: 1 UID: 0 PID: 3456 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 102.553322][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.553334][ T3456] Workqueue: loop8 loop_workfn [ 102.553358][ T3456] ================================================================== [ 102.564498][ T5561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.620033][ T3586] Bluetooth: hci0: command 0x1003 tx timeout [ 102.634268][ T8848] syzkaller1: entered promiscuous mode [ 102.641751][ T8848] syzkaller1: entered allmulticast mode [ 102.649929][ T8142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.698367][ T8142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.708981][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!