last executing test programs: 19.195198678s ago: executing program 2 (id=939): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 16.955283728s ago: executing program 0 (id=942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0xfffffff9, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, 0x0}, 0x20004014) 14.842759226s ago: executing program 2 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 14.815080317s ago: executing program 3 (id=946): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x40, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14.726260859s ago: executing program 0 (id=948): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x1}, 0xffffffffffffffff, 0x6}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 14.648789111s ago: executing program 2 (id=949): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 14.545466083s ago: executing program 0 (id=950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1804000055a62701000000001000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 14.447308015s ago: executing program 3 (id=951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c80)={"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"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x1fa, @loopback, 0x4}, 0xfffffffffffffd07) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.387877137s ago: executing program 1 (id=953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x3b, 0x2, {0xfc4f, 0x5, 0x101}}}}]}, 0x44}}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29a}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)}], 0x1}, 0x4005) 14.191205271s ago: executing program 3 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) munlockall() syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) pwrite64(r3, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) 14.140128302s ago: executing program 2 (id=955): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 11.464137203s ago: executing program 3 (id=956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x20000018}, 0x80, &(0x7f00000043c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 9.233018313s ago: executing program 0 (id=958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0xfffffff9, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, 0x0}, 0x20004014) 7.475316132s ago: executing program 1 (id=959): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) unshare(0x8000000) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}], 0x1, 0x0) unshare(0x8000000) 7.349826775s ago: executing program 1 (id=961): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x40, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.303263236s ago: executing program 2 (id=962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x10, 0x800, 0x354f, 0x2, 0x800, 0x9, 0x8, 0x80000000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x1, 0xb}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca6e, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x3, 0x8, 0xfffffffc, 0x0, 0x7, 0x200005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0xd0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) 7.244482037s ago: executing program 0 (id=963): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0x8000, 0x8, 0x7fffffff}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0x9, 0x6, @multicast}, 0x14) 6.983334163s ago: executing program 1 (id=965): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x1}, r0, 0x6}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.890768946s ago: executing program 1 (id=966): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 6.532571914s ago: executing program 4 (id=967): r0 = syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10040, &(0x7f00000000c0)=ANY=[@ANYBLOB='heartbeat=none,journal_async_commit,journal_async_commit,coherency=full,coherency=full\x00'], 0x1, 0x4445, &(0x7f00000044c0)="$eJzs1ztvHFUfB+AzYzteO3bezUsKIygsgUQEyNiuEBSAuESREI4MQQgjWetLEsPaa+w1cpECpJQUQVBRU0JNhZQvABJfAD4AUIQiULFoZ2ednb3EC+yFmOcpPDvnnJnz9/52Zs7EqfK1rf3Zrf3Zws5saf3K/uLsB6XiwfZmiAdk2PPTnX7kJPvhWXrxldffXAxh98biSqVSqYSx0NFCw+c7t6+vN27r4qZjquftfMZeeDuEcK6lrqqREMJbX4cQhRCifFpfup1Ij6r2vfP+ox+HXG+q+XD1u6kvDy8+9dWVbx+689PSzY4DoxA+Lz745NXtnx8ZefbHx3szOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzXheWly5fmF8KtKJ/s795YXGnsH8+nH3Ltj69U+l4iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAvd2F56fKl+YVwKwq5X8dD2L2xuNLYP5pPP+TbH195bgBF0jcXX1t66eX5hST3SiVq6X86bfrlhZFwNoRw5/b19ZDZ/jDdOD5q+p00/57SUT2rv15ffd58iOK5zH4cz82FEB3W9meiybhY2i8/caV0sLPRszLuW9n846Qtk06t6R7517ZHw7vKv5ceaPk1Jfsz/Z31pLib/9RKpTLScdwXH0X1/HPhHvmPDCH/v2u8p3Xcn7LX/2jSlr2eaoFW8/9k9Pjrf3RA+Z+p/sklteYa7wDVNUy1vdN6haxs/mNJW6f8293/f2/Kf6x9/pc+7dt/0OH+v9u3CU+UbP6nkrbs91lbACT5x8df/6eG//wf6+98J0s2/9oTsSnC5Ovt9v4/PqD88/U6z0Qtv4CkPRfCdD8mPmGy+eda+u++/8Vdrf9zQ3r/yzW9/9XfQ85Htfc/2svmP9FxXLfX/8SA7/+19V8XPBXayuY/mbT9k/X/5IDyT1Ylbdb/f9TX/4f9mPXkyeZ/OmnL3gVuJn+T9V/UmvtvTfmfHv76r1b/+f7OelJk85/qOK6a//ddPP+nBp5/CJN/+YjWdc5/VTb/dMX8Teu45PrPHZ//9IDzf6yfJwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgb+J8bZsPUTyX2Y/jubkQRtL9mTAZrRU2VteKpfX39kMYTdtnw/+jq8XSWqG4urVT2thcLRSLpfUQxtL+cyEX7RdL5dXtwu6po3NNRNc2C3vltc1COYQwnrY/HKbr51rbKm8XdkMIuaO+/8Wlvd1rhZ3Vja29Z+bn5+fDxFENZ6PNw/LmTrk2e603hMmjY/NRQ3FJ9+mjWqaid0sHezuFYtI+1XBMsbReKDYcM532fRbORuW9g531QnlztVi6Wp+vvYneBHWM59NtfHH5jeVXF1oHzKT9+YGUAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/syrEJg2AQBeBLSLpskCFShywQK0ewcwbHsHQIHcDOBXQRe2sRf8HW/vvg4N7jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMnw+zYR8djTPSL+x3NLt3mmLvpierVV9unK8b3MeX3aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArOzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl+5ZGgbCAADfnUPUKYv/wSkkTq6CIi5GBCdH/4Bjh479ux26dSql4QIlH9AO7fQ8S3L38n7AvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwtvfv9uerbkKI4XZXhPC/evo9jt+X+WcxnX9zhRm5nI/P9vWtbvK7x1H8OV+tX1IX3W6Wf2Hi24uDPenqPhSDquM+IzP7Njdf37cMMVWHc97bx5hSVU1l3p3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD07cCAAAAAAIMjfeoUBCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGApAAD//63dnJk=") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x808010, &(0x7f00000002c0)=ANY=[], 0x1, 0x9b, &(0x7f0000000000)="$eJzs0s3NAQEQBuD324/gYBtw0IEatCKO3JyIREVaUYJECW7isrJhIyjAT54nmZlM3sscZnfeDlIm1SapniyWq9lkfu3p58E4/IIiSSdJN8mwvO/J4fYFyf64njZVJ3+nJgEAAL5JkVE9/l+TVpJekvYbrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HJcAAAD//yc5MPk=") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) openat(0xffffffffffffff9c, 0x0, 0x511001, 0x488) r1 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x45) ioctl$FS_IOC_RESVSP(r1, 0x40305829, 0x0) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, &(0x7f0000001f80)=""/4102, 0x1006) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, &(0x7f0000002780)={0x7d, 0x6, 0x0, 0x6}) symlink(&(0x7f0000000100)='.\x02/file1\x00', 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[], 0x1, 0x151c, &(0x7f0000000440)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJIklySZIkSXJLSJrkSEJiyC1pSJLkMiSXISSXaUwa9/tdEpKkSZKQ3Crr/1Hm73Tq/E7ndzrH73Pm+X4++2M9797P2s9+n/ey937xdbfhtZvWqdGYiOBfgr/8kQwAsQAwGACuAIAAACrGV4w/vz6vxOR/bSfsz3V/2qWugF1K3P/cjfufu3H/czfuf+7G/c/duP+5G/c/d+P+M5abbZ5R5Epecu/C9/9zM/7+/y+SXW7c52vLXd0dIOaPpnD/czfu/3+t4I9sxP3P3bj/uVXspS6A/R/A7//cIM/fXcP9z924/4zlZv/+e8zKXep73P/TApHc/RvIpX79McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLHU77ixQA5IwvdV2MMcYYY4wxxhj78/g8l7oCxhhjjDHGGGOM/fshCJCgIIAYyAOxkBfiQADA5ZAfroAIXAnxcBUUgKuhIBSCwlAEEqAoFAMNBiwQhFAcSkAUroGScC2UgtJQBsqCg3KQCNdBebgeKsANUBFuhEpwE1SGKnAzVIVboBrcCtXhNqgBt0NNqAW1oQ7cAXXhTqgHd0F9uBsawD3QEO6FRnAfNIb7oQk8AE3hQWgGD0FzaAEtoRW0/l/lPwu94DnoDX0gGfpCP3ge+sMAGAiDYDC8AEPgRRgKL0EKDIPh8DKMgFdgJLwKo+A1GA2vwxh4A8bCOBgPEyAVJsIkeBMmw1swBabCNJgOaTADZsLbMAtmwxx4B+bCuzAP5sMCWAjp8B5kwCLIhPdhMXwAWbAElsIyWA4rYCWsgtWwBtbCOlgPG2AjbILNsAW2wjbYDh/CDvgIdsLHsAt2wx74BPbCp/9k/qm/ye+OgIACBSpUGIMxGIuxGIdxmA/zYX7MjxGMYDzGYwEsgAWxIBbGwpiACVgMi6FBg5SXsDgWxyhGsSSWxFJYCstgGXToMBETsTxejxWwAlbEilgJK2FlrIJVsCpWxWpYDatjdayBNbAm1sTaWBvvwDuwL9bDelgf62MDbJBzewobY2Nsgk2wKTbFZtgMm2NzbIktsTW2xjbYBttiW2yP7bEDdsCO2BGTMAk7YSfsjJ2xC3bBrtgVu2E37I49sEf2s3kAn8PnsA/WFH2xH/bD/piSZyAOwkH4Ag7BF/FFfAlTcBgOx5fxZXwFR+JJHIWv4WgcjdXEGzgWxyGJCZiKqTgJJ+FknIxTcCpOxemYhjNwJs7EWTgbZ+M7OBffxXdxPs7HhZiO6ZiBizATM3ExnsIsXIJLcRkuxxW4HFfhalyFa3EdrsUNuAE34SbcgltwG+a8WRUAfoy7cTem4F7ci/twH+7H/XgAD2A2ZuNBPIiHLOBhPIxH8AgexWN4HI/hCTyBJ/EUnsYBF6Z6OuHLJh+VXpMC4jwllIgRMSJWxIo4ESfyiXwiv8gvIiIi4kW8KCAKiIKioCgsCosEkSCKiWLCCCNIhDEAIKIiKkqKkqKUKCXKiDLCCScSRaIoL8qLCqKCqChuFJXETaKyqCLauaqiqqgm2rvq4jZRQ9QQNUUtUVvUEXVEXVFX1BP1RH1RXzQQDURDca9oJPriQLxfnO9MUzEMm4nh2Fy0EPLCkbQRI7GtaCfai0fFazgKO4o2Lkk8ITqJsdhZ/EWMw6dEVzEBu4lnRHfRQ/QUz4peoq3rLfqIKdhX9BPTsb8YIAaKQWIW1hLv4Ny8tcVLIkUME8PFy2IhviJGilfFqL4gRovXxRjxhhgrxonxYoJIFRPFJPGmmCzeElPEVDFNTBdpYoaYKd4Ws8RsMUe8I+aKd8U8MV8sEAtFunhPZIhFIlO8LxaLD0SWWCKWimViuVghVopVIi+sEWvFOrFebBAbxSaxWWwRW8U2sV18KHaIj8RO8bHYJXaLPeITsVd8KvaJz8R+8bk4IL4Q2eJLcVB8JQ6Jr8Vh8Y04Ir4VR8UxcVx8J06I78VJcUqcFmfEWfGD+FH8JM4JL0CiFFJKJQMZI/PIWJlXxsnLZD4ZXHh2r5Tx8ipZQF4tC8pCsrAsIhNkUVlMammklSRDWVyWkFF5jSwpr5WlZGlZRpaVTpaTifI6WV5eLyvIG2RFeaOsJG+SlWUVebOsKm+R1eStEiK/7KOmrCVryzryDpkMd8p68i5ZX94tG8h7ZEN5r2wk75ON5f2yiXxANpUPymbyIdlctpAtZSvZWj4s28hHZFvZTraXj8oO8jHZUT4uk+QTspP0F14iT8mu8mnZTT4ju8sesqf8SZ6TXvaWfST0BdlPPi/7ywFyoBwkB8sX5BD5ohwqX5IpcpgcLl+WI+QrcqR8VY6Sr8nR8nU5Rr4hx8pxcrycIFPlRDlJvikny7fkFDlVTpPTZZqcIQdemGmOlP8w/83fyR/68943yc1yi9wqt8nt8kO5Q34kd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMlveJg/Kg/KQPCQPy8PyiDwij8pj8oz8Tp6Q38uT8pQ8Jc/Is/Ks/PHCcwAKlVBSKRWoGJVHxaq8Kk5dpvKpy1V+dYWKqCtVvLpKFVBXq4KqkCqsiqgEVVQVU1oZZRWpUBVXJVRUXZPzGaXKqLLKqXIqUV33z+SrkupaVUqV/lV+Tn3Jf6e+1qq1aqPaqLaqrWqv2qsOqoPqqDqqJJWkOqlOqrPqrLqoLqqr6qq6qW6qu+queqqeqpfqpXqr3ipZJat+6nnVXw1QA9UgNVi9oIaoIWqoGqpSVIoaroarEWqEGqlGqlFqlBqtRqsxaowaq8aq8Wq8SlWpapKapCaryWqKmqKmqWkqTaWpmWqmmqVmqTlqjpqr5qp5ap5aoBaodJWuMlSGylSZarFarLLUErVELVPL1Aq1Qq1Sq9QatUatU+vUBrVBZanNarPaqraq7Wq72qF2qJ1qp9qldqk9ao/aq/aqfWqf2q/2qwPqgMpW2eqgOqgOqUPqsDqsjqgj6qg6qo6r4+qEOqFOqpPqtDqtzqqz6kf1ozqnzp0/7QtEIAIVqCAmiAlig9ggLogL8gX5gvxB/iASRIL4ID4oEFwdFAwKBYWDIkFCUDQoFujABDYQF5oeDa4JSgbXBqWC0kGZoGzggnJBYnBdUD64PqgQ3BBUDG4MKgU3BZWDKsHNQdXglqBacGtQPbgtqBHcHtQMagW1gzrBHUHd4M6gXnBXUD+4O2gQ3BM0DO4NGgX3BY2D+4MmwQNB0+DBoFnwUNA8aBG0DFoFrf/U+b0/WegR11v30cm6r+6nn9f99QA9UA/Sg/ULeoh+UQ/VL+kUPUwP1y/rEfoVPVK/qkfp1/Ro/boeo9/QY/U4PV5P0Kl6op6k35Sg39JT9FQ9TU/XaXqGnqnf1rP0bD1Hv6Pn6nf1PD1fL9ALdbp+T2foRTpTv68X6w90ll6il+plerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbXq7/lDv0B/pnfpjvUvv1nv0J3qv/lTv05/p/fpzfUB/obP1l/qg/kof0l/rw/obfUR/q4/qY/q4/k6f0N/rk/qUPq3P6LP6B/2j/kmf0/78yf35r3ejjDIxJsbEmlgTZ+JMPpPP5Df5TcRETLyJNwVMAVPQFDSFTWGTYBJMMVPMnEeGTHFT3ERN1JQ0JU0pU8qUMWWMM84kmkRT3pQ3FUwFU9FUNJVMJVPZVDY3m5vNLeYWc6u51dxmbjO3m9tNLVPL1DF1TF1T19Qz9Ux9U980MA1MQ9PQNDKNTGPT2DQxTUxT09Q0M81Mc9PctDQtTWvT2rQxbUxb09a0N+1NB9PBdDQdTZJJMp1MJ9PZdDZdTBfT1XQ13Uw30910Nz1NT9PL9DK9TW+TbJJNP9PP9Df9zUAz0Aw2g80QM8QMNUNNikkxw81wM8KMMCPNSDPKvGZGnz9RNW+YsWacGW8mmFSTaiaZSWaymWymmClmmplm0kyamWlmmllmlplj5pi5Zq6ZZ+aZBWaBSTfpJsNkmEyTaRabxSbLZJmlZqlZbpablWalWW1Wm7VmrVkP681Gs9FsNpvNVrPVbDfbzQ6zw+w0O80us8vsMXvMXrPX7DP7zH6z3xwwB0y2yTYHzUFzyBwyh81hc8QcMUfNUXPcHDcnzAlz0pw0p81pc9YUuvB96U2szWvj7GU2n73c5rdX2L+NC9siNsEWtcWstgVtoV/Fxlpbypa2ZWxZ62w5m2iv+01c2VaxN9uq9hZbzd5qq/8mrmvvtPXsXba+vdvWsXf8Km5g77EN7YO2ESKAbWGb2Fa2qX3QNrMP2ea2hW1pW9kO9jHb0T5uk+wTtpN98jdxhl1kV9s1dq1dZ3fZ3fa0PWMP2a/tWfuD7W372MH2BTvEvmiH2pdsih32m3i0fd2OsW/YsXacHW8n/CaeZqfbNDvDzrRv21l29m/idPuenWsz7Tw73y6wC3+OMyzaTPu+XWw/sFk2gKV2mV1uV9iVdtX/r3WZ3WA32k12p/3YbrXb7Hb7od2RcyJsd9s99hO7135qD9qv7H77uT1gD9ts++XP8fnjO2y/sUfst/aoPWaP2+/sCfu9ysk+f+zf2Z/sOestEBKQJEUBxVAeiqW8FEeXUT66nPLTFRShKymerqICdDUVpEJUmIpQAhWlYqTJkCWikIpTCYrSNZRTXhkqS47KUSJdR+XpeqpAN1BFupEq0U1UmarkvbAZ3UrV6TaqQbdTTapFtakO3UF16U6qR3dRfbqbGtA91JDupUZ0HzWm+6kJPUBN6UFqRg9Rc2pBLakVtaaHqQ09Qm2pHbWnR6kDPUYd6XFKoieoEz1Jnekv1IWeoq70NHWjZ6g79aCe9Cz1oueoN/WhZOpL/eh56k8DaCANosH0Ag2hF2kovUQpNIyG08s0gl6hkfQqjaLXaDS9TmPoDRpL42g8TaBUmkiT6E2aTG/RFJpK02g6pdEMmklv0yyaTXPoHZpL79I8mk8LaCGl03uUQYsok96nxfQBZdESWkrLaDmtoJW0ilbTGlpL62g9baCNtIk20xbaSttoO31IO+gj2kkf0y7aTXvoE9pLn9I++oz20+d0gL6gbPqSDtJXdIi+psP0je9D39JROkbH6Ts6Qd/TSTpFp+kMnaUf6Ef6ic6RJwgxFKEMVRiEMWGeMDbMG8aFl4X5wsvD/OEVYSS8MowPrwoLhFeHBcNCYeGwSJgQFg2LhTo0oQ0pDMPiYYkwGl4TlgyvDUuFpcMyYdnQheXCxPC6sHx4fVghvCGsGN4Y5jT+wburhreE1cJbw+rhbWGN8PawZlgrrB3WCe8I64Z3hvXCu8L64d1hhfCesGF4b9govC9sHN4fNgkfCJuGD4bNwofC5mGLsGXYKmwdPhy2CR8J24btwvbho2GH8LGwY/h4mBQ+EXYKn/x5/T2L/v765LBv2C98Pnw+9P4uuSC6MJoefS+aEV0UzYy+H10c/SCaFV0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3RjdFPW+Th5w6ISTTrnAxbg8LtbldXHuMpfPXe7yuytcxF3p4t1VroC72hV0hVxhV8QluKKumNPOOOvIha64K+Gi7hpX0l3rSrnSrowr65wr5xJdK9fatXZt3COurWvn2rtH3aPuMfeYe9w97p5wndyTrrP7i+vinnJd3dPuafeM6+56uJ7uWdfLTcz/y3Oe7Pq5fq6/6+8GuoFusBvshrghbqgb6lJcihvuhrsRboQb6Ua6UW6UG+1GuzsVwFg31o13412qS3WT3CQ32U12U9wUN81Nc2kuzc10M90sN8tVm/3LXua5eW6BW+DSXbrLcOfPGTPdYrfYZbkst9QtdcvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Xa3w+1wO91Ot8tf8cukbq/b5/a5/W6/O+C+cNnuS3fQfeUOua/dYfeNO+K+dUfdMXfcfedOuO/dSXfKnXZn3Fn3g/vR/eTOOe9SIxMjkyJvRiZH3opMiUyNTItMj6RFZkRmRt6OzIrMjsyJvBOZG3k3Mi8yP7IgsjCSHnkvkhFZFMmMvB9ZHPkgkhVZElkaWRZZHlkR8b7o1tAX9yV81F/jS/prfSlf2pfxZb3z5Xyiv86X99f7Cv4GX9Hf6Cv5m3xlX8Xf7B/yzX0L39K38q39w76Nf8S39e18e/+o7+Af8x394z7JP+E7+Sd9Z/8X38U/5bv6p303/4zv7nv4nv5Z38s/53v7Pj7Z9/X9/PO+vx/gB/pBfrB/wQ/xL/qh/iWf4of54f5lP8K/4kf6V/0o/5ofHfO6H5NziQwTfKqf6Cf5N/1k/5af4qf6aX66T/Mz/Ez/tp/lZ/s5/h0/17/r5/n5foFf6NP9ez7DL/KZ/n2/2H/gs/ySnJvKfqVf5Vf7NX6tX+fX+w1+o9/kN/stfqvf5rf7D/0O/5Hf6T/2u/xuv8d/4vf6T/0+/5nf7z/3B/wXPtt/6Q/6r/wh/7U/7L/xR/y3/qg/5o/77/wJ/70/6U/50/6MP+t/8D/6n/w5/jdrjDHGGGN/yMSLQ/HrNb/czu/7OznirzbuBwCXbyuS/dfrz59Rri/4y3iASOgQAYAn+nS7P2epWTM5OfnCtlkSghLzAXJ+CTovBn6Ofy5gCbSHxyAJ2kH5361/gOhxlv7B/NEbAeL+KicWLsYX5/8MAJN/Z/6HHx2dUSk8Hf8/zD8foFSJiznnr2dz4iXQ/uf7K+2gwt+pv1Cbf1B/3s9TAdr+VU4+uBhfrD8RHoEnIelXWzLGGGOMMcYYY78YIG7uknP9mfM3Pn/v+jxBXczJAxfjf3R9zhhjjDHGGGOMsUvvqR49H384Kaldl39+UP1/lfWHB83g3zUzD3534D1AziMKAP7FCQHOD+R/8ii2/Ef2lXLhrfO3q5af8QH832jlnzG4xB9MjDHGGGOMsT/dxZP+Xz+uLlVBjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYLvSf+O/ELvUxMsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY5fa/wsAAP//aPv0uw==") ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, '.\x02\x00'}) 5.682361453s ago: executing program 4 (id=968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1804000055a62701000000001000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.492901319s ago: executing program 0 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x3b, 0x2, {0xfc4f, 0x5, 0x101}}}}]}, 0x44}}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29a}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000006125ce8", 0x17}], 0x1}, 0x4005) 4.46363727s ago: executing program 3 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) munlockall() syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) pwrite64(r3, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) 4.350803923s ago: executing program 1 (id=971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3.871302814s ago: executing program 2 (id=972): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.179078034s ago: executing program 3 (id=973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0xfffffff9, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, 0x0}, 0x20004014) 483.37592ms ago: executing program 4 (id=974): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) unshare(0x8000000) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}], 0x1, 0x0) unshare(0x8000000) 369.895802ms ago: executing program 4 (id=975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 275.203444ms ago: executing program 4 (id=976): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x40, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 0s ago: executing program 4 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000c80)={"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"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe64, 0x1fa, @loopback, 0x4}, 0xfffffffffffffd07) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): tdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.947276][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.976695][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.986627][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.036582][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.048961][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.064776][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.075622][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.086445][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.097500][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.107977][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.123540][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.136951][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.161636][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.172578][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.202378][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.224470][ T4366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.258877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.274156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.284259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.321124][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 85.321817][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.327419][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 85.340619][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 85.344677][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 85.350458][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 85.390506][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.401822][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.412519][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.422581][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.433220][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.445283][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.456050][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.491953][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.543830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.569934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.602693][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.612685][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.622394][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.632332][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.755362][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.790438][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.833762][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.933661][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.967088][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.993982][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.030469][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.100796][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.128071][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.172389][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.190751][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.220831][ T4380] Zero length message leads to an empty skb [ 86.249030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.693621][ T4393] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 86.841833][ T3534] cfg80211: failed to load regulatory.db [ 87.512275][ T4412] loop2: detected capacity change from 0 to 164 [ 87.617361][ T4412] netlink: 488 bytes leftover after parsing attributes in process `syz.2.19'. [ 88.495245][ T4427] device syzkaller0 entered promiscuous mode [ 92.145295][ T4460] loop1: detected capacity change from 0 to 164 [ 92.220910][ T4460] netlink: 488 bytes leftover after parsing attributes in process `syz.1.31'. [ 92.791618][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 92.857576][ T4484] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 92.886543][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 92.943017][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 92.989770][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 93.011854][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 93.048370][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 93.069242][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 93.542336][ T4497] netlink: 68 bytes leftover after parsing attributes in process `syz.0.45'. [ 93.796889][ T4501] sg_write: process 31 (syz.1.48) changed security contexts after opening file descriptor, this is not allowed. [ 94.424439][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 94.452083][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 94.478896][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 94.515490][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 94.549334][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 94.569792][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 94.590104][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 94.996309][ T4530] netlink: 68 bytes leftover after parsing attributes in process `syz.0.57'. [ 95.066019][ T4532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 95.232882][ T4534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'. [ 95.838039][ T4548] loop2: detected capacity change from 0 to 2048 [ 95.927425][ T4548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.462354][ T9] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 96.494965][ T4565] netlink: 68 bytes leftover after parsing attributes in process `syz.1.69'. [ 96.530479][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 96.562574][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.562574][ T9] [ 96.601524][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 96.607638][ T9] EXT4-fs (loop2): Free/Dirty block details [ 96.640411][ T9] EXT4-fs (loop2): free_blocks=4096 [ 96.645809][ T9] EXT4-fs (loop2): dirty_blocks=512 [ 96.678752][ T9] EXT4-fs (loop2): Block reservation details [ 96.690857][ T9] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 96.733633][ T46] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 96.744307][ T4570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.72'. [ 96.770997][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 96.809967][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 96.851404][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 96.877561][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 96.930698][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 96.938355][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 96.997303][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 97.021391][ T4579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 97.797869][ T4595] netlink: 68 bytes leftover after parsing attributes in process `syz.0.82'. [ 97.978564][ T4599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.84'. [ 98.269651][ T4610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 98.584524][ T4615] device syzkaller0 entered promiscuous mode [ 98.639651][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.758466][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 98.800755][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 98.819312][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 98.843622][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 98.858169][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 98.905903][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 98.977601][ T4616] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 100.893271][ T4645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 101.073254][ T4659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'. [ 101.280874][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 101.323518][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 101.359883][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 101.389747][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 101.399443][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 101.438147][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 101.470805][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 101.764441][ T4678] device syzkaller0 entered promiscuous mode [ 101.819987][ T4687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'. [ 104.242524][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 104.326590][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 104.402274][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 104.443622][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 104.487718][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 104.527982][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 104.576607][ T4734] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 104.721114][ T4749] device syzkaller0 entered promiscuous mode [ 106.598558][ T4762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 106.610700][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 106.907743][ T4785] loop0: detected capacity change from 0 to 4096 [ 106.963411][ T4785] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 107.022444][ T27] audit: type=1800 audit(1784340765.770:2): pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.129" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 107.105680][ T4795] device syzkaller0 entered promiscuous mode [ 107.115705][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 107.144784][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 107.222921][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 107.273668][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 107.279817][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 107.313683][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 107.342880][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 107.375866][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 107.849600][ T4816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 107.887935][ T4820] loop0: detected capacity change from 0 to 256 [ 107.922193][ T4820] ======================================================= [ 107.922193][ T4820] WARNING: The mand mount option has been deprecated and [ 107.922193][ T4820] and is ignored by this kernel. Remove the mand [ 107.922193][ T4820] option from the mount to silence this warning. [ 107.922193][ T4820] ======================================================= [ 107.999560][ T4817] device syzkaller0 entered promiscuous mode [ 108.099290][ T4820] FAT-fs (loop0): Directory bread(block 64) failed [ 108.127438][ T4820] FAT-fs (loop0): Directory bread(block 65) failed [ 108.158115][ T4820] FAT-fs (loop0): Directory bread(block 66) failed [ 108.190567][ T4820] FAT-fs (loop0): Directory bread(block 67) failed [ 108.207642][ T4820] FAT-fs (loop0): Directory bread(block 68) failed [ 108.224877][ T4820] FAT-fs (loop0): Directory bread(block 69) failed [ 108.245443][ T4820] FAT-fs (loop0): Directory bread(block 70) failed [ 108.273350][ T4820] FAT-fs (loop0): Directory bread(block 71) failed [ 108.309151][ T4820] FAT-fs (loop0): Directory bread(block 72) failed [ 108.329476][ T4820] FAT-fs (loop0): Directory bread(block 73) failed [ 108.523856][ T4820] syz.0.141: attempt to access beyond end of device [ 108.523856][ T4820] loop0: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 108.631392][ T4820] syz.0.141: attempt to access beyond end of device [ 108.631392][ T4820] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 108.706118][ T27] audit: type=1800 audit(1784340767.430:3): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.141" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 108.727946][ T4845] syz.0.141: attempt to access beyond end of device [ 108.727946][ T4845] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 108.759555][ T27] audit: type=1800 audit(1784340767.500:4): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.141" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 110.306843][ T4843] device syzkaller0 entered promiscuous mode [ 112.358078][ T4860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.147'. [ 112.379845][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 112.402516][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 112.416323][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 112.425841][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 112.451548][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 112.459182][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 112.500489][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 112.508418][ T4877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.152'. [ 112.739666][ T4901] loop2: detected capacity change from 0 to 64 [ 112.908906][ T4905] loop0: detected capacity change from 0 to 164 [ 112.993125][ T4823] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.996935][ T4905] netlink: 468 bytes leftover after parsing attributes in process `syz.0.157'. [ 113.267502][ T4909] device syzkaller0 entered promiscuous mode [ 115.242997][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 115.263107][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 115.306475][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 115.371609][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 115.401558][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 115.412884][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 115.423877][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 115.470391][ T4935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'. [ 115.522300][ T4943] device syzkaller0 entered promiscuous mode [ 115.779677][ T4957] loop4: detected capacity change from 0 to 164 [ 115.855169][ T4957] netlink: 468 bytes leftover after parsing attributes in process `syz.4.170'. [ 116.634436][ T4952] loop3: detected capacity change from 0 to 32768 [ 116.679890][ T4979] device syzkaller0 entered promiscuous mode [ 116.688386][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 116.708755][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 116.719908][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 116.730958][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 116.738897][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 116.747430][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 116.751619][ T4952] JBD2: Ignoring recovery information on journal [ 116.755511][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 116.906722][ T4952] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.310591][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 119.293665][ T4986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.180'. [ 119.468503][ T5002] device syzkaller0 entered promiscuous mode [ 121.719342][ T5073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.194'. [ 121.871412][ T5071] device syzkaller0 entered promiscuous mode [ 121.929388][ T5077] loop2: detected capacity change from 0 to 4096 [ 121.979664][ T5077] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.026477][ T27] audit: type=1800 audit(1784340780.770:5): pid=5077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.197" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 122.320051][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 122.558409][ T5099] loop2: detected capacity change from 0 to 256 [ 122.692572][ T5099] FAT-fs (loop2): Directory bread(block 64) failed [ 122.722196][ T5099] FAT-fs (loop2): Directory bread(block 65) failed [ 122.757835][ T5099] FAT-fs (loop2): Directory bread(block 66) failed [ 122.789444][ T5099] FAT-fs (loop2): Directory bread(block 67) failed [ 122.822911][ T5099] FAT-fs (loop2): Directory bread(block 68) failed [ 122.854567][ T5099] FAT-fs (loop2): Directory bread(block 69) failed [ 122.885682][ T5099] FAT-fs (loop2): Directory bread(block 70) failed [ 122.902940][ T5099] FAT-fs (loop2): Directory bread(block 71) failed [ 122.948624][ T5099] FAT-fs (loop2): Directory bread(block 72) failed [ 122.956600][ T5099] FAT-fs (loop2): Directory bread(block 73) failed [ 123.055399][ T5108] loop1: detected capacity change from 0 to 164 [ 123.068925][ T5099] syz.2.200: attempt to access beyond end of device [ 123.068925][ T5099] loop2: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 123.072389][ T5108] netlink: 468 bytes leftover after parsing attributes in process `syz.1.203'. [ 123.101655][ T5099] syz.2.200: attempt to access beyond end of device [ 123.101655][ T5099] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 123.115916][ T27] audit: type=1800 audit(1784340781.860:6): pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.200" name="file1" dev="loop2" ino=1048596 res=0 errno=0 [ 123.141305][ T5099] syz.2.200: attempt to access beyond end of device [ 123.141305][ T5099] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 123.195771][ T5109] syz.2.200: attempt to access beyond end of device [ 123.195771][ T5109] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 123.229698][ T5109] Buffer I/O error on dev loop2, logical block 442, async page read [ 123.239238][ T27] audit: type=1800 audit(1784340781.980:7): pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.200" name="file1" dev="loop2" ino=1048596 res=0 errno=0 [ 124.781304][ T5128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 125.242244][ T5145] loop0: detected capacity change from 0 to 256 [ 125.259385][ T5144] loop3: detected capacity change from 0 to 164 [ 125.314137][ T5144] netlink: 468 bytes leftover after parsing attributes in process `syz.3.215'. [ 125.354538][ T5145] FAT-fs (loop0): Directory bread(block 64) failed [ 125.382480][ T5145] FAT-fs (loop0): Directory bread(block 65) failed [ 125.414195][ T5145] FAT-fs (loop0): Directory bread(block 66) failed [ 125.443197][ T5145] FAT-fs (loop0): Directory bread(block 67) failed [ 125.452967][ T5145] FAT-fs (loop0): Directory bread(block 68) failed [ 125.481997][ T5145] FAT-fs (loop0): Directory bread(block 69) failed [ 125.508160][ T5145] FAT-fs (loop0): Directory bread(block 70) failed [ 125.534818][ T5145] FAT-fs (loop0): Directory bread(block 71) failed [ 125.591077][ T5145] FAT-fs (loop0): Directory bread(block 72) failed [ 125.614623][ T5145] FAT-fs (loop0): Directory bread(block 73) failed [ 125.665513][ T5147] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 125.731964][ T5145] syz.0.214: attempt to access beyond end of device [ 125.731964][ T5145] loop0: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 125.810977][ T5145] syz.0.214: attempt to access beyond end of device [ 125.810977][ T5145] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 125.849516][ T27] audit: type=1800 audit(1784340784.590:8): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.214" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 125.871131][ T5152] syz.0.214: attempt to access beyond end of device [ 125.871131][ T5152] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 125.871179][ T5149] device syzkaller0 entered promiscuous mode [ 125.908038][ T27] audit: type=1800 audit(1784340784.650:9): pid=5152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.214" name="file1" dev="loop0" ino=1048597 res=0 errno=0 [ 126.020404][ T5151] device syzkaller0 entered promiscuous mode [ 130.084228][ T5200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'. [ 130.110435][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 130.326033][ T5211] device syzkaller0 entered promiscuous mode [ 130.438723][ T5215] loop0: detected capacity change from 0 to 256 [ 130.573239][ T5215] FAT-fs (loop0): Directory bread(block 64) failed [ 130.630583][ T5215] FAT-fs (loop0): Directory bread(block 65) failed [ 130.643517][ T5215] FAT-fs (loop0): Directory bread(block 66) failed [ 130.655897][ T5216] loop2: detected capacity change from 0 to 2048 [ 130.679789][ T5215] FAT-fs (loop0): Directory bread(block 67) failed [ 130.688077][ T5215] FAT-fs (loop0): Directory bread(block 68) failed [ 130.695882][ T5215] FAT-fs (loop0): Directory bread(block 69) failed [ 130.704818][ T5215] FAT-fs (loop0): Directory bread(block 70) failed [ 130.712729][ T5215] FAT-fs (loop0): Directory bread(block 71) failed [ 130.720096][ T5215] FAT-fs (loop0): Directory bread(block 72) failed [ 130.728796][ T5215] FAT-fs (loop0): Directory bread(block 73) failed [ 130.737244][ T5216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.962744][ T46] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 130.991912][ T46] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 130.992262][ T5215] syz.0.230: attempt to access beyond end of device [ 130.992262][ T5215] loop0: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 131.005344][ T46] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.005344][ T46] [ 131.084323][ T46] EXT4-fs (loop2): Total free blocks count 0 [ 131.132720][ T46] EXT4-fs (loop2): Free/Dirty block details [ 131.138981][ T46] EXT4-fs (loop2): free_blocks=4096 [ 131.179705][ T46] EXT4-fs (loop2): dirty_blocks=512 [ 131.183842][ T5215] syz.0.230: attempt to access beyond end of device [ 131.183842][ T5215] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 131.196498][ T46] EXT4-fs (loop2): Block reservation details [ 131.216848][ T46] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 131.278081][ T46] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 131.291308][ T27] audit: type=1800 audit(1784340790.030:10): pid=5215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.230" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 131.311645][ T5230] syz.0.230: attempt to access beyond end of device [ 131.311645][ T5230] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 131.383773][ T27] audit: type=1800 audit(1784340790.110:11): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.230" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 131.545430][ T5239] netlink: 68 bytes leftover after parsing attributes in process `syz.2.232'. [ 132.933721][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940451][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.181927][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 133.209310][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 133.219604][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 133.236052][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 133.266410][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 133.285164][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 133.306932][ T5245] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 133.867042][ T5280] loop3: detected capacity change from 0 to 164 [ 133.917036][ T5284] loop4: detected capacity change from 0 to 256 [ 134.013915][ T5284] FAT-fs (loop4): Directory bread(block 64) failed [ 134.020296][ T5275] loop2: detected capacity change from 0 to 2048 [ 134.026084][ T5280] netlink: 468 bytes leftover after parsing attributes in process `syz.3.247'. [ 134.056256][ T5284] FAT-fs (loop4): Directory bread(block 65) failed [ 134.096743][ T5275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.106307][ T5284] FAT-fs (loop4): Directory bread(block 66) failed [ 134.199400][ T5289] device syzkaller0 entered promiscuous mode [ 134.214984][ T5284] FAT-fs (loop4): Directory bread(block 67) failed [ 134.240680][ T5284] FAT-fs (loop4): Directory bread(block 68) failed [ 134.254140][ T5284] FAT-fs (loop4): Directory bread(block 69) failed [ 134.314416][ T5284] FAT-fs (loop4): Directory bread(block 70) failed [ 134.324230][ T4325] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 134.381013][ T5284] FAT-fs (loop4): Directory bread(block 71) failed [ 134.398849][ T4325] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 134.419506][ T5284] FAT-fs (loop4): Directory bread(block 72) failed [ 134.429932][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 134.437718][ T4325] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.437718][ T4325] [ 134.448325][ T5284] FAT-fs (loop4): Directory bread(block 73) failed [ 134.464664][ T4325] EXT4-fs (loop2): Total free blocks count 0 [ 134.479147][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 134.500666][ T4325] EXT4-fs (loop2): Free/Dirty block details [ 134.506937][ T4325] EXT4-fs (loop2): free_blocks=4096 [ 134.509271][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 134.532820][ T4325] EXT4-fs (loop2): dirty_blocks=512 [ 134.538214][ T4325] EXT4-fs (loop2): Block reservation details [ 134.546154][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 134.564128][ T5284] syz.4.245: attempt to access beyond end of device [ 134.564128][ T5284] loop4: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 134.577302][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 134.586468][ T4325] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 134.601169][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 134.609099][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 134.619145][ T5284] syz.4.245: attempt to access beyond end of device [ 134.619145][ T5284] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 134.642708][ T4302] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 134.649797][ T5294] syz.4.245: attempt to access beyond end of device [ 134.649797][ T5294] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 134.660127][ T27] audit: type=1800 audit(1784340793.390:12): pid=5284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.245" name="file1" dev="loop4" ino=1048599 res=0 errno=0 [ 134.730292][ T27] audit: type=1800 audit(1784340793.420:13): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.245" name="file1" dev="loop4" ino=1048599 res=0 errno=0 [ 135.297379][ T5313] loop0: detected capacity change from 0 to 164 [ 135.380734][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 135.409345][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 135.426303][ T5313] netlink: 468 bytes leftover after parsing attributes in process `syz.0.259'. [ 135.442100][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 135.470328][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 135.481982][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 135.497044][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 135.507627][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 135.517648][ T5326] device syzkaller0 entered promiscuous mode [ 135.670118][ T5329] netlink: 68 bytes leftover after parsing attributes in process `syz.2.264'. [ 135.735031][ T5333] loop3: detected capacity change from 0 to 256 [ 135.816182][ T5333] FAT-fs (loop3): Directory bread(block 64) failed [ 135.839137][ T5333] FAT-fs (loop3): Directory bread(block 65) failed [ 135.863050][ T5333] FAT-fs (loop3): Directory bread(block 66) failed [ 135.885437][ T5333] FAT-fs (loop3): Directory bread(block 67) failed [ 135.908531][ T5333] FAT-fs (loop3): Directory bread(block 68) failed [ 135.937358][ T5333] FAT-fs (loop3): Directory bread(block 69) failed [ 135.961384][ T5333] FAT-fs (loop3): Directory bread(block 70) failed [ 135.984551][ T5333] FAT-fs (loop3): Directory bread(block 71) failed [ 136.007384][ T5333] FAT-fs (loop3): Directory bread(block 72) failed [ 136.030701][ T5333] FAT-fs (loop3): Directory bread(block 73) failed [ 136.177529][ T5333] syz.3.266: attempt to access beyond end of device [ 136.177529][ T5333] loop3: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 136.235615][ T5333] syz.3.266: attempt to access beyond end of device [ 136.235615][ T5333] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 136.304646][ T27] audit: type=1800 audit(1784340795.050:14): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.266" name="file1" dev="loop3" ino=1048600 res=0 errno=0 [ 136.353922][ T5346] syz.3.266: attempt to access beyond end of device [ 136.353922][ T5346] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 136.406010][ T27] audit: type=1800 audit(1784340795.140:15): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.266" name="file1" dev="loop3" ino=1048600 res=0 errno=0 [ 136.614627][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 136.655613][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 136.688854][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 136.755998][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 136.774779][ T5369] netlink: 68 bytes leftover after parsing attributes in process `syz.0.280'. [ 136.791477][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 136.833824][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 136.930593][ T5357] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 137.607449][ T5372] device syzkaller0 entered promiscuous mode [ 138.578322][ T5395] loop0: detected capacity change from 0 to 256 [ 138.634518][ T5395] FAT-fs (loop0): Directory bread(block 64) failed [ 138.651039][ T5395] FAT-fs (loop0): Directory bread(block 65) failed [ 138.668079][ T5395] FAT-fs (loop0): Directory bread(block 66) failed [ 138.682535][ T5395] FAT-fs (loop0): Directory bread(block 67) failed [ 138.690001][ T5395] FAT-fs (loop0): Directory bread(block 68) failed [ 138.708810][ T5395] FAT-fs (loop0): Directory bread(block 69) failed [ 138.716738][ T5395] FAT-fs (loop0): Directory bread(block 70) failed [ 138.728301][ T5395] FAT-fs (loop0): Directory bread(block 71) failed [ 138.737399][ T5395] FAT-fs (loop0): Directory bread(block 72) failed [ 138.744699][ T5395] FAT-fs (loop0): Directory bread(block 73) failed [ 138.785293][ T5395] syz.0.287: attempt to access beyond end of device [ 138.785293][ T5395] loop0: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 138.811937][ T5395] syz.0.287: attempt to access beyond end of device [ 138.811937][ T5395] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 138.880201][ T27] audit: type=1800 audit(1784340797.620:16): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.287" name="file1" dev="loop0" ino=1048601 res=0 errno=0 [ 140.628596][ T5414] netlink: 68 bytes leftover after parsing attributes in process `syz.4.291'. [ 140.834617][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 140.871607][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 140.893980][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 140.990722][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 141.038612][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 141.078751][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 141.087269][ T5418] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 141.829730][ T5440] device syzkaller0 entered promiscuous mode [ 142.754353][ T5461] netlink: 68 bytes leftover after parsing attributes in process `syz.2.306'. [ 144.606618][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 144.620933][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 144.629823][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 144.637669][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 144.647344][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 144.663911][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 144.679651][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 145.187801][ T5496] netlink: 68 bytes leftover after parsing attributes in process `syz.2.318'. [ 145.904868][ T5513] loop1: detected capacity change from 0 to 256 [ 145.965136][ T5513] FAT-fs (loop1): Directory bread(block 64) failed [ 145.996878][ T5513] FAT-fs (loop1): Directory bread(block 65) failed [ 146.005662][ T5507] device syzkaller0 entered promiscuous mode [ 146.037018][ T5513] FAT-fs (loop1): Directory bread(block 66) failed [ 146.061532][ T5513] FAT-fs (loop1): Directory bread(block 67) failed [ 146.087004][ T5513] FAT-fs (loop1): Directory bread(block 68) failed [ 146.116866][ T5513] FAT-fs (loop1): Directory bread(block 69) failed [ 146.152601][ T5513] FAT-fs (loop1): Directory bread(block 70) failed [ 146.176871][ T5513] FAT-fs (loop1): Directory bread(block 71) failed [ 146.206936][ T5513] FAT-fs (loop1): Directory bread(block 72) failed [ 146.250344][ T5513] FAT-fs (loop1): Directory bread(block 73) failed [ 146.443882][ T5513] syz.1.324: attempt to access beyond end of device [ 146.443882][ T5513] loop1: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 146.526805][ T5513] syz.1.324: attempt to access beyond end of device [ 146.526805][ T5513] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 146.574479][ T27] audit: type=1800 audit(1784340805.320:17): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.324" name="file1" dev="loop1" ino=1048602 res=0 errno=0 [ 148.840103][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 148.858630][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 148.866403][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 148.887384][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 148.897454][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 148.917705][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 148.940508][ T5519] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 149.124050][ T5540] netlink: 68 bytes leftover after parsing attributes in process `syz.3.331'. [ 149.581615][ T5557] device syzkaller0 entered promiscuous mode [ 149.752491][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 149.787658][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 149.796365][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 149.805011][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 149.816635][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 149.825188][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 149.837371][ T5563] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 150.116611][ T5573] device syzkaller0 entered promiscuous mode [ 150.161935][ T5576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.347'. [ 152.387450][ T5606] device syzkaller0 entered promiscuous mode [ 152.696696][ T5625] netlink: 60 bytes leftover after parsing attributes in process `syz.1.360'. [ 154.807543][ T5632] device syzkaller0 entered promiscuous mode [ 156.986858][ T5682] device syzkaller0 entered promiscuous mode [ 157.171309][ T5692] loop4: detected capacity change from 0 to 164 [ 157.233192][ T4823] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.385237][ T5705] device syzkaller0 entered promiscuous mode [ 159.556625][ T5726] netlink: 68 bytes leftover after parsing attributes in process `syz.3.380'. [ 159.577734][ T5729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.382'. [ 161.182170][ T5746] loop4: detected capacity change from 0 to 164 [ 162.463821][ T5760] netlink: 68 bytes leftover after parsing attributes in process `syz.0.393'. [ 162.517574][ T5755] device syzkaller0 entered promiscuous mode [ 163.677429][ T5781] loop1: detected capacity change from 0 to 2048 [ 163.746015][ T5781] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 166.186035][ T5799] device syzkaller0 entered promiscuous mode [ 166.279296][ T5801] device syzkaller0 entered promiscuous mode [ 166.587983][ T5810] loop2: detected capacity change from 0 to 256 [ 166.681963][ T5810] FAT-fs (loop2): Directory bread(block 64) failed [ 166.719084][ T5810] FAT-fs (loop2): Directory bread(block 65) failed [ 166.742077][ T5810] FAT-fs (loop2): Directory bread(block 66) failed [ 166.773839][ T5810] FAT-fs (loop2): Directory bread(block 67) failed [ 166.783407][ T5810] FAT-fs (loop2): Directory bread(block 68) failed [ 166.790183][ T5810] FAT-fs (loop2): Directory bread(block 69) failed [ 166.798391][ T5810] FAT-fs (loop2): Directory bread(block 70) failed [ 166.806232][ T5810] FAT-fs (loop2): Directory bread(block 71) failed [ 166.834727][ T5810] FAT-fs (loop2): Directory bread(block 72) failed [ 166.860778][ T5810] FAT-fs (loop2): Directory bread(block 73) failed [ 167.014213][ T5810] syz.2.409: attempt to access beyond end of device [ 167.014213][ T5810] loop2: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 167.031191][ T5810] syz.2.409: attempt to access beyond end of device [ 167.031191][ T5810] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 167.048300][ T5810] syz.2.409: attempt to access beyond end of device [ 167.048300][ T5810] loop2: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 167.101045][ T27] audit: type=1800 audit(1784340825.790:18): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.409" name="file1" dev="loop2" ino=1048603 res=0 errno=0 [ 168.203077][ T5835] device syzkaller0 entered promiscuous mode [ 168.223478][ T9] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 168.250567][ T5837] device syzkaller0 entered promiscuous mode [ 168.251468][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 238 with error 28 [ 168.276044][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.276044][ T9] [ 168.290594][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 168.296668][ T9] EXT4-fs (loop1): Free/Dirty block details [ 168.303279][ T9] EXT4-fs (loop1): free_blocks=4096 [ 168.308534][ T9] EXT4-fs (loop1): dirty_blocks=256 [ 168.314289][ T9] EXT4-fs (loop1): Block reservation details [ 168.320634][ T9] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 168.337004][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 168.636566][ T5850] loop0: detected capacity change from 0 to 256 [ 168.731992][ T5850] FAT-fs (loop0): Directory bread(block 64) failed [ 168.738716][ T5850] FAT-fs (loop0): Directory bread(block 65) failed [ 168.791601][ T5850] FAT-fs (loop0): Directory bread(block 66) failed [ 168.798992][ T5850] FAT-fs (loop0): Directory bread(block 67) failed [ 168.827613][ T5850] FAT-fs (loop0): Directory bread(block 68) failed [ 168.867352][ T5850] FAT-fs (loop0): Directory bread(block 69) failed [ 168.897829][ T5850] FAT-fs (loop0): Directory bread(block 70) failed [ 168.917755][ T5850] FAT-fs (loop0): Directory bread(block 71) failed [ 168.926813][ T5850] FAT-fs (loop0): Directory bread(block 72) failed [ 168.934278][ T5850] FAT-fs (loop0): Directory bread(block 73) failed [ 169.038427][ T5860] loop4: detected capacity change from 0 to 164 [ 169.050773][ T5850] syz.0.424: attempt to access beyond end of device [ 169.050773][ T5850] loop0: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 169.072342][ T5850] syz.0.424: attempt to access beyond end of device [ 169.072342][ T5850] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 169.094520][ T27] audit: type=1800 audit(1784340827.840:19): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.424" name="file1" dev="loop0" ino=1048604 res=0 errno=0 [ 169.124591][ T5850] syz.0.424: attempt to access beyond end of device [ 169.124591][ T5850] loop0: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 169.214790][ T4357] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.729296][ T5875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.434'. [ 169.766774][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 169.788447][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 169.800731][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 169.809646][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 169.825411][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 169.835083][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 169.843968][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 169.895509][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.916049][ T5877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.031799][ T5878] device syzkaller0 entered promiscuous mode [ 170.445426][ T5897] loop0: detected capacity change from 0 to 164 [ 171.112313][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 171.179564][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 171.208450][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 171.264567][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 171.329460][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 171.338342][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 171.347539][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 171.368073][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.380987][ T5916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.418527][ T5919] device syzkaller0 entered promiscuous mode [ 171.665665][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.454'. [ 171.953093][ T5938] loop1: detected capacity change from 0 to 164 [ 172.014904][ T5937] device syzkaller0 entered promiscuous mode [ 172.030830][ T4357] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.490311][ T5947] device syzkaller0 entered promiscuous mode [ 172.631068][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 174.887604][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.465'. [ 175.078193][ T5995] device syzkaller0 entered promiscuous mode [ 175.154789][ T5997] loop1: detected capacity change from 0 to 164 [ 175.242876][ T4823] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.472633][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 175.528690][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 175.552301][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 175.574383][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 175.590719][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 175.598521][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 175.610772][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 175.621139][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.636689][ T6005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.999999][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.482'. [ 176.516261][ T6035] device syzkaller0 entered promiscuous mode [ 176.603042][ T6043] loop3: detected capacity change from 0 to 256 [ 176.704280][ T6043] FAT-fs (loop3): Directory bread(block 64) failed [ 176.750368][ T6043] FAT-fs (loop3): Directory bread(block 65) failed [ 176.757064][ T6043] FAT-fs (loop3): Directory bread(block 66) failed [ 176.807308][ T6043] FAT-fs (loop3): Directory bread(block 67) failed [ 176.828869][ T6043] FAT-fs (loop3): Directory bread(block 68) failed [ 176.883606][ T6043] FAT-fs (loop3): Directory bread(block 69) failed [ 176.914969][ T6043] FAT-fs (loop3): Directory bread(block 70) failed [ 176.951596][ T6043] FAT-fs (loop3): Directory bread(block 71) failed [ 176.966689][ T6043] FAT-fs (loop3): Directory bread(block 72) failed [ 176.981580][ T6043] FAT-fs (loop3): Directory bread(block 73) failed [ 177.081112][ T6043] syz.3.487: attempt to access beyond end of device [ 177.081112][ T6043] loop3: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 177.131590][ T6043] syz.3.487: attempt to access beyond end of device [ 177.131590][ T6043] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 177.165285][ T27] audit: type=1800 audit(1784340835.910:20): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.487" name="file1" dev="loop3" ino=1048605 res=0 errno=0 [ 177.191494][ T6060] syz.3.487: attempt to access beyond end of device [ 177.191494][ T6060] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 177.222760][ T27] audit: type=1800 audit(1784340835.970:21): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.487" name="file1" dev="loop3" ino=1048605 res=0 errno=0 [ 177.492380][ T6067] loop3: detected capacity change from 0 to 164 [ 179.386134][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.495'. [ 179.470965][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 179.489727][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 179.497525][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 179.511094][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 179.518852][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 179.527954][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 179.537097][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 179.550128][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.571804][ T6097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.879718][ T6108] loop2: detected capacity change from 0 to 164 [ 180.039552][ T4823] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.178198][ T6112] loop0: detected capacity change from 0 to 2048 [ 180.726192][ T6112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 181.350228][ C0] sched: RT throttling activated [ 181.863191][ T6119] device syzkaller0 entered promiscuous mode [ 182.656796][ T4360] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 182.707172][ T4360] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 182.752164][ T4360] EXT4-fs (loop0): This should not happen!! Data will be lost [ 182.752164][ T4360] [ 182.784455][ T4360] EXT4-fs (loop0): Total free blocks count 0 [ 182.802868][ T4360] EXT4-fs (loop0): Free/Dirty block details [ 182.832841][ T4360] EXT4-fs (loop0): free_blocks=4096 [ 182.862536][ T4360] EXT4-fs (loop0): dirty_blocks=512 [ 182.877584][ T4360] EXT4-fs (loop0): Block reservation details [ 182.885432][ T4360] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 182.913561][ T4360] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 184.377294][ T6145] device syzkaller0 entered promiscuous mode [ 184.855289][ T6168] loop4: detected capacity change from 0 to 164 [ 186.862669][ T6162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.510'. [ 186.884190][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.909240][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 186.946095][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 186.963980][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 186.984199][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 187.014803][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 187.024658][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 187.061362][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.083030][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.093994][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.291795][ T6187] device syzkaller0 entered promiscuous mode [ 190.671577][ T6251] device syzkaller0 entered promiscuous mode [ 192.307959][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.324233][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 192.332281][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 192.339738][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 192.349620][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 192.358022][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 192.369575][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 192.388919][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.415563][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.457425][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.513758][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.552930][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 192.560797][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 192.588831][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 192.625277][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 192.635421][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 192.647744][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 192.665190][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.689216][ T6269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.878182][ T6271] loop2: detected capacity change from 0 to 32768 [ 194.080040][ T6271] JBD2: Ignoring recovery information on journal [ 194.172934][ T6300] device syzkaller0 entered promiscuous mode [ 194.201400][ T6271] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 194.306789][ T6271] (syz.2.537,6271,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 194.342332][ T6303] loop0: detected capacity change from 0 to 2048 [ 194.356644][ T6271] (syz.2.537,6271,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422755854968174 failed -12 [ 194.374276][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380706][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.463606][ T6271] (syz.2.537,6271,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 194.492184][ T6271] (syz.2.537,6271,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 194.537643][ T6271] (syz.2.537,6271,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 194.577670][ T6271] (syz.2.537,6271,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 194.596536][ T6303] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 194.654012][ T6304] (syz.2.537,6304,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 194.673392][ T6304] (syz.2.537,6304,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422755854968174 failed -12 [ 194.696942][ T6304] (syz.2.537,6304,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 194.712869][ T6304] (syz.2.537,6304,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 194.728545][ T6304] (syz.2.537,6304,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 194.755722][ T6304] (syz.2.537,6304,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 194.864778][ T4285] ocfs2: Unmounting device (7,2) on (node local) [ 194.966764][ T6312] device syzkaller0 entered promiscuous mode [ 195.624657][ T6323] loop1: detected capacity change from 0 to 256 [ 195.720182][ T6323] FAT-fs (loop1): Directory bread(block 64) failed [ 195.751505][ T6323] FAT-fs (loop1): Directory bread(block 65) failed [ 195.758414][ T6323] FAT-fs (loop1): Directory bread(block 66) failed [ 195.770170][ T6323] FAT-fs (loop1): Directory bread(block 67) failed [ 195.778350][ T6323] FAT-fs (loop1): Directory bread(block 68) failed [ 195.798202][ T6323] FAT-fs (loop1): Directory bread(block 69) failed [ 195.806669][ T6323] FAT-fs (loop1): Directory bread(block 70) failed [ 195.818644][ T6323] FAT-fs (loop1): Directory bread(block 71) failed [ 195.828823][ T6323] FAT-fs (loop1): Directory bread(block 72) failed [ 195.841731][ T6323] FAT-fs (loop1): Directory bread(block 73) failed [ 195.922944][ T6323] syz.1.550: attempt to access beyond end of device [ 195.922944][ T6323] loop1: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 195.957923][ T6323] syz.1.550: attempt to access beyond end of device [ 195.957923][ T6323] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 196.005878][ T27] audit: type=1800 audit(1784340854.750:22): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.550" name="file1" dev="loop1" ino=1048606 res=0 errno=0 [ 196.092415][ T6323] syz.1.550: attempt to access beyond end of device [ 196.092415][ T6323] loop1: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 196.113506][ T6323] Buffer I/O error on dev loop1, logical block 442, lost async page write [ 196.482417][ T6326] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.777786][ T4360] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 197.793134][ T4360] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 197.812014][ T4360] EXT4-fs (loop0): This should not happen!! Data will be lost [ 197.812014][ T4360] [ 197.822394][ T4360] EXT4-fs (loop0): Total free blocks count 0 [ 197.828748][ T4360] EXT4-fs (loop0): Free/Dirty block details [ 197.834870][ T4360] EXT4-fs (loop0): free_blocks=4096 [ 197.840652][ T4360] EXT4-fs (loop0): dirty_blocks=144 [ 197.846103][ T4360] EXT4-fs (loop0): Block reservation details [ 197.853779][ T4360] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 197.867267][ T4709] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 198.002318][ T6318] device syzkaller0 entered promiscuous mode [ 198.009214][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 198.024808][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 198.033402][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 198.041119][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 198.048760][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 198.056476][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 198.064283][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 198.075223][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.086509][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.094552][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.553144][ T6347] device syzkaller0 entered promiscuous mode [ 199.587147][ T6365] loop0: detected capacity change from 0 to 256 [ 199.689249][ T6365] FAT-fs (loop0): Directory bread(block 64) failed [ 199.726517][ T6365] FAT-fs (loop0): Directory bread(block 65) failed [ 199.762695][ T6365] FAT-fs (loop0): Directory bread(block 66) failed [ 199.786622][ T6365] FAT-fs (loop0): Directory bread(block 67) failed [ 199.809280][ T6365] FAT-fs (loop0): Directory bread(block 68) failed [ 199.844416][ T6365] FAT-fs (loop0): Directory bread(block 69) failed [ 199.872790][ T6365] FAT-fs (loop0): Directory bread(block 70) failed [ 199.889627][ T6365] FAT-fs (loop0): Directory bread(block 71) failed [ 199.911733][ T6365] FAT-fs (loop0): Directory bread(block 72) failed [ 199.945329][ T6365] FAT-fs (loop0): Directory bread(block 73) failed [ 199.996569][ T6365] syz.0.561: attempt to access beyond end of device [ 199.996569][ T6365] loop0: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 200.028211][ T6365] syz.0.561: attempt to access beyond end of device [ 200.028211][ T6365] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 200.069865][ T27] audit: type=1800 audit(1784340858.810:23): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.561" name="file1" dev="loop0" ino=1048607 res=0 errno=0 [ 200.109172][ T6365] syz.0.561: attempt to access beyond end of device [ 200.109172][ T6365] loop0: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 200.155963][ T6365] Buffer I/O error on dev loop0, logical block 442, lost async page write [ 200.179487][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 200.198434][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 200.207881][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 200.218396][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 200.236529][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 200.246985][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 200.295339][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 200.401721][ T6377] device syzkaller0 entered promiscuous mode [ 200.467289][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 200.520620][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 200.570727][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 200.597258][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 200.648964][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 200.699378][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 200.776227][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 201.561207][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 201.567630][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 201.575146][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 201.585115][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 201.587482][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 201.631226][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.666788][ T6385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.631495][ T6409] device syzkaller0 entered promiscuous mode [ 204.983777][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 205.710622][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 205.727325][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 205.735057][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 205.743020][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 205.753923][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 205.762589][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 205.771916][ T6429] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 205.779870][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 206.586052][ T6476] device syzkaller0 entered promiscuous mode [ 206.862055][ T6484] device syzkaller0 entered promiscuous mode [ 207.016527][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'. [ 207.201323][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 207.241245][ T6494] process 'syz.0.597' launched '/dev/fd/6' with NULL argv: empty string added [ 207.246625][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 207.286575][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 207.314111][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 207.341571][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 207.362014][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 207.378827][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 207.746826][ T6515] device syzkaller0 entered promiscuous mode [ 208.103657][ T6524] device syzkaller0 entered promiscuous mode [ 208.178993][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 208.547012][ T27] audit: type=1326 audit(1784340867.290:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912439de99 code=0x7ffc0000 [ 208.599604][ T27] audit: type=1326 audit(1784340867.320:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912439de99 code=0x7ffc0000 [ 208.635909][ T27] audit: type=1326 audit(1784340867.320:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912439de99 code=0x7ffc0000 [ 208.668507][ T27] audit: type=1326 audit(1784340867.320:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f912439de99 code=0x7ffc0000 [ 208.691024][ T6547] device syzkaller0 entered promiscuous mode [ 208.726623][ T27] audit: type=1326 audit(1784340867.320:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912439de99 code=0x7ffc0000 [ 208.759060][ T27] audit: type=1326 audit(1784340867.320:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912439de99 code=0x7ffc0000 [ 208.882706][ T27] audit: type=1326 audit(1784340867.320:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912439de99 code=0x7ffc0000 [ 208.987725][ T27] audit: type=1326 audit(1784340867.320:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f912439de99 code=0x7ffc0000 [ 209.082081][ T27] audit: type=1326 audit(1784340867.320:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912439de99 code=0x7ffc0000 [ 209.183713][ T27] audit: type=1326 audit(1784340867.320:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.613" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912439de99 code=0x7ffc0000 [ 209.412568][ T6562] device syzkaller0 entered promiscuous mode [ 209.515956][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'. [ 209.638397][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 211.062318][ T6595] device syzkaller0 entered promiscuous mode [ 211.068805][ T6596] loop2: detected capacity change from 0 to 2048 [ 211.207626][ T6596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.465401][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 211.538283][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 211.637421][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 211.705399][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 211.750573][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 211.788980][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 211.829220][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 211.879241][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.946137][ T6604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.969590][ T41] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 214.979777][ T6618] device syzkaller0 entered promiscuous mode [ 214.984844][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 114 with error 28 [ 215.002771][ T41] EXT4-fs (loop2): This should not happen!! Data will be lost [ 215.002771][ T41] [ 215.015546][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.638'. [ 215.034656][ T41] EXT4-fs (loop2): Total free blocks count 0 [ 215.066090][ T41] EXT4-fs (loop2): Free/Dirty block details [ 215.072786][ T41] EXT4-fs (loop2): free_blocks=4096 [ 215.100440][ T41] EXT4-fs (loop2): dirty_blocks=144 [ 215.106279][ T41] EXT4-fs (loop2): Block reservation details [ 215.120511][ T41] EXT4-fs (loop2): i_reserved_data_blocks=9 [ 215.130122][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 216.050178][ T6650] loop2: detected capacity change from 0 to 32768 [ 216.118913][ T6650] JBD2: Ignoring recovery information on journal [ 216.340533][ T6650] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 216.416961][ T6650] (syz.2.639,6650,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 216.439908][ T6650] (syz.2.639,6650,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 216.470308][ T6650] (syz.2.639,6650,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 216.499640][ T6650] (syz.2.639,6650,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 216.530172][ T6650] (syz.2.639,6650,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 216.540075][ T6650] (syz.2.639,6650,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 216.628738][ T6670] (syz.2.639,6670,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 216.696223][ T6670] (syz.2.639,6670,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 216.766282][ T6670] (syz.2.639,6670,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 216.805974][ T6670] (syz.2.639,6670,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 216.869537][ T6670] (syz.2.639,6670,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 216.884442][ T6670] (syz.2.639,6670,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 217.133548][ T4285] ocfs2: Unmounting device (7,2) on (node local) [ 217.785633][ T6704] loop4: detected capacity change from 0 to 2048 [ 217.879655][ T6704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 219.514257][ T46] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 219.529653][ T46] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 219.542388][ T46] EXT4-fs (loop4): This should not happen!! Data will be lost [ 219.542388][ T46] [ 219.552549][ T46] EXT4-fs (loop4): Total free blocks count 0 [ 219.558682][ T46] EXT4-fs (loop4): Free/Dirty block details [ 219.566634][ T46] EXT4-fs (loop4): free_blocks=4096 [ 219.574062][ T46] EXT4-fs (loop4): dirty_blocks=512 [ 219.579432][ T46] EXT4-fs (loop4): Block reservation details [ 219.586936][ T46] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 219.631651][ T46] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 219.835582][ T6696] device syzkaller0 entered promiscuous mode [ 220.065393][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 220.065409][ T27] audit: type=1326 audit(1784340878.810:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 220.190987][ T27] audit: type=1326 audit(1784340878.850:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 220.285679][ T27] audit: type=1326 audit(1784340878.850:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 220.366609][ T27] audit: type=1326 audit(1784340878.850:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 220.426678][ T27] audit: type=1326 audit(1784340878.850:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 220.479515][ T27] audit: type=1326 audit(1784340878.850:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 220.505821][ T27] audit: type=1326 audit(1784340878.850:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 220.530731][ T27] audit: type=1326 audit(1784340878.860:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 220.556081][ T27] audit: type=1326 audit(1784340878.860:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 220.580989][ T27] audit: type=1326 audit(1784340878.860:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.653" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 222.108326][ T6751] loop0: detected capacity change from 0 to 32768 [ 222.219254][ T6751] JBD2: Ignoring recovery information on journal [ 222.387857][ T6751] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 222.435445][ T6751] (syz.0.660,6751,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 222.462761][ T6751] (syz.0.660,6751,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 222.486291][ T6751] (syz.0.660,6751,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 222.509283][ T6751] (syz.0.660,6751,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 222.543016][ T6751] (syz.0.660,6751,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 222.580044][ T6751] (syz.0.660,6751,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 222.598239][ T6759] (syz.0.660,6759,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 222.633532][ T6759] (syz.0.660,6759,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 222.651123][ T6759] (syz.0.660,6759,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 222.661780][ T6759] (syz.0.660,6759,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 222.671840][ T6759] (syz.0.660,6759,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 222.679877][ T6759] (syz.0.660,6759,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 222.768985][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 223.381896][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.652'. [ 223.449664][ T6773] device syzkaller0 entered promiscuous mode [ 225.105632][ T6814] loop4: detected capacity change from 0 to 32768 [ 225.143880][ T6814] JBD2: Ignoring recovery information on journal [ 225.213571][ T6814] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 225.276340][ T6814] (syz.4.673,6814,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 225.310811][ T6814] (syz.4.673,6814,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 225.354790][ T6814] (syz.4.673,6814,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 225.390380][ T6814] (syz.4.673,6814,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 225.401283][ T6814] (syz.4.673,6814,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 225.409332][ T6814] (syz.4.673,6814,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 225.421749][ T6820] (syz.4.673,6820,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 225.437899][ T6820] (syz.4.673,6820,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 225.449726][ T6820] (syz.4.673,6820,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 225.461832][ T6820] (syz.4.673,6820,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 225.472995][ T6820] (syz.4.673,6820,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 225.502949][ T6820] (syz.4.673,6820,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 225.717104][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 227.651614][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.675'. [ 228.013708][ T6836] device syzkaller0 entered promiscuous mode [ 229.800369][ T6859] kvm [6858]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 229.964740][ T6852] loop3: detected capacity change from 0 to 32768 [ 230.057517][ T6852] JBD2: Ignoring recovery information on journal [ 230.173127][ T6852] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 230.255212][ T6852] (syz.3.685,6852,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 230.290232][ T6852] (syz.3.685,6852,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 230.360273][ T6852] (syz.3.685,6852,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 230.399518][ T6852] (syz.3.685,6852,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 230.470427][ T6852] (syz.3.685,6852,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 230.508894][ T6852] (syz.3.685,6852,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 230.556298][ T6868] (syz.3.685,6868,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 230.580538][ T6868] (syz.3.685,6868,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 230.609314][ T6868] (syz.3.685,6868,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 230.630396][ T6868] (syz.3.685,6868,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 230.660238][ T6868] (syz.3.685,6868,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 230.676312][ T6868] (syz.3.685,6868,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 230.823850][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 233.995350][ T6938] kvm: vcpu 0: requested 53248 ns lapic timer period limited to 200000 ns [ 234.017293][ T6938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (45449099936 ns) > initial count (200000 ns). Using initial count to start timer. [ 234.139481][ T6931] loop0: detected capacity change from 0 to 32768 [ 234.249236][ T6931] JBD2: Ignoring recovery information on journal [ 234.357722][ T6931] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 234.449424][ T6944] device syzkaller0 entered promiscuous mode [ 234.469396][ T6931] (syz.0.700,6931,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 234.509775][ T6931] (syz.0.700,6931,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 234.558935][ T6931] (syz.0.700,6931,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 234.589411][ T6931] (syz.0.700,6931,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 234.634215][ T6931] (syz.0.700,6931,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 234.645874][ T6931] (syz.0.700,6931,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 234.680501][ T6953] (syz.0.700,6953,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 234.766094][ T6953] (syz.0.700,6953,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 234.794075][ T6955] loop4: detected capacity change from 0 to 2048 [ 234.800365][ T6953] (syz.0.700,6953,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 234.847465][ T6953] (syz.0.700,6953,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 234.911771][ T6953] (syz.0.700,6953,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 235.017387][ T6953] (syz.0.700,6953,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 235.066217][ T6955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 235.209326][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 238.272535][ T4709] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 238.287565][ T4709] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 238.301111][ T4709] EXT4-fs (loop4): This should not happen!! Data will be lost [ 238.301111][ T4709] [ 238.312458][ T4709] EXT4-fs (loop4): Total free blocks count 0 [ 238.318593][ T4709] EXT4-fs (loop4): Free/Dirty block details [ 238.325548][ T4709] EXT4-fs (loop4): free_blocks=4096 [ 238.332061][ T4709] EXT4-fs (loop4): dirty_blocks=336 [ 238.337313][ T4709] EXT4-fs (loop4): Block reservation details [ 238.343731][ T4709] EXT4-fs (loop4): i_reserved_data_blocks=21 [ 238.361032][ T4709] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 238.574995][ T6961] device syzkaller0 entered promiscuous mode [ 238.846048][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 238.846066][ T27] audit: type=1326 audit(1784340897.590:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 238.920576][ T27] audit: type=1326 audit(1784340897.590:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 238.957449][ T27] audit: type=1326 audit(1784340897.590:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 239.046198][ T27] audit: type=1326 audit(1784340897.590:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 239.106246][ T27] audit: type=1326 audit(1784340897.590:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 239.187997][ T27] audit: type=1326 audit(1784340897.590:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 239.267257][ T27] audit: type=1326 audit(1784340897.590:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 239.347999][ T27] audit: type=1326 audit(1784340897.590:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 239.419908][ T27] audit: type=1326 audit(1784340897.590:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 239.477864][ T27] audit: type=1326 audit(1784340897.590:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.719" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 240.772441][ T7054] loop4: detected capacity change from 0 to 2048 [ 240.979263][ T7054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 243.292302][ T7047] device syzkaller0 entered promiscuous mode [ 243.412171][ T46] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 243.471428][ T46] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 384 with error 28 [ 243.510246][ T46] EXT4-fs (loop4): This should not happen!! Data will be lost [ 243.510246][ T46] [ 243.540298][ T46] EXT4-fs (loop4): Total free blocks count 0 [ 243.546919][ T46] EXT4-fs (loop4): Free/Dirty block details [ 243.580259][ T46] EXT4-fs (loop4): free_blocks=4096 [ 243.610410][ T46] EXT4-fs (loop4): dirty_blocks=400 [ 243.615812][ T46] EXT4-fs (loop4): Block reservation details [ 243.647959][ T46] EXT4-fs (loop4): i_reserved_data_blocks=25 [ 243.670062][ T46] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 250.329919][ T7176] loop3: detected capacity change from 0 to 2048 [ 250.506685][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 250.649202][ T7176] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 250.679153][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 250.751942][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 250.835372][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 250.899727][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 250.966140][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 250.996397][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 251.096481][ T7187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.138486][ T7187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.469775][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 251.796702][ T7200] kvm [7199]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 251.849988][ T7200] kvm [7199]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 252.621620][ T7217] device syzkaller0 entered promiscuous mode [ 252.724006][ T7216] device syzkaller0 entered promiscuous mode [ 255.446348][ T6117] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 255.484446][ T6117] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 255.497123][ T6117] EXT4-fs (loop3): This should not happen!! Data will be lost [ 255.497123][ T6117] [ 255.508234][ T6117] EXT4-fs (loop3): Total free blocks count 0 [ 255.514525][ T6117] EXT4-fs (loop3): Free/Dirty block details [ 255.520833][ T6117] EXT4-fs (loop3): free_blocks=4096 [ 255.526914][ T6117] EXT4-fs (loop3): dirty_blocks=208 [ 255.540397][ T6117] EXT4-fs (loop3): Block reservation details [ 255.556703][ T6117] EXT4-fs (loop3): i_reserved_data_blocks=13 [ 255.567308][ T4722] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 255.817380][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.823918][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.857690][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 256.874263][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 256.902613][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 256.910021][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 256.964541][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 257.000723][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 257.037069][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 257.069203][ T7261] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.144270][ T7261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.349100][ T7279] device syzkaller0 entered promiscuous mode [ 257.593931][ T7287] IPv6: addrconf: prefix option has invalid lifetime [ 258.351601][ T7296] device syzkaller0 entered promiscuous mode [ 258.457600][ T7302] loop2: detected capacity change from 0 to 2048 [ 258.615135][ T7302] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 261.657194][ T46] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 261.673639][ T46] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 261.686141][ T46] EXT4-fs (loop2): This should not happen!! Data will be lost [ 261.686141][ T46] [ 261.695903][ T46] EXT4-fs (loop2): Total free blocks count 0 [ 261.702646][ T46] EXT4-fs (loop2): Free/Dirty block details [ 261.708630][ T46] EXT4-fs (loop2): free_blocks=4096 [ 261.713921][ T46] EXT4-fs (loop2): dirty_blocks=512 [ 261.719624][ T46] EXT4-fs (loop2): Block reservation details [ 261.727211][ T46] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 261.743832][ T46] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 262.040538][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.799'. [ 262.166088][ T7349] device syzkaller0 entered promiscuous mode [ 262.543996][ T7359] device syzkaller0 entered promiscuous mode [ 262.584569][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 262.639241][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 262.708929][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 262.766484][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 262.857316][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 262.915908][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 262.959291][ T27] kauditd_printk_skb: 100 callbacks suppressed [ 262.959310][ T27] audit: type=1326 audit(1784340921.700:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 263.000130][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 263.002247][ T27] audit: type=1326 audit(1784340921.700:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 263.033952][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.043797][ T7361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.060015][ T27] audit: type=1326 audit(1784340921.700:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 263.100076][ T27] audit: type=1326 audit(1784340921.700:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 263.125487][ T27] audit: type=1326 audit(1784340921.710:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 263.176206][ T27] audit: type=1326 audit(1784340921.710:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 263.232314][ T27] audit: type=1326 audit(1784340921.710:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 263.265378][ T27] audit: type=1326 audit(1784340921.710:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 263.298116][ T27] audit: type=1326 audit(1784340921.710:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 263.364670][ T27] audit: type=1326 audit(1784340921.710:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz.0.810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fd139de99 code=0x7ffc0000 [ 266.705833][ T7411] loop3: detected capacity change from 0 to 32768 [ 266.807409][ T7411] JBD2: Ignoring recovery information on journal [ 267.047728][ T7411] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 267.134259][ T7411] (syz.3.820,7411,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 267.207540][ T7411] (syz.3.820,7411,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 267.262517][ T7411] (syz.3.820,7411,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 267.317404][ T7411] (syz.3.820,7411,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 267.376486][ T7411] (syz.3.820,7411,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 267.417003][ T7411] (syz.3.820,7411,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 267.460376][ T7437] (syz.3.820,7437,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 267.478938][ T7437] (syz.3.820,7437,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 267.510389][ T7437] (syz.3.820,7437,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 267.524810][ T7437] (syz.3.820,7437,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 267.534802][ T7437] (syz.3.820,7437,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 267.545642][ T7437] (syz.3.820,7437,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 267.629573][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 268.468713][ T7428] device syzkaller0 entered promiscuous mode [ 270.485328][ T7478] loop2: detected capacity change from 0 to 2048 [ 270.527120][ T7478] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 273.123712][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.830'. [ 273.440832][ T7494] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 273.488927][ T7494] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 273.527292][ T7494] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 273.614990][ T7494] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 273.662559][ T7494] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 273.687878][ T7494] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 273.751595][ T7494] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 273.821773][ T7494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.881232][ T7494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.516327][ T7493] loop3: detected capacity change from 0 to 32768 [ 274.571218][ T7493] JBD2: Ignoring recovery information on journal [ 274.646885][ T7523] device syzkaller0 entered promiscuous mode [ 274.678173][ T7493] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 274.697749][ T4715] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 274.701674][ T7493] (syz.3.834,7493,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 274.723154][ T7493] (syz.3.834,7493,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 274.735256][ T7493] (syz.3.834,7493,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 274.745289][ T7493] (syz.3.834,7493,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 274.757065][ T7493] (syz.3.834,7493,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 274.767302][ T4715] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 448 with error 28 [ 274.782571][ T7493] (syz.3.834,7493,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 274.792606][ T7527] (syz.3.834,7527,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 274.806730][ T4715] EXT4-fs (loop2): This should not happen!! Data will be lost [ 274.806730][ T4715] [ 274.835066][ T4715] EXT4-fs (loop2): Total free blocks count 0 [ 274.849475][ T4715] EXT4-fs (loop2): Free/Dirty block details [ 274.864602][ T7527] (syz.3.834,7527,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 274.884793][ T4715] EXT4-fs (loop2): free_blocks=4096 [ 274.892932][ T4715] EXT4-fs (loop2): dirty_blocks=464 [ 274.898201][ T4715] EXT4-fs (loop2): Block reservation details [ 274.909091][ T7527] (syz.3.834,7527,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 274.930717][ T4715] EXT4-fs (loop2): i_reserved_data_blocks=29 [ 274.945704][ T7527] (syz.3.834,7527,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 274.974180][ T4715] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 275.018785][ T7527] (syz.3.834,7527,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 275.091018][ T7527] (syz.3.834,7527,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 275.311356][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 277.474232][ T7566] device syzkaller0 entered promiscuous mode [ 277.518059][ T7569] device syzkaller0 entered promiscuous mode [ 279.603959][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.843'. [ 279.975696][ T7615] device syzkaller0 entered promiscuous mode [ 280.232388][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 280.320543][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 280.378748][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 280.422283][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 280.458587][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 280.488730][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 280.527770][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 280.567107][ T7628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.594926][ T7628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.082713][ T7641] loop4: detected capacity change from 0 to 2048 [ 281.145648][ T7636] device syzkaller0 entered promiscuous mode [ 281.318100][ T7641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 281.343794][ T7630] loop2: detected capacity change from 0 to 32768 [ 281.515425][ T7630] JBD2: Ignoring recovery information on journal [ 281.710079][ T7630] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 281.861440][ T7630] (syz.2.852,7630,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 281.910384][ T7630] (syz.2.852,7630,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 281.976857][ T7630] (syz.2.852,7630,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 282.054979][ T7630] (syz.2.852,7630,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 282.151229][ T7630] (syz.2.852,7630,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 282.194201][ T7630] (syz.2.852,7630,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 282.244311][ T7677] (syz.2.852,7677,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 282.286281][ T7677] (syz.2.852,7677,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 282.312936][ T7677] (syz.2.852,7677,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 282.333106][ T7677] (syz.2.852,7677,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 282.360985][ T7677] (syz.2.852,7677,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 282.383817][ T7677] (syz.2.852,7677,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 282.497819][ T4285] ocfs2: Unmounting device (7,2) on (node local) [ 284.439693][ T4715] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 284.461118][ T4715] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 284.474074][ T4715] EXT4-fs (loop4): This should not happen!! Data will be lost [ 284.474074][ T4715] [ 284.484293][ T4715] EXT4-fs (loop4): Total free blocks count 0 [ 284.493096][ T4715] EXT4-fs (loop4): Free/Dirty block details [ 284.499039][ T4715] EXT4-fs (loop4): free_blocks=4096 [ 284.505234][ T4715] EXT4-fs (loop4): dirty_blocks=208 [ 284.510814][ T4715] EXT4-fs (loop4): Block reservation details [ 284.516829][ T4715] EXT4-fs (loop4): i_reserved_data_blocks=13 [ 284.536909][ T6281] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 284.653036][ T7665] device syzkaller0 entered promiscuous mode [ 284.670412][ T7682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.857'. [ 284.773124][ T7686] device syzkaller0 entered promiscuous mode [ 285.233929][ T7700] device syzkaller0 entered promiscuous mode [ 285.618227][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.870'. [ 285.677060][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 285.725823][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 285.788684][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 285.827998][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 285.865727][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 285.911102][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 285.943961][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 286.050052][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.170048][ T7717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.219407][ T7728] loop0: detected capacity change from 0 to 2048 [ 286.300030][ T7728] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 286.319898][ T7710] loop1: detected capacity change from 0 to 32768 [ 286.459656][ T7710] JBD2: Ignoring recovery information on journal [ 286.622959][ T7710] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 286.678811][ T7736] device syzkaller0 entered promiscuous mode [ 286.772616][ T7710] (syz.1.867,7710,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 286.811325][ T7710] (syz.1.867,7710,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 286.864250][ T7710] (syz.1.867,7710,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 286.922213][ T7710] (syz.1.867,7710,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 286.983860][ T7710] (syz.1.867,7710,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 287.025632][ T7710] (syz.1.867,7710,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 287.043010][ T7740] device syzkaller0 entered promiscuous mode [ 287.106512][ T7741] (syz.1.867,7741,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 287.229111][ T7741] (syz.1.867,7741,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 287.290337][ T7741] (syz.1.867,7741,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 287.312627][ T7741] (syz.1.867,7741,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 287.332976][ T7741] (syz.1.867,7741,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 287.356011][ T7741] (syz.1.867,7741,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 287.539720][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 290.048311][ T4722] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 290.064021][ T4722] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 290.077326][ T4722] EXT4-fs (loop0): This should not happen!! Data will be lost [ 290.077326][ T4722] [ 290.087294][ T4722] EXT4-fs (loop0): Total free blocks count 0 [ 290.093385][ T4722] EXT4-fs (loop0): Free/Dirty block details [ 290.099333][ T4722] EXT4-fs (loop0): free_blocks=4096 [ 290.104669][ T4722] EXT4-fs (loop0): dirty_blocks=512 [ 290.109928][ T4722] EXT4-fs (loop0): Block reservation details [ 290.116281][ T4722] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 290.133787][ T4722] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 290.348673][ T7757] device syzkaller0 entered promiscuous mode [ 292.561955][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'. [ 292.949236][ T7826] device syzkaller0 entered promiscuous mode [ 292.975200][ T7828] device syzkaller0 entered promiscuous mode [ 293.006037][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 293.024060][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 293.040788][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 293.051864][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 293.059902][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 293.071623][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 293.088586][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 293.109823][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 293.132496][ T7833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.586010][ T7846] loop4: detected capacity change from 0 to 2048 [ 293.711061][ T7846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 294.595488][ T7835] loop3: detected capacity change from 0 to 32768 [ 294.767905][ T7835] JBD2: Ignoring recovery information on journal [ 294.938618][ T7835] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 295.032203][ T7835] (syz.3.887,7835,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 295.046464][ T7835] (syz.3.887,7835,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 295.073932][ T7835] (syz.3.887,7835,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 295.103302][ T7835] (syz.3.887,7835,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 295.134279][ T7835] (syz.3.887,7835,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 295.166050][ T7835] (syz.3.887,7835,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 295.208749][ T7868] (syz.3.887,7868,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 295.239401][ T7868] (syz.3.887,7868,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 295.282639][ T7868] (syz.3.887,7868,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 295.319587][ T7868] (syz.3.887,7868,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 295.349206][ T9] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 295.386775][ T7868] (syz.3.887,7868,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 295.400439][ T7868] (syz.3.887,7868,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 295.409856][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 295.428184][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 295.428184][ T9] [ 295.444992][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 295.457816][ T9] EXT4-fs (loop4): Free/Dirty block details [ 295.469001][ T9] EXT4-fs (loop4): free_blocks=4096 [ 295.474608][ T9] EXT4-fs (loop4): dirty_blocks=512 [ 295.480252][ T9] EXT4-fs (loop4): Block reservation details [ 295.487129][ T9] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 295.491435][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 295.501804][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 297.638622][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 297.809080][ T7906] device syzkaller0 entered promiscuous mode [ 297.998148][ T7914] device syzkaller0 entered promiscuous mode [ 298.278624][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 298.319507][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 298.343329][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 298.365335][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 298.385333][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 298.405446][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 298.424302][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 298.450061][ T7920] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.476770][ T7920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.620761][ T7922] device syzkaller0 entered promiscuous mode [ 298.661760][ T7927] loop0: detected capacity change from 0 to 2048 [ 298.803912][ T7927] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 299.206780][ T7918] loop3: detected capacity change from 0 to 32768 [ 299.223802][ T7930] device syzkaller0 entered promiscuous mode [ 299.314855][ T7918] JBD2: Ignoring recovery information on journal [ 299.544956][ T7918] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 299.686205][ T7918] (syz.3.902,7918,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 299.720319][ T7918] (syz.3.902,7918,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 299.778124][ T7918] (syz.3.902,7918,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 299.818364][ T7918] (syz.3.902,7918,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 299.862439][ T7918] (syz.3.902,7918,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 299.897685][ T7918] (syz.3.902,7918,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 299.945299][ T7939] (syz.3.902,7939,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 299.989948][ T7939] (syz.3.902,7939,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 300.045128][ T7939] (syz.3.902,7939,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 300.086034][ T7939] (syz.3.902,7939,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 300.150357][ T7939] (syz.3.902,7939,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 300.180834][ T7939] (syz.3.902,7939,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 300.376143][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 300.447416][ T46] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 300.565971][ T46] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 300.598845][ T46] EXT4-fs (loop0): This should not happen!! Data will be lost [ 300.598845][ T46] [ 300.619944][ T46] EXT4-fs (loop0): Total free blocks count 0 [ 300.631580][ T46] EXT4-fs (loop0): Free/Dirty block details [ 300.644961][ T46] EXT4-fs (loop0): free_blocks=4096 [ 300.670767][ T46] EXT4-fs (loop0): dirty_blocks=512 [ 300.676060][ T46] EXT4-fs (loop0): Block reservation details [ 300.714966][ T46] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 300.751794][ T46] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 304.164678][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 304.273098][ T7987] device syzkaller0 entered promiscuous mode [ 304.630970][ T7994] device syzkaller0 entered promiscuous mode [ 304.734704][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 304.786278][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 304.796686][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 304.815532][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 304.921345][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 304.967245][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 305.017860][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 305.027317][ T8002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.046357][ T8002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.225922][ T8011] loop0: detected capacity change from 0 to 2048 [ 305.681745][ T8011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 306.113612][ T6354] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 306.239652][ T6354] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 306.333512][ T6354] EXT4-fs (loop0): This should not happen!! Data will be lost [ 306.333512][ T6354] [ 306.392901][ T8009] device syzkaller0 entered promiscuous mode [ 306.408761][ T6354] EXT4-fs (loop0): Total free blocks count 0 [ 306.445662][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 306.470511][ T6354] EXT4-fs (loop0): Free/Dirty block details [ 306.497005][ T6354] EXT4-fs (loop0): free_blocks=4096 [ 306.546190][ T6354] EXT4-fs (loop0): dirty_blocks=336 [ 306.572113][ T6354] EXT4-fs (loop0): Block reservation details [ 306.612632][ T6354] EXT4-fs (loop0): i_reserved_data_blocks=21 [ 306.747895][ T6354] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 307.546441][ T8001] loop4: detected capacity change from 0 to 32768 [ 307.625670][ T8001] JBD2: Ignoring recovery information on journal [ 307.705183][ T8001] JBD2: recovery failed [ 307.709525][ T8001] (syz.4.916,8001,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 307.739555][ T8001] (syz.4.916,8001,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 307.760367][ T8001] (syz.4.916,8001,0):ocfs2_check_volume:2489 ERROR: status = -5 [ 307.780476][ T8001] (syz.4.916,8001,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 307.811885][ T8001] (syz.4.916,8001,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 310.100130][ T8079] device syzkaller0 entered promiscuous mode [ 310.234072][ T8084] device syzkaller0 entered promiscuous mode [ 310.442041][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.933'. [ 310.504342][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 310.532068][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 310.570635][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 310.578018][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 310.662842][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 310.696821][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 310.706943][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 310.718500][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.783423][ T8096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.939833][ T8102] device syzkaller0 entered promiscuous mode [ 311.096129][ T8111] loop4: detected capacity change from 0 to 2048 [ 311.592270][ T8111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 312.949166][ T8098] loop0: detected capacity change from 0 to 32768 [ 313.174565][ T8098] JBD2: Ignoring recovery information on journal [ 313.432512][ T6281] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 313.531071][ T6281] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 313.571178][ T6281] EXT4-fs (loop4): This should not happen!! Data will be lost [ 313.571178][ T6281] [ 313.601320][ T8098] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 313.631779][ T6281] EXT4-fs (loop4): Total free blocks count 0 [ 313.658406][ T6281] EXT4-fs (loop4): Free/Dirty block details [ 313.712808][ T6281] EXT4-fs (loop4): free_blocks=4096 [ 313.718107][ T6281] EXT4-fs (loop4): dirty_blocks=512 [ 313.773309][ T6281] EXT4-fs (loop4): Block reservation details [ 313.779434][ T6281] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 313.806661][ T6281] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 313.889253][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 316.116444][ T8176] device syzkaller0 entered promiscuous mode [ 316.222009][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.947'. [ 316.274724][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 316.302665][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 316.341474][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 316.359203][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 316.383800][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 316.406917][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 316.442095][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 316.468615][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.495569][ T8188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.709869][ T8202] device syzkaller0 entered promiscuous mode [ 317.048589][ T8216] loop3: detected capacity change from 0 to 2048 [ 317.256621][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.263328][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.531982][ T8216] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 318.913221][ T8200] loop4: detected capacity change from 0 to 32768 [ 318.987072][ T8200] JBD2: Ignoring recovery information on journal [ 319.151756][ T8200] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 319.308300][ T9] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 319.345832][ T8200] (syz.4.952,8200,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 319.347592][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 464 with error 28 [ 319.367622][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 319.367622][ T9] [ 319.384907][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 319.398569][ T8200] (syz.4.952,8200,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 319.400339][ T9] EXT4-fs (loop3): Free/Dirty block details [ 319.415984][ T8200] (syz.4.952,8200,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 319.425822][ T8200] (syz.4.952,8200,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 319.428639][ T9] EXT4-fs (loop3): free_blocks=4096 [ 319.444642][ T9] EXT4-fs (loop3): dirty_blocks=480 [ 319.447163][ T8200] (syz.4.952,8200,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 319.449907][ T9] EXT4-fs (loop3): Block reservation details [ 319.449924][ T9] EXT4-fs (loop3): i_reserved_data_blocks=30 [ 319.479938][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 319.486159][ T8200] (syz.4.952,8200,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 319.526274][ T8227] (syz.4.952,8227,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 319.604894][ T8227] (syz.4.952,8227,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 319.630110][ T8227] (syz.4.952,8227,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 319.639395][ T8227] (syz.4.952,8227,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 319.662248][ T8227] (syz.4.952,8227,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 319.680301][ T8227] (syz.4.952,8227,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 319.835440][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 321.476472][ T8215] device syzkaller0 entered promiscuous mode [ 323.276748][ T8236] device syzkaller0 entered promiscuous mode [ 324.618850][ T8306] loop4: detected capacity change from 0 to 32768 [ 324.685996][ T8306] JBD2: Ignoring recovery information on journal [ 324.737445][ T8306] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 324.802485][ T8306] (syz.4.967,8306,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 324.810913][ T8306] (syz.4.967,8306,1):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 324.831391][ T8306] (syz.4.967,8306,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 324.847060][ T8306] (syz.4.967,8306,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 324.857770][ T8306] (syz.4.967,8306,1):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 324.882678][ T8306] (syz.4.967,8306,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 324.907559][ T8309] (syz.4.967,8309,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 324.918214][ T8309] (syz.4.967,8309,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 8029422382192813422 failed -12 [ 324.940512][ T8309] (syz.4.967,8309,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 324.950093][ T8309] (syz.4.967,8309,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 324.962845][ T8309] (syz.4.967,8309,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 324.971165][ T8309] (syz.4.967,8309,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 325.109678][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 326.172689][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.963'. [ 326.183750][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 326.199879][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 326.216652][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 326.240643][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 326.248284][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 326.270426][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 326.288614][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 326.299000][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 326.323755][ T8302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.362318][ T8295] device syzkaller0 entered promiscuous mode [ 326.557443][ T8316] device syzkaller0 entered promiscuous mode [ 326.814441][ T8336] loop3: detected capacity change from 0 to 2048 [ 326.980054][ T8336] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 329.577161][ T4302] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 329.593981][ T4302] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 329.606483][ T4302] EXT4-fs (loop3): This should not happen!! Data will be lost [ 329.606483][ T4302] [ 329.618587][ T4302] EXT4-fs (loop3): Total free blocks count 0 [ 329.625118][ T4302] EXT4-fs (loop3): Free/Dirty block details [ 329.631563][ T4302] EXT4-fs (loop3): free_blocks=4096 [ 329.636906][ T4302] EXT4-fs (loop3): dirty_blocks=144 [ 329.651013][ T4302] EXT4-fs (loop3): Block reservation details [ 329.657097][ T4302] EXT4-fs (loop3): i_reserved_data_blocks=9 [ 329.674205][ T4325] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 330.203477][ T8324] device syzkaller0 entered promiscuous mode [ 330.858889][ T8390] ------------[ cut here ]------------ [ 330.864562][ T8390] WARNING: CPU: 0 PID: 8390 at arch/x86/kvm/x86.c:11275 kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0 [ 330.875030][ T8390] Modules linked in: [ 330.878947][ T8390] CPU: 0 PID: 8390 Comm: syz.4.977 Not tainted syzkaller #0 [ 330.886307][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 330.897181][ T8390] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0 [ 330.903990][ T8390] Code: e8 a3 3e c3 00 e9 13 f0 ff ff 44 89 f1 80 e1 07 38 c1 0f 8c d1 e6 ff ff 4c 89 f7 e8 68 3e c3 00 e9 c4 e6 ff ff e8 9e 18 72 00 <0f> 0b e9 f9 fc ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 89 ec [ 330.923718][ T8390] RSP: 0018:ffffc900036a7c98 EFLAGS: 00010287 [ 330.929832][ T8390] RAX: ffffffff81100902 RBX: ffff88802e250000 RCX: 0000000000080000 [ 330.937914][ T8390] RDX: ffffc9000eb4a000 RSI: 00000000000003ba RDI: 00000000000003bb [ 330.946037][ T8390] RBP: ffff88802426e000 R08: dffffc0000000000 R09: 1ffffffff2162068 [ 330.954183][ T8390] R10: dffffc0000000000 R11: fffffbfff2162069 R12: 1ffff920006d4fac [ 330.962299][ T8390] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900039af7f0 [ 330.970331][ T8390] FS: 00007f446d2b56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 330.979312][ T8390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.985966][ T8390] CR2: 0000200000001000 CR3: 000000007376a000 CR4: 00000000003526f0 [ 330.994031][ T8390] Call Trace: [ 330.997336][ T8390] [ 331.000345][ T8390] ? get_task_pid+0x1e/0x300 [ 331.004986][ T8390] ? get_task_pid+0x1e/0x300 [ 331.009634][ T8390] ? kvm_arch_vcpu_ioctl_run+0x119/0x21f0 [ 331.015436][ T8390] kvm_vcpu_ioctl+0x8f2/0xc10 [ 331.020203][ T8390] ? xa_release+0x50/0x50 [ 331.024583][ T8390] ? __fget_files+0x28/0x460 [ 331.029210][ T8390] ? bpf_lsm_file_ioctl+0x5/0x10 [ 331.034315][ T8390] ? security_file_ioctl+0x7c/0xa0 [ 331.039567][ T8390] ? xa_release+0x50/0x50 [ 331.043957][ T8390] __se_sys_ioctl+0xfa/0x170 [ 331.048582][ T8390] do_syscall_64+0x4c/0xa0 [ 331.053081][ T8390] ? clear_bhb_loop+0x60/0xb0 [ 331.057798][ T8390] ? clear_bhb_loop+0x60/0xb0 [ 331.062555][ T8390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.068475][ T8390] RIP: 0033:0x7f446c39de99 [ 331.072965][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.092648][ T8390] RSP: 002b:00007f446d2b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.101164][ T8390] RAX: ffffffffffffffda RBX: 00007f446c625fa0 RCX: 00007f446c39de99 [ 331.109302][ T8390] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 331.117376][ T8390] RBP: 00007f446c433eaf R08: 0000000000000000 R09: 0000000000000000 [ 331.125437][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.133663][ T8390] R13: 00007f446c626038 R14: 00007f446c625fa0 R15: 00007ffcd1abdc38 [ 331.141729][ T8390] [ 331.144769][ T8390] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 331.152058][ T8390] CPU: 0 PID: 8390 Comm: syz.4.977 Not tainted syzkaller #0 [ 331.159384][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 331.169523][ T8390] Call Trace: [ 331.172800][ T8390] [ 331.175737][ T8390] dump_stack_lvl+0x188/0x24e [ 331.180423][ T8390] ? memcpy+0x3c/0x60 [ 331.184405][ T8390] ? show_regs_print_info+0x12/0x12 [ 331.189622][ T8390] ? load_image+0x410/0x410 [ 331.194145][ T8390] panic+0x2d3/0x710 [ 331.198056][ T8390] ? bpf_jit_dump+0xd0/0xd0 [ 331.202595][ T8390] __warn+0x2f8/0x4f0 [ 331.206612][ T8390] ? kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0 [ 331.212442][ T8390] ? kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0 [ 331.218286][ T8390] report_bug+0x2ba/0x4f0 [ 331.222676][ T8390] ? kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0 [ 331.228513][ T8390] handle_bug+0x3a/0x70 [ 331.232701][ T8390] exc_invalid_op+0x16/0x40 [ 331.237231][ T8390] asm_exc_invalid_op+0x16/0x20 [ 331.242110][ T8390] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0 [ 331.248526][ T8390] Code: e8 a3 3e c3 00 e9 13 f0 ff ff 44 89 f1 80 e1 07 38 c1 0f 8c d1 e6 ff ff 4c 89 f7 e8 68 3e c3 00 e9 c4 e6 ff ff e8 9e 18 72 00 <0f> 0b e9 f9 fc ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 89 ec [ 331.268232][ T8390] RSP: 0018:ffffc900036a7c98 EFLAGS: 00010287 [ 331.274399][ T8390] RAX: ffffffff81100902 RBX: ffff88802e250000 RCX: 0000000000080000 [ 331.282376][ T8390] RDX: ffffc9000eb4a000 RSI: 00000000000003ba RDI: 00000000000003bb [ 331.290365][ T8390] RBP: ffff88802426e000 R08: dffffc0000000000 R09: 1ffffffff2162068 [ 331.298353][ T8390] R10: dffffc0000000000 R11: fffffbfff2162069 R12: 1ffff920006d4fac [ 331.306350][ T8390] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900039af7f0 [ 331.314346][ T8390] ? kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0 [ 331.320176][ T8390] ? kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0 [ 331.325998][ T8390] ? get_task_pid+0x1e/0x300 [ 331.330609][ T8390] ? get_task_pid+0x1e/0x300 [ 331.335207][ T8390] ? kvm_arch_vcpu_ioctl_run+0x119/0x21f0 [ 331.340942][ T8390] kvm_vcpu_ioctl+0x8f2/0xc10 [ 331.345642][ T8390] ? xa_release+0x50/0x50 [ 331.349988][ T8390] ? __fget_files+0x28/0x460 [ 331.354611][ T8390] ? bpf_lsm_file_ioctl+0x5/0x10 [ 331.359559][ T8390] ? security_file_ioctl+0x7c/0xa0 [ 331.364679][ T8390] ? xa_release+0x50/0x50 [ 331.369017][ T8390] __se_sys_ioctl+0xfa/0x170 [ 331.373629][ T8390] do_syscall_64+0x4c/0xa0 [ 331.378116][ T8390] ? clear_bhb_loop+0x60/0xb0 [ 331.382806][ T8390] ? clear_bhb_loop+0x60/0xb0 [ 331.387583][ T8390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.393488][ T8390] RIP: 0033:0x7f446c39de99 [ 331.397913][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.417635][ T8390] RSP: 002b:00007f446d2b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.426084][ T8390] RAX: ffffffffffffffda RBX: 00007f446c625fa0 RCX: 00007f446c39de99 [ 331.434075][ T8390] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 331.442072][ T8390] RBP: 00007f446c433eaf R08: 0000000000000000 R09: 0000000000000000 [ 331.450172][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.458148][ T8390] R13: 00007f446c626038 R14: 00007f446c625fa0 R15: 00007ffcd1abdc38 [ 331.466227][ T8390] [ 331.469553][ T8390] Kernel Offset: disabled [ 331.473926][ T8390] Rebooting in 86400 seconds..