last executing test programs: 4m37.482633521s ago: executing program 32 (id=989): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 4m10.155242414s ago: executing program 33 (id=1851): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000140)={[{@nodiscard}, {@errors_remount}]}, 0x3, 0x521, &(0x7f0000001280)="$eJzs3c1vG2kZAPDHzsembZZ0F4R2F4mttEjlQ7XzIbQJICFOwKESYiUuIJWQeEOJU0exs2zCSqRw64EDEgKp4sCdv4ALPVFVQpxBHLhwqlpBCVJBRRrksSd1Ejt1RWyXzO8nuZ7xuH6e18nz5vU7M54AcutS859CxHRE/CEiZlqrh59wqXW3/+iDleatEEnyzt8K6fOa69lTs/93ISL2ImIqIr7+5YjvFI7Hre/sri9Xq5Wt9nq5sbFZru/sXrm+sbxWWavcmFt8e2lpcXZhfunU2nrrJ9+7dfU3X5389eMfP7j709/9tpnWdHtbZztOU6vpE/FKx2PjEfGFQQQbgbF2e861Vi+OOh+eT/Pn9+GIeCut/5kYS3+a/Xky0MyAQUuSJPlP8lKvzXsJcGYV0zFwoViKiNZysVgqtcbwH4nzxWqt3vjMu7XtG6utsfLFmCi+e71amW1/VrgYE4Xm+lx78Jetzx9ZX4hIx8A/+EurYymt1KqrQ+zngOMuHKn/f4616h/Iif4/8gNnjfqHfLo/qf4hz9Q/5Jf6h/xS/5Bf6h/yS/1Dfql/yK/O+m+fyBUvjygXYLhO+vs/OcQ8gKH62tWrzVuSnf+++t7O9nrtvSurlfp6aWN7pbRS29osrdVqa9VKaaW28azXq9Zqm3Ofje33y41KvVGu7+xe26ht32hcS8/rv1aZGEqrgH688uadPxUiYu9z59JbdPzJV6twtiVJIUZ9DjIwGmOj7oCAkbHrD/LrOT7j9/ySMOD/W5ev6D0wdaHnpi/G5kDSAYageNLGJ/eGlwgwdJdft/8P8sr8P+SX+X/Ir2eM8Q0PIAdOmv+P9rX8uup3/v/x8+UDDN6J8//AmTbd5fpfSZL88OWOa3fNRsSHIuKPYxMvZdf6As6C4v1Ce/x/eeYT00e3Thb+lc4BTEbE92+/8/P3lxuNrbnm438/eLzxi/bj86PIH+jt8AxfVqdZHQMA+bX/6IOV7DbMuA+/1DoI4Xj88fbc5FQ6gjm/Xzh0rELhlI5d2LsZEa91i19oX++8tefj/P7Ysfivtu8LrZdI8x1Pr5s+nPivd8T/eEf8N/7ndwXy4U6z/5ntVn/FtKbjoP4O9z/Tp3R8dNb/Zcdcd8bP+r+xHv3fm33G+O4vf9Rt9256sPfDmxFvdO1/s3hTaayj8Zu5Xe4z/oNvfeOjvbYlv2q9Trf4meZSubGxWa7v7F65nmWx+PbS0uLswvxSOZ2jLmcz1cd9/rXf3+0Vv9n+th7t//Ox9p9r5/SpPtv/74/d++alE+J/8q3uv3+vpvdH3v8kOcjh033G/8f8X78dPfb1NeOv9nj/i93iR7Y1YqHP+PWffcW5wwDwAqnv7K4vV6uVrS4LE703Wcj5QjFeiDSeLtyOiBcgjYEujMfxTcnMgII+q+fYG04HBQzM06IfdSYAAAAAAAAAAABAv3od/XvnFA8nHnUbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOgv8GAAD//+nh0o8=") mkdir(&(0x7f0000000080)='./bus\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 3m39.009122535s ago: executing program 4 (id=2693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000020800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000050006407d00000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3m38.944309248s ago: executing program 4 (id=2695): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x59e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m38.751814327s ago: executing program 4 (id=2699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c054}, 0x404c094) 3m38.679309441s ago: executing program 4 (id=2705): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 3m38.548822887s ago: executing program 4 (id=2707): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 3m38.207160634s ago: executing program 4 (id=2719): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3m38.152009847s ago: executing program 34 (id=2719): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3m17.063013134s ago: executing program 7 (id=3243): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000280)=0x4, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) 3m17.029604895s ago: executing program 7 (id=3244): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800db8d0000000000000000020020000000000680080000"], 0x1c}}, 0x200e4840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd28, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 3m16.941370729s ago: executing program 7 (id=3245): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xffeffffb}, 0x7fff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 3m16.884306872s ago: executing program 7 (id=3248): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1af455ea}, 0x8) shutdown(r0, 0x1) 3m16.644038814s ago: executing program 7 (id=3251): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x17d) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x201) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 3m16.578687947s ago: executing program 7 (id=3252): r0 = syz_io_uring_setup(0x3488, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x1000, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3m1.498041578s ago: executing program 35 (id=3252): r0 = syz_io_uring_setup(0x3488, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x1000, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m37.703596918s ago: executing program 5 (id=4107): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0x101, 0x7, 0x7f, 0x9b9c, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @local}}, 0x7fff, 0xfff, 0xfffffffb, 0x5, 0x2}, &(0x7f0000000040)=0x98) 2m37.676042439s ago: executing program 5 (id=4109): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r1, 0x6}, 0x8) 2m37.623488782s ago: executing program 5 (id=4111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b", 0x7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 2m37.536389856s ago: executing program 5 (id=4114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x408}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6cc}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 2m37.498261798s ago: executing program 5 (id=4116): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m37.480598529s ago: executing program 5 (id=4118): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x806f, 0x2, 0x9, 0x7231, 0x1], [0x1000000000000002, 0x10000002, 0x1, 0x6, 0x800000000, 0x0, 0x5, 0x8000000000000001, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xffffbffffffffff4, 0x8e42, 0x400, 0x100, 0x8, 0x4000000000000dd, 0x90, 0x0, 0x800000000002a9, 0x19, 0x10000, 0x3, 0x8, 0x4, 0x3, 0x0, 0x9, 0x7, 0x7, 0x7, 0xfffffffffffffffa, 0xd28cfc, 0x100, 0x80, 0xfffffffffffffffb, 0x1, 0x3, 0x8004, 0x8000000000000000, 0xfffffffffffffffa, 0x6dcdcb08, 0x20000000003, 0x8, 0x1, 0x5d, 0x4, 0x80, 0x538a, 0x8001, 0xda, 0x4, 0x3, 0x4, 0x8, 0xce67, 0x4, 0x125, 0x6, 0x40000001fffff, 0x7, 0xb, 0xc2e, 0xffffffffffffffff, 0x4, 0x8000, 0x12f, 0x8, 0x40000000000006, 0xfffffffffffffff8, 0x82c, 0x8, 0xfffffffd, 0x8000000000000001, 0x2, 0xfffffffffffffffd, 0x3, 0x5, 0x4, 0x800, 0x2000000000000002, 0x8000000000000004, 0x6144, 0x8, 0x200000000000002, 0x6, 0x1ff, 0x9, 0x8000007c54, 0x4, 0xffffffffffff8000, 0x5, 0xb, 0x1000ffff, 0x7, 0x1, 0x16d, 0x2, 0x8, 0x8, 0x8, 0x0, 0x7, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb, 0x3ff, 0x0, 0x80000000008, 0x5, 0x0, 0x100000000006, 0x5a99, 0x40, 0x7, 0x1, 0x1]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000400), 0x0}, 0x20) 2m22.39913091s ago: executing program 36 (id=4118): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x806f, 0x2, 0x9, 0x7231, 0x1], [0x1000000000000002, 0x10000002, 0x1, 0x6, 0x800000000, 0x0, 0x5, 0x8000000000000001, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xffffbffffffffff4, 0x8e42, 0x400, 0x100, 0x8, 0x4000000000000dd, 0x90, 0x0, 0x800000000002a9, 0x19, 0x10000, 0x3, 0x8, 0x4, 0x3, 0x0, 0x9, 0x7, 0x7, 0x7, 0xfffffffffffffffa, 0xd28cfc, 0x100, 0x80, 0xfffffffffffffffb, 0x1, 0x3, 0x8004, 0x8000000000000000, 0xfffffffffffffffa, 0x6dcdcb08, 0x20000000003, 0x8, 0x1, 0x5d, 0x4, 0x80, 0x538a, 0x8001, 0xda, 0x4, 0x3, 0x4, 0x8, 0xce67, 0x4, 0x125, 0x6, 0x40000001fffff, 0x7, 0xb, 0xc2e, 0xffffffffffffffff, 0x4, 0x8000, 0x12f, 0x8, 0x40000000000006, 0xfffffffffffffff8, 0x82c, 0x8, 0xfffffffd, 0x8000000000000001, 0x2, 0xfffffffffffffffd, 0x3, 0x5, 0x4, 0x800, 0x2000000000000002, 0x8000000000000004, 0x6144, 0x8, 0x200000000000002, 0x6, 0x1ff, 0x9, 0x8000007c54, 0x4, 0xffffffffffff8000, 0x5, 0xb, 0x1000ffff, 0x7, 0x1, 0x16d, 0x2, 0x8, 0x8, 0x8, 0x0, 0x7, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb, 0x3ff, 0x0, 0x80000000008, 0x5, 0x0, 0x100000000006, 0x5a99, 0x40, 0x7, 0x1, 0x1]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000400), 0x0}, 0x20) 1m29.849433685s ago: executing program 3 (id=5707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x1}}, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x0, 0x64, 0x8, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xda, 0x3, 0x9, [{@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff90}]}, @lsrr={0x83, 0x13, 0x8e, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @generic={0x44, 0xe, "2b9af0fd7fe6ef24d163a00d"}, @generic={0x0, 0x7, "b13dd73f05"}]}}, {0x0, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xf0, 0x100}}}}}}}}, 0x7e) 1m29.702955762s ago: executing program 3 (id=5712): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xea, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtfilter={0x500, 0x2c, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0x0, 0xf}, {0xf, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_RATE={0x6, 0x5, {0x90, 0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8e}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_cgroup={{0xb}, {0x4a0, 0x2, [@TCA_CGROUP_ACT={0xe8, 0x1, [@m_xt={0xe4, 0x16, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x71, 0x6, "b13d0fac84d239c3029de3c8bc52a3cb3c3fd3cd36495230f6d1e6a8f2bb0b6c531b6192bb6ecae4499a4509bdf284573a7bc137def214fa9dd42e8d71631be12baf4b0fb08ed67f2b564e9aab6f39ef17fa073782d1dda113e6808a7c6edd6d7bac3962f3f2941228b30452c5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_ACT={0x3b4, 0x1, [@m_skbedit={0x44, 0x18, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xb}}]}, {0xd, 0x6, "68333f95b37d673d95"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xb0, 0x11, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000001, 0x0, 0x0, 0x3ff, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x7, 0x7, 0x0, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf6d, 0x7, 0x3, 0x9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x63, 0x3, 0x2, 0x7}}]}, {0x11, 0x6, "e7334421e1b8d5060326e2df01"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x118, 0x3, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x5, 0x1, 0xe87, 0x400}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x9, 0x6, 0x9, 0x400}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xddb, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x53, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1480, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x3, 0x3, 0x1, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xec00, 0x800, 0x6, 0xedfe, 0x1}}]}, {0x65, 0x6, "e89f4a1d82ba8acce980b579685cda9c16360e6ec0dcf8ac7062182a150889aa91126f7afe41939f08f9978cbf01abd0ad28fbaa6a474b19f85906b3a0431ddbfad3a862722e00dc04a23b87103025bd398c5db50d7473994d39a5603613ad191f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xe8, 0x5, 0x0, 0x0, {{0xf}, {0x4}, {0xb5, 0x6, "79df708dd0574d90c976f05be4bc714b1339c79355be70a59b2a13c3407f6a486e89ed33fb7fce3c4f3f08e2f04202af8f0da8dd3905356e11a266d2367030d1818fda5a0cf1339744e36e3e684cd5b4670c63f5151d1390ed0984ecd876bb03c0eecee82a7383a65c422d48446799c327ecc04edbc1e656bcf1197a1f4efb59109273944e6772e40508febbf79eb8d757f5981cb60053e3e295224fd81263ab6e78bfab52b2f1f16bdf31c86394ab2092"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xbc, 0x18, 0x0, 0x0, {{0x9}, {0x4}, {0x8d, 0x6, "3db0c62f0590060bbd618379a1a1a9f3e2c858e01d761e33eb4572afe6a0d32b5dde4397981c8f629464685ce0ae8fc1c05818edf6142bfdf4e771c03b173fd870017e57a648abbf5979314f6a5e083ad70df46604ee6f54f6c9761f1224cb3a2cfdff49a8153536f92554b158647fc8c4c63c22adfff21ac5eff1f9ee262505c03c73b5827d08b009"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x11}, 0x20040054) 1m29.702573612s ago: executing program 3 (id=5713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m29.480261563s ago: executing program 3 (id=5722): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 1m29.403893537s ago: executing program 3 (id=5726): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)=ANY=[], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x3, &(0x7f0000000380)=[{0x6, 0x40, 0x1, 0x1}, {0x84, 0x6, 0x9, 0xff}, {0x10, 0x5, 0x2, 0x1000}]}) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 1m28.75408918s ago: executing program 3 (id=5737): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m28.753914289s ago: executing program 37 (id=5737): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 13.362200529s ago: executing program 6 (id=7521): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) timer_create(0x0, 0x0, &(0x7f0000000300)) 13.320622461s ago: executing program 6 (id=7522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x24040884) 13.289138643s ago: executing program 6 (id=7523): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000040)) 13.256688834s ago: executing program 6 (id=7524): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 13.199009007s ago: executing program 6 (id=7526): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup3(r1, r0, 0x80000) write$P9_RREADDIR(r2, 0x0, 0x0) 12.694526602s ago: executing program 6 (id=7536): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={r2, 0x7}, 0xc) 12.633475205s ago: executing program 38 (id=7536): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={r2, 0x7}, 0xc) 3.751171344s ago: executing program 9 (id=7690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 3.411496031s ago: executing program 9 (id=7694): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x1088c, 0x0, 0x10000, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r0, r1], 0x2}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.190934222s ago: executing program 9 (id=7699): r0 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 3.154012324s ago: executing program 9 (id=7701): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008"], 0x31) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000fe0002"], 0x0) 3.091733757s ago: executing program 9 (id=7704): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) 2.63013508s ago: executing program 1 (id=7718): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a40)='.\x00', 0x2a004, 0x20) fchmod(r2, 0x20) 2.62197912s ago: executing program 2 (id=7719): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 2.568897343s ago: executing program 1 (id=7720): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, 0x0}, 0x20) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 2.541988224s ago: executing program 0 (id=7721): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000080c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x800}}], 0x1, 0x0) 2.541228705s ago: executing program 2 (id=7722): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.478196007s ago: executing program 1 (id=7723): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x5e29ee14, 0x4) 2.477841968s ago: executing program 2 (id=7724): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000540)='net/udp6\x00') socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 2.470393068s ago: executing program 2 (id=7725): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 2.443551669s ago: executing program 2 (id=7726): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000106000000080009000200000008000c00a80a0000060001000500000008000b0002"], 0x34}}, 0x20000034) 1.637451809s ago: executing program 1 (id=7728): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2eb}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 1.525416374s ago: executing program 1 (id=7730): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.4081271s ago: executing program 0 (id=7733): r0 = syz_io_uring_setup(0x5aea, &(0x7f0000000200)={0x0, 0xcfca, 0x800, 0x8000, 0x2c1}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000140), 0x0) r1 = eventfd2(0x3c75, 0x800) socket$netlink(0x10, 0x3, 0x0) unshare(0x400) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) 1.366201633s ago: executing program 0 (id=7735): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) unshare(0x42000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.282135887s ago: executing program 8 (id=7737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.280355817s ago: executing program 8 (id=7738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.00786705s ago: executing program 0 (id=7739): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 964.167292ms ago: executing program 8 (id=7740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000203, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 953.823693ms ago: executing program 0 (id=7741): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x716e) accept$inet6(r0, 0x0, 0x0) 936.266854ms ago: executing program 8 (id=7742): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x10042, 0x80, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x1) 905.590455ms ago: executing program 8 (id=7743): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x40c, &(0x7f0000000240)={[{@init_itable}, {@quota}, {@noinit_itable}, {@grpjquota}, {@lazytime}, {@block_validity}, {}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") r1 = open(&(0x7f0000000200)='./bus\x00', 0x4867e, 0xdc) fsmount(r1, 0x0, 0x80) r2 = open_tree(r0, &(0x7f0000000140)='./bus\x00', 0x1000) sendmsg$inet(r2, 0x0, 0xc0) fallocate(r1, 0x10, 0x0, 0x8800000) 661.268168ms ago: executing program 1 (id=7744): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000080c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x800}}], 0x1, 0x0) 659.205928ms ago: executing program 0 (id=7754): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') 658.506418ms ago: executing program 8 (id=7755): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffe) 7.630509ms ago: executing program 2 (id=7745): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xffe, &(0x7f0000003680)=ANY=[], 0x0) 0s ago: executing program 9 (id=7746): bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): .8.5690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 280.551342][ T28] audit: type=1400 audit(2000000168.657:2982): avc: denied { wake_alarm } for pid=17934 comm="syz.8.5694" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 280.614841][T17937] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5695'. [ 280.758012][ T28] audit: type=1326 audit(2000000168.867:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.9.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 280.783243][ T28] audit: type=1326 audit(2000000168.867:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.9.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 280.810335][ T28] audit: type=1326 audit(2000000168.867:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.9.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 280.835954][ T28] audit: type=1326 audit(2000000168.867:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.9.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 280.864038][ T28] audit: type=1326 audit(2000000168.867:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.9.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 280.933789][ T28] audit: type=1326 audit(2000000168.867:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.9.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 280.960964][ T28] audit: type=1326 audit(2000000168.867:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.9.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 280.985543][ T28] audit: type=1326 audit(2000000168.867:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.9.5700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 281.401920][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.482940][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.835704][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 281.925919][T18021] loop6: detected capacity change from 0 to 512 [ 281.947739][T18021] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.5735: inode has both inline data and extents flags [ 281.961464][T18021] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 281.961542][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 281.977633][ C1] EXT4-fs (loop6): initial error at time 2000000170: ext4_orphan_get:1391: inode 15 [ 281.987187][ C1] EXT4-fs (loop6): last error at time 2000000170: ext4_orphan_get:1391: inode 15 [ 281.997191][T18021] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5735: couldn't read orphan inode 15 (err -117) [ 282.009426][T18021] loop6: lost filesystem error report for type 5 error -117 [ 282.009993][T18021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.051101][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.122329][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.210217][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.405597][T18029] chnl_net:caif_netlink_parms(): no params data found [ 282.441698][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.455008][T18029] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.462591][T18029] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.469845][T18029] bridge_slave_0: entered allmulticast mode [ 282.476837][T18029] bridge_slave_0: entered promiscuous mode [ 282.483802][T18029] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.490961][T18029] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.498379][T18029] bridge_slave_1: entered allmulticast mode [ 282.505259][T18029] bridge_slave_1: entered promiscuous mode [ 282.536291][T18029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.548064][T18029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.570263][T18029] team0: Port device team_slave_0 added [ 282.577662][T18029] team0: Port device team_slave_1 added [ 282.631326][T18029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.646537][T18063] loop9: detected capacity change from 0 to 1024 [ 282.661779][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.689747][T18029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.700566][T18063] EXT4-fs: inline encryption not supported [ 282.703471][T18029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.714212][T18029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.721882][T18063] EXT4-fs: Ignoring removed bh option [ 282.742045][T18029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.752143][T18064] loop6: detected capacity change from 0 to 512 [ 282.795688][T18064] EXT4-fs (loop6): 1 truncate cleaned up [ 282.804947][T18063] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.823308][T18064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.856508][T18029] hsr_slave_0: entered promiscuous mode [ 282.873040][T18063] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.5749: Allocating blocks 449-513 which overlap fs metadata [ 282.873915][T18064] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5748: bg 0: block 465: padding at end of block bitmap is not set [ 282.889602][T18029] hsr_slave_1: entered promiscuous mode [ 282.908701][T18064] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 282.921199][T18064] EXT4-fs (loop6): This should not happen!! Data will be lost [ 282.921199][T18064] [ 282.929332][T18029] debugfs: 'hsr0' already exists in 'hsr' [ 282.947488][T18063] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.5749: Allocating blocks 497-513 which overlap fs metadata [ 282.962305][T18029] Cannot create hsr debugfs directory [ 282.968895][T18064] EXT4-fs (loop6): Total free blocks count 0 [ 282.986786][T18064] EXT4-fs (loop6): Free/Dirty block details [ 283.004095][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.026645][T18064] EXT4-fs (loop6): free_blocks=0 [ 283.032079][T18064] EXT4-fs (loop6): dirty_blocks=2 [ 283.037626][T18064] EXT4-fs (loop6): Block reservation details [ 283.044147][T18064] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 283.070754][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.161642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.169919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.363837][T18103] xt_hashlimit: size too large, truncated to 1048576 [ 283.751167][T18029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.779769][T18029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.812091][T18136] sctp: [Deprecated]: syz.6.5767 (pid 18136) Use of int in maxseg socket option. [ 283.812091][T18136] Use struct sctp_assoc_value instead [ 283.829573][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5766'. [ 283.838943][T18029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.846090][T18133] netlink: 'syz.1.5766': attribute type 30 has an invalid length. [ 283.857057][T18029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.881618][ T9243] Bluetooth: hci0: command 0x1003 tx timeout [ 283.888130][ T3496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 283.949043][ T58] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.984133][T18029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.005741][ T58] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.014654][ T58] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.038128][T18029] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.062118][ T58] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.096596][T16395] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.103895][T16395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.120903][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.128332][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.156168][T18159] netlink: 'syz.6.5771': attribute type 1 has an invalid length. [ 284.178541][T18159] netlink: 'syz.6.5771': attribute type 2 has an invalid length. [ 284.197137][T18029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.219036][T18159] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5771'. [ 284.234613][T18029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.392763][T18029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.507937][T18029] veth0_vlan: entered promiscuous mode [ 284.531897][ T3403] net_ratelimit: 2 callbacks suppressed [ 284.531915][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.554526][T18029] veth1_vlan: entered promiscuous mode [ 284.593511][T18029] veth0_macvtap: entered promiscuous mode [ 284.611934][T18029] veth1_macvtap: entered promiscuous mode [ 284.653392][T18029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.675729][T18222] netlink: 'syz.8.5782': attribute type 12 has an invalid length. [ 284.684717][T18222] netlink: 'syz.8.5782': attribute type 29 has an invalid length. [ 284.695104][T18222] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5782'. [ 284.710192][T18029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.738243][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.766230][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.789350][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.809368][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.844649][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5787'. [ 284.881828][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5787'. [ 284.972229][T18256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.996537][T18256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.016506][T18256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.042286][T18256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.077300][T18256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.089014][T18267] loop8: detected capacity change from 0 to 128 [ 285.105618][T18267] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 285.106754][T18255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.242636][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.380128][T18298] batadv_slave_0: entered promiscuous mode [ 285.388384][T18297] batadv_slave_0: left promiscuous mode [ 285.561908][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.797937][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 285.797952][ T28] audit: type=1400 audit(2000000173.907:2997): avc: denied { create } for pid=18354 comm="syz.2.5815" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_iscsi_socket permissive=1 [ 285.844176][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5816'. [ 285.846788][T18355] xt_hashlimit: size too large, truncated to 1048576 [ 285.861679][T18360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.890117][T18359] netlink: 'syz.6.5816': attribute type 30 has an invalid length. [ 285.903531][T16395] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.912504][T16395] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.927546][T16395] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.950983][T16395] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.090096][T18382] loop6: detected capacity change from 0 to 128 [ 286.131819][ T28] audit: type=1400 audit(2000000174.247:2998): avc: denied { getopt } for pid=18381 comm="syz.6.5822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 286.328894][T18408] loop9: detected capacity change from 0 to 128 [ 286.339658][T18408] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5828'. [ 286.358283][T18408] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5828'. [ 286.480876][T18423] loop6: detected capacity change from 0 to 256 [ 286.499516][T18424] vlan4: entered allmulticast mode [ 286.511690][T18424] bridge0: entered allmulticast mode [ 286.531034][T18424] bridge0: port 1(vlan4) entered blocking state [ 286.539109][T18424] bridge0: port 1(vlan4) entered disabled state [ 286.619140][T16395] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.774361][T18452] sctp: [Deprecated]: syz.9.5841 (pid 18452) Use of int in max_burst socket option. [ 286.774361][T18452] Use struct sctp_assoc_value instead [ 286.806372][T18456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5842'. [ 286.899238][T18469] netlink: 'syz.9.5845': attribute type 3 has an invalid length. [ 287.023206][T18486] vlan3: entered allmulticast mode [ 287.036577][T18486] bridge0: entered allmulticast mode [ 287.052052][T18486] bridge0: port 3(vlan3) entered blocking state [ 287.061128][T18486] bridge0: port 3(vlan3) entered disabled state [ 287.193208][T18502] loop6: detected capacity change from 0 to 512 [ 287.216407][T18505] netlink: 'syz.9.5855': attribute type 8 has an invalid length. [ 287.235334][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5855'. [ 287.245973][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.258925][T18502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.291092][T18502] ext4 filesystem being mounted at /882/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.320409][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.396805][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5857'. [ 287.603159][ T3360] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 287.628405][ T3360] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.684547][T18532] loop6: detected capacity change from 0 to 128 [ 287.708389][T18537] loop9: detected capacity change from 0 to 512 [ 287.740917][T18539] loop2: detected capacity change from 0 to 128 [ 287.759256][T18537] EXT4-fs: Ignoring removed oldalloc option [ 287.762882][T18539] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.793235][T18537] EXT4-fs (loop9): 1 truncate cleaned up [ 287.819879][T18537] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.837224][T18539] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.911607][ T36] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.986139][T18531] hid-generic 0000:0000:0000.0008: pid 18531 passed too short report [ 288.039506][T18553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=18553 comm=syz.2.5873 [ 288.089925][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.213438][ T28] audit: type=1400 audit(2000000176.327:2999): avc: denied { setopt } for pid=18570 comm="syz.2.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 288.335337][T18591] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 288.400817][T18599] loop2: detected capacity change from 0 to 512 [ 288.429269][T18599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.447813][T18599] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5893: invalid indirect mapped block 4294967295 (level 1) [ 288.464079][T18599] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 288.464283][T18599] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5893: invalid indirect mapped block 4294967295 (level 1) [ 288.474322][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 288.474345][ C0] EXT4-fs (loop2): initial error at time 2000000176: ext4_free_branches:1023: inode 11 [ 288.474377][ C0] EXT4-fs (loop2): last error at time 2000000176: ext4_free_branches:1023: inode 11 [ 288.491192][T18599] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 288.518190][T18599] EXT4-fs (loop2): 2 truncates cleaned up [ 288.555812][T18599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.611205][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.728798][ T28] audit: type=1326 audit(2000000176.837:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18619 comm="syz.1.5903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x0 [ 288.751264][T18612] loop2: detected capacity change from 0 to 128 [ 289.316527][T18660] sctp: [Deprecated]: syz.9.5919 (pid 18660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.316527][T18660] Use struct sctp_sack_info instead [ 289.722510][T10607] net_ratelimit: 7 callbacks suppressed [ 289.722559][T10607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.237994][T18719] netlink: 'syz.2.5945': attribute type 3 has an invalid length. [ 290.417009][T18743] set_capacity_and_notify: 1 callbacks suppressed [ 290.417030][T18743] loop8: detected capacity change from 0 to 512 [ 290.451223][T18743] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 290.484713][T18743] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 290.765172][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.081781][ T3571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.311568][ T28] audit: type=1400 audit(2000000179.417:3001): avc: denied { map } for pid=18831 comm="syz.6.5996" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 291.341248][ T3571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.359860][ T28] audit: type=1400 audit(2000000179.417:3002): avc: denied { execute } for pid=18831 comm="syz.6.5996" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 291.737054][ T28] audit: type=1326 audit(2000000179.847:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 291.836956][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.884684][ T28] audit: type=1326 audit(2000000179.847:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 291.915845][T18874] program syz.6.6016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.961791][ T28] audit: type=1326 audit(2000000179.847:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 292.023378][ T28] audit: type=1326 audit(2000000179.847:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 292.059702][ T28] audit: type=1326 audit(2000000179.847:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 292.104371][ T28] audit: type=1326 audit(2000000179.847:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 292.148885][ T28] audit: type=1326 audit(2000000179.847:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 292.174253][ T28] audit: type=1326 audit(2000000179.847:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.6.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 292.194528][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6023'. [ 292.362091][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.373633][ T3571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.470836][T18921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6035'. [ 292.608461][T18936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.617129][T18936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.666431][T18941] bridge0: port 3(syz_tun) entered blocking state [ 292.679750][T18941] bridge0: port 3(syz_tun) entered disabled state [ 292.687618][T18941] syz_tun: entered allmulticast mode [ 292.693780][T18941] syz_tun: entered promiscuous mode [ 292.699820][T18941] bridge0: port 3(syz_tun) entered blocking state [ 292.706609][T18941] bridge0: port 3(syz_tun) entered forwarding state [ 292.841729][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.888064][T18963] ipvlan2: entered promiscuous mode [ 292.894890][T18963] team0: Device ipvlan2 failed to register rx_handler [ 292.934122][T18971] bridge0: port 3(syz_tun) entered blocking state [ 292.941013][T18971] bridge0: port 3(syz_tun) entered disabled state [ 292.948690][T18971] syz_tun: entered allmulticast mode [ 292.955193][T18971] syz_tun: entered promiscuous mode [ 292.960860][T18971] bridge0: port 3(syz_tun) entered blocking state [ 292.967645][T18971] bridge0: port 3(syz_tun) entered forwarding state [ 293.012034][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.207135][T18988] loop9: detected capacity change from 0 to 256 [ 293.892058][T10607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.298464][T19061] loop8: detected capacity change from 0 to 512 [ 294.337333][T19061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.380628][T19061] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.433903][T19061] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #4: comm syz.8.6100: corrupted inode contents [ 294.476903][T19061] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #4: comm syz.8.6100: mark_inode_dirty error [ 294.500982][T19061] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #4: comm syz.8.6100: corrupted inode contents [ 294.530232][T19061] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #4: comm syz.8.6100: mark_inode_dirty error [ 294.559856][T19061] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.6100: Failed to acquire dquot type 1 [ 294.604892][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.924932][T10607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.053629][T19113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.062357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.285479][T19141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6134'. [ 295.310530][T19141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6134'. [ 295.390237][T19155] netlink: 92 bytes leftover after parsing attributes in process `syz.9.6149'. [ 295.405702][T12065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.979403][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.003457][T19192] hsr0: entered promiscuous mode [ 296.012370][T19192] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6155'. [ 296.030333][T19195] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19195 comm=syz.2.6156 [ 296.050990][T19192] hsr_slave_0: left promiscuous mode [ 296.060035][T19192] hsr_slave_1: left promiscuous mode [ 296.102129][T19192] hsr0 (unregistering): left promiscuous mode [ 296.424185][T19210] loop6: detected capacity change from 0 to 512 [ 296.476698][T19212] loop8: detected capacity change from 0 to 256 [ 296.486871][T19212] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 296.571973][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6165'. [ 296.870790][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 296.870807][ T28] audit: type=1326 audit(2000000184.977:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.9.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 296.924283][ T28] audit: type=1326 audit(2000000185.017:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.9.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 296.950664][ T28] audit: type=1326 audit(2000000185.017:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.9.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 297.001768][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.017506][ T28] audit: type=1326 audit(2000000185.017:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.9.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 297.051466][ T28] audit: type=1326 audit(2000000185.017:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.9.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 297.091368][ T28] audit: type=1326 audit(2000000185.017:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.9.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 297.115748][ T28] audit: type=1326 audit(2000000185.017:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.9.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 297.140531][ T28] audit: type=1326 audit(2000000185.017:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.9.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 297.164968][ T28] audit: type=1326 audit(2000000185.017:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.9.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 297.189674][ T28] audit: type=1326 audit(2000000185.017:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.9.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 297.307726][T19272] loop6: detected capacity change from 0 to 512 [ 297.386331][T19272] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.6189: bad orphan inode 11862016 [ 297.397596][T19272] loop6: lost filesystem error report for type 5 error -117 [ 297.398309][T19272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 297.421716][T19272] ext4 filesystem being mounted at /941/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.476597][T19272] Invalid ELF header magic: != ELF [ 297.538308][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 297.598247][T19294] loop6: detected capacity change from 0 to 512 [ 297.620206][T19294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.664337][T19294] ext4 filesystem being mounted at /942/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.792020][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.043063][T10607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.131990][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.360095][T19346] loop2: detected capacity change from 0 to 256 [ 298.389572][T19346] FAT-fs (loop2): Directory bread(block 64) failed [ 298.405056][T19346] FAT-fs (loop2): Directory bread(block 65) failed [ 298.421666][T19346] FAT-fs (loop2): Directory bread(block 66) failed [ 298.428919][T19346] FAT-fs (loop2): Directory bread(block 67) failed [ 298.437152][T19346] FAT-fs (loop2): Directory bread(block 68) failed [ 298.444306][ T3571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.452970][T19346] FAT-fs (loop2): Directory bread(block 69) failed [ 298.459985][T19346] FAT-fs (loop2): Directory bread(block 70) failed [ 298.467284][T19346] FAT-fs (loop2): Directory bread(block 71) failed [ 298.474426][T19346] FAT-fs (loop2): Directory bread(block 72) failed [ 298.481368][T19346] FAT-fs (loop2): Directory bread(block 73) failed [ 298.504758][T19346] syz.2.6216: attempt to access beyond end of device [ 298.504758][T19346] loop2: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 298.593264][T19357] loop2: detected capacity change from 0 to 512 [ 298.624520][T19357] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6221: bad orphan inode 11862016 [ 298.651441][T19357] loop2: lost filesystem error report for type 5 error -117 [ 298.659036][T19357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 298.681758][T19357] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.706598][T19357] Invalid ELF header magic: != ELF [ 298.742596][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 298.762841][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.811440][T19372] loop2: detected capacity change from 0 to 1024 [ 298.828838][T19372] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.848219][T19372] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 298.857587][T19372] EXT4-fs (loop2): orphan cleanup on readonly fs [ 298.869329][T19372] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 298.891669][T19372] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 298.899023][T19372] EXT4-fs (loop2): 1 truncate cleaned up [ 298.907664][T19372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.921665][T19372] EXT4-fs (loop2): shut down requested (0) [ 298.944925][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.081746][T10607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.546711][T19407] loop9: detected capacity change from 0 to 8192 [ 299.900203][T19407] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 299.915505][T19407] FAT-fs (loop9): Filesystem has been set read-only [ 300.020225][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6253'. [ 300.039666][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6253'. [ 300.137511][ T3360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.215995][T19447] loop2: detected capacity change from 0 to 1024 [ 300.319331][T19447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.378623][T19447] EXT4-fs (loop2): shut down requested (1) [ 300.418381][T19456] loop6: detected capacity change from 0 to 4096 [ 300.451897][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.471123][T19456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.611416][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.691652][T12065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.750441][T19478] netlink: 35284 bytes leftover after parsing attributes in process `syz.8.6271'. [ 300.804907][T19478] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6271'. [ 300.916430][T19494] program syz.9.6278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.171808][T19521] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6291'. [ 301.181320][T19521] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6291'. [ 301.203855][T19521] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6291'. [ 301.233443][T19521] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6291'. [ 301.271619][T19530] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 301.278210][T19530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.300344][T19530] vhci_hcd vhci_hcd.0: Device attached [ 301.320859][T19530] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 301.327961][T19530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.347530][T19530] vhci_hcd vhci_hcd.0: Device attached [ 301.357882][T19530] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 301.364456][T19530] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 301.393816][T19530] vhci_hcd vhci_hcd.0: Device attached [ 301.421338][T19552] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 301.465509][T19530] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(11) [ 301.472281][T19530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.493868][T19530] vhci_hcd vhci_hcd.0: Device attached [ 301.500559][T19557] vhci_hcd: connection closed [ 301.500649][T19531] vhci_hcd: connection closed [ 301.503052][T19544] vhci_hcd: connection closed [ 301.511149][ T36] vhci_hcd vhci_hcd.6: stop threads [ 301.511781][T19537] vhci_hcd: connection closed [ 301.532072][ T36] vhci_hcd vhci_hcd.6: release socket [ 301.544191][ T3360] usb 13-1: new low-speed USB device number 3 using vhci_hcd [ 301.558856][T19532] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 301.565641][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 301.572075][ T36] vhci_hcd vhci_hcd.6: stop threads [ 301.578156][ T36] vhci_hcd vhci_hcd.6: release socket [ 301.584206][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 301.590811][ T36] vhci_hcd vhci_hcd.6: stop threads [ 301.604028][ T36] vhci_hcd vhci_hcd.6: release socket [ 301.610108][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 301.617254][ T36] vhci_hcd vhci_hcd.6: stop threads [ 301.639832][ T36] vhci_hcd vhci_hcd.6: release socket [ 301.648383][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 302.224077][T19614] set_capacity_and_notify: 1 callbacks suppressed [ 302.224103][T19614] loop8: detected capacity change from 0 to 128 [ 302.895647][T19658] loop9: detected capacity change from 0 to 512 [ 302.912056][T19658] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 302.924737][T19658] EXT4-fs (loop9): 1 truncate cleaned up [ 302.941206][T19658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.027035][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 303.027054][ T28] audit: type=1400 audit(2000000191.137:3168): avc: denied { create } for pid=19655 comm="syz.9.6347" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 303.083295][T19670] netlink: 'syz.2.6351': attribute type 16 has an invalid length. [ 303.091314][T19670] netlink: 'syz.2.6351': attribute type 17 has an invalid length. [ 303.125360][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.126351][T19673] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 303.176885][T19676] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 303.296896][T19681] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 303.303594][T19681] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 303.399670][T19681] vhci_hcd vhci_hcd.0: Device attached [ 303.413913][T19683] vhci_hcd: connection closed [ 303.415591][ T36] vhci_hcd vhci_hcd.8: stop threads [ 303.437080][ T36] vhci_hcd vhci_hcd.8: release socket [ 303.448134][ T36] vhci_hcd vhci_hcd.8: disconnect device [ 303.504077][T19692] loop6: detected capacity change from 0 to 1024 [ 303.539827][T19692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.568732][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.644159][T19698] SELinux: failed to load policy [ 303.669983][T19670] bridge0: port 3(syz_tun) entered disabled state [ 303.688382][T19670] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.695885][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.888191][ T1714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.927568][T19670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.055576][T19670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.135905][T19674] bridge0: port 3(syz_tun) entered blocking state [ 304.142528][T19674] bridge0: port 3(syz_tun) entered forwarding state [ 304.163708][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6363'. [ 304.166457][T19674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.183881][T19674] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.199635][T19674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.221400][ T196] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.241410][ T196] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.265920][ T196] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.354257][ T196] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.368629][T10609] IPVS: starting estimator thread 0... [ 304.420691][ T28] audit: type=1400 audit(2000000192.527:3169): avc: denied { getopt } for pid=19727 comm="syz.6.6368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 304.472269][T19725] IPVS: using max 2256 ests per chain, 112800 per kthread [ 304.531916][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.795051][ T28] audit: type=1400 audit(2000000192.907:3170): avc: denied { bind } for pid=19763 comm="syz.9.6396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 304.838924][ T28] audit: type=1400 audit(2000000192.927:3171): avc: denied { listen } for pid=19763 comm="syz.9.6396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 304.861080][T19767] loop8: detected capacity change from 0 to 512 [ 304.906329][T19767] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.6387: inode has both inline data and extents flags [ 304.934908][T19774] sg_write: data in/out 1502/120 bytes for SCSI command 0x0-- guessing data in; [ 304.934908][T19774] program syz.2.6390 not setting count and/or reply_len properly [ 304.940713][T19767] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 304.957033][T19767] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6387: couldn't read orphan inode 15 (err -117) [ 304.966644][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 304.966681][ C1] EXT4-fs (loop8): initial error at time 2000000193: ext4_orphan_get:1391: inode 15 [ 304.966731][ C1] EXT4-fs (loop8): last error at time 2000000193: ext4_orphan_get:1391: inode 15 [ 305.005254][T19767] loop8: lost filesystem error report for type 5 error -117 [ 305.010290][T19767] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.097137][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.127828][ T35] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.142215][ T35] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 305.169018][ T28] audit: type=1326 audit(2000000193.277:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19789 comm="syz.8.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 305.221843][ T28] audit: type=1326 audit(2000000193.277:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19789 comm="syz.8.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 305.277383][ T28] audit: type=1326 audit(2000000193.277:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19789 comm="syz.8.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 305.305520][ T28] audit: type=1326 audit(2000000193.277:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19789 comm="syz.8.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 305.332994][ T28] audit: type=1326 audit(2000000193.277:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19789 comm="syz.8.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 305.360418][ T28] audit: type=1326 audit(2000000193.277:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19789 comm="syz.8.6394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 305.769794][T19851] loop9: detected capacity change from 0 to 128 [ 306.311863][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6442'. [ 306.321028][T19896] netlink: 'syz.9.6442': attribute type 1 has an invalid length. [ 306.329828][T19896] netlink: 'syz.9.6442': attribute type 2 has an invalid length. [ 306.611638][ T3360] usb 13-1: enqueue for inactive port 0 [ 306.630474][ T3360] usb 13-1: enqueue for inactive port 0 [ 306.733448][ T3360] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 306.758574][T19919] sctp: [Deprecated]: syz.1.6452 (pid 19919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.758574][T19919] Use struct sctp_sack_info instead [ 306.853784][T19927] loop9: detected capacity change from 0 to 512 [ 306.912359][T19927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.929825][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6459'. [ 306.962490][T19927] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.974071][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6459'. [ 307.002035][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6459'. [ 307.029258][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6459'. [ 307.038684][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6459'. [ 307.048326][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6459'. [ 307.057542][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6459'. [ 307.066608][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6459'. [ 307.076436][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6459'. [ 307.100067][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.275246][T19951] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.287491][T19951] vhci_hcd vhci_hcd.2: invalid port number 96 [ 307.294482][T19951] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 307.454307][T19955] syzkaller1: entered promiscuous mode [ 307.478462][T19955] syzkaller1: entered allmulticast mode [ 308.794706][T19979] loop2: detected capacity change from 0 to 1764 [ 308.823168][T19979] iso9660: Unknown parameter 'ÿ' [ 308.943450][T19999] syzkaller1: entered promiscuous mode [ 308.958653][T19999] syzkaller1: entered allmulticast mode [ 309.002031][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.050663][T20014] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 309.060698][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 309.060737][ T28] audit: type=1400 audit(2000000197.167:3200): avc: denied { listen } for pid=20012 comm="syz.1.6494" path=2F313335302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 309.127675][T20020] loop6: detected capacity change from 0 to 128 [ 309.142485][T20014] bond1 (unregistering): Released all slaves [ 309.152025][T20023] loop8: detected capacity change from 0 to 512 [ 309.183036][T20023] EXT4-fs: Mount option(s) incompatible with ext2 [ 309.237149][T20027] loop6: detected capacity change from 0 to 512 [ 309.246509][T20027] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 309.292197][ T28] audit: type=1400 audit(2000000197.397:3201): avc: denied { listen } for pid=20028 comm="syz.9.6501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 309.306489][T20027] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 309.331527][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 309.338302][ C1] EXT4-fs (loop6): initial error at time 2000000197: ext4_mb_generate_buddy:1315 [ 309.347817][ C1] EXT4-fs (loop6): last error at time 2000000197: ext4_mb_generate_buddy:1315 [ 309.357372][T20032] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.364792][T20032] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.376628][T20027] EXT4-fs (loop6): 1 truncate cleaned up [ 309.404068][T20027] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.429775][ T28] audit: type=1400 audit(2000000197.527:3202): avc: denied { bind } for pid=20038 comm="syz.9.6505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.485466][ T28] audit: type=1400 audit(2000000197.527:3203): avc: denied { setopt } for pid=20038 comm="syz.9.6505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.508465][ T28] audit: type=1400 audit(2000000197.527:3204): avc: denied { connect } for pid=20038 comm="syz.9.6505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.529743][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.530961][ T28] audit: type=1326 audit(2000000197.587:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.9.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 309.590564][ T28] audit: type=1326 audit(2000000197.587:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.9.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 309.616208][ T28] audit: type=1326 audit(2000000197.587:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.9.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 309.641624][ T28] audit: type=1326 audit(2000000197.587:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.9.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 309.642345][T16395] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.666858][ T28] audit: type=1326 audit(2000000197.587:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20045 comm="syz.9.6508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 310.053315][T20067] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 310.202952][T20083] macvtap1: entered promiscuous mode [ 310.211899][T20083] macvtap1: entered allmulticast mode [ 310.221748][T20083] gretap0: entered allmulticast mode [ 310.343889][ T3403] kernel write not supported for file bpf-prog (pid: 3403 comm: kworker/0:4) [ 310.433630][T20106] netlink: 'syz.1.6532': attribute type 2 has an invalid length. [ 310.482063][ T3403] Process accounting resumed [ 310.922051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.930733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.939530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.481734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.491231][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.500075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.530308][T20236] loop2: detected capacity change from 0 to 2048 [ 311.721756][T10611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.286395][T20313] batadv_slave_1: entered promiscuous mode [ 312.303458][T20311] batadv_slave_1: left promiscuous mode [ 312.659334][T20326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.683774][T20326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.749337][ T2106] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.777858][T20329] SELinux: failed to load policy [ 312.785560][ T2106] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.806920][ T2106] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.868230][ T2106] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.972445][T20337] syzkaller1: entered promiscuous mode [ 312.978254][T20337] syzkaller1: entered allmulticast mode [ 313.217378][T20280] Bluetooth: hci0: Frame reassembly failed (-84) [ 313.538166][T20384] netlink: 'syz.6.6615': attribute type 6 has an invalid length. [ 313.647451][T20396] netem: incorrect gi model size [ 313.652676][T20396] netem: change failed [ 313.885084][T20406] sctp: [Deprecated]: syz.9.6624 (pid 20406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.885084][T20406] Use struct sctp_sack_info instead [ 314.561259][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 314.561277][ T28] audit: type=1326 audit(2000000202.667:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20441 comm="syz.1.6640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 314.592977][ T28] audit: type=1326 audit(2000000202.677:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20441 comm="syz.1.6640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 314.618147][ T28] audit: type=1326 audit(2000000202.707:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20441 comm="syz.1.6640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 314.643091][ T28] audit: type=1326 audit(2000000202.707:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20441 comm="syz.1.6640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 314.667882][ T28] audit: type=1326 audit(2000000202.707:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20441 comm="syz.1.6640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 314.719412][T20444] futex_wake_op: syz.1.6641 tries to shift op by -1; fix this program [ 314.762575][T10611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.775148][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.931192][T20460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.940640][T20460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.241633][ T9243] Bluetooth: hci0: command 0x1003 tx timeout [ 315.248167][ T3496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 315.402875][T16404] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.504775][T20486] __nla_validate_parse: 35 callbacks suppressed [ 315.504793][T20486] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6659'. [ 315.536277][T20486] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6659'. [ 315.563888][ T28] audit: type=1326 audit(2000000203.677:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20491 comm="syz.1.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 315.623272][ T28] audit: type=1326 audit(2000000203.677:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20491 comm="syz.1.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a1610cfce code=0x7ffc0000 [ 315.687326][ T28] audit: type=1326 audit(2000000203.677:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20491 comm="syz.1.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 315.723223][T20493] loop6: detected capacity change from 0 to 8192 [ 315.741099][ T28] audit: type=1326 audit(2000000203.677:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20491 comm="syz.1.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 315.832255][ T28] audit: type=1326 audit(2000000203.677:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20491 comm="syz.1.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 315.884302][T20509] loop8: detected capacity change from 0 to 2048 [ 315.925544][T20509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.032063][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.052667][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.061489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.443889][T20560] loop2: detected capacity change from 0 to 256 [ 316.682204][T20275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.690723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.788251][T20589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.817569][T20589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.946743][T20601] netlink: 'syz.1.6710': attribute type 15 has an invalid length. [ 317.377082][T20623] netlink: 236 bytes leftover after parsing attributes in process `syz.8.6721'. [ 317.411624][T20623] netlink: 236 bytes leftover after parsing attributes in process `syz.8.6721'. [ 317.737318][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6733'. [ 317.801825][T10613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.930372][T20664] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6738'. [ 318.232527][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6747'. [ 318.251622][T20684] netlink: 'syz.9.6747': attribute type 18 has an invalid length. [ 318.280585][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6747'. [ 318.520181][T20708] loop8: detected capacity change from 0 to 512 [ 318.548148][T20708] EXT4-fs: Ignoring removed nobh option [ 318.563920][T20708] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 318.579411][T20708] EXT4-fs (loop8): 1 truncate cleaned up [ 318.592807][T20708] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.606999][T20714] Invalid argument reading file caps for ./file0 [ 318.626076][T20708] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 563871744 > max in inode 15 [ 318.664777][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6761'. [ 318.665143][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6761'. [ 318.666163][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.826051][T20737] loop8: detected capacity change from 0 to 2048 [ 318.954051][T20746] loop8: detected capacity change from 0 to 2048 [ 318.979332][T20746] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.018684][T20751] netlink: 'syz.1.6775': attribute type 16 has an invalid length. [ 319.034245][T20746] ext4 filesystem being mounted at /640/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.065119][T20751] netlink: 'syz.1.6775': attribute type 17 has an invalid length. [ 319.108334][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.221864][T20752] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.234417][T20758] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.249780][T20752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.755277][T20791] xt_connbytes: Forcing CT accounting to be enabled [ 319.770723][T20791] program syz.2.6790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.817096][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 319.817164][ T28] audit: type=1326 audit(2000000207.927:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.2.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 319.850777][ T28] audit: type=1326 audit(2000000207.927:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.2.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 319.875384][ T28] audit: type=1326 audit(2000000207.957:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.2.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 319.899957][ T2106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.901180][ T28] audit: type=1326 audit(2000000207.957:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.2.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 319.945491][ T28] audit: type=1326 audit(2000000207.957:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.2.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 319.980078][ T28] audit: type=1326 audit(2000000207.957:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.2.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 320.005375][ T28] audit: type=1326 audit(2000000207.957:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.2.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 320.030050][ T28] audit: type=1326 audit(2000000207.957:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.2.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 320.054448][ T28] audit: type=1326 audit(2000000207.957:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.2.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 320.079615][ T28] audit: type=1326 audit(2000000207.957:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.2.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ab454e007 code=0x7ffc0000 [ 320.315670][T20751] bridge1: left promiscuous mode [ 320.330824][T20751] bridge2: left promiscuous mode [ 320.336547][T20751] bridge2: left allmulticast mode [ 320.348097][T20751] gretap0: left allmulticast mode [ 320.353923][T20751] macvtap1: left promiscuous mode [ 320.359116][T20751] macvtap1: left allmulticast mode [ 320.399408][T16404] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.410261][T16404] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.430520][T16404] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.451736][T16404] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.488406][T16404] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.499491][T16404] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.508213][T16404] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.516798][T16404] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.529996][T20809] syzkaller1: entered promiscuous mode [ 320.533798][ T2106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.537538][T20809] syzkaller1: entered allmulticast mode [ 320.702412][T20820] loop9: detected capacity change from 0 to 8192 [ 320.867227][T20832] loop2: detected capacity change from 0 to 512 [ 321.051315][T20836] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6804'. [ 321.335752][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6814'. [ 321.755332][T20897] netlink: 'syz.9.6831': attribute type 16 has an invalid length. [ 321.766579][T20897] netlink: 'syz.9.6831': attribute type 17 has an invalid length. [ 321.850116][T20897] bridge0: port 3(syz_tun) entered disabled state [ 321.865994][T20897] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.873302][T20897] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.974021][T20897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.985254][T20897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.140144][T20898] bridge0: port 3(syz_tun) entered blocking state [ 322.147123][T20898] bridge0: port 3(syz_tun) entered forwarding state [ 322.175262][T20898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.195733][T20898] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.215873][T20898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.265755][T16404] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.277794][T16404] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.307916][T16404] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.345729][T16404] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.372087][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6845'. [ 322.392290][T20924] netlink: 'syz.9.6846': attribute type 83 has an invalid length. [ 322.408249][T20923] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6845'. [ 322.425619][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6845'. [ 322.447900][T20923] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6845'. [ 322.841009][T20965] sg_read: process 2344 (syz.6.6873) changed security contexts after opening file descriptor, this is not allowed. [ 322.867910][T20961] loop2: detected capacity change from 0 to 2048 [ 322.906409][T20961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.963816][T20961] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.119088][T20989] netlink: 'syz.8.6874': attribute type 4 has an invalid length. [ 323.205805][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.271465][T20995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6877'. [ 323.284156][T20997] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 323.291084][T20995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6877'. [ 323.292813][T20997] SELinux: failed to load policy [ 323.317467][T20995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6877'. [ 324.367874][T21081] loop2: detected capacity change from 0 to 1024 [ 324.389095][T21081] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 324.416534][T21081] System zones: 0-1, 3-36 [ 324.432012][T21081] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6917: bad orphan inode 134217728 [ 324.444322][T21081] loop2: lost filesystem error report for type 5 error -117 [ 324.445619][T21081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.507823][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.539317][T21089] netlink: 'syz.9.6920': attribute type 3 has an invalid length. [ 324.547573][T21089] netlink: 'syz.9.6920': attribute type 3 has an invalid length. [ 324.668356][T21098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.695128][T21098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.734091][T21098] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 324.904338][T21108] SELinux: failed to load policy [ 324.977351][T21117] loop8: detected capacity change from 0 to 1024 [ 324.986449][T21117] EXT4-fs: inline encryption not supported [ 325.002096][T16404] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.044899][T21117] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.099013][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.311952][T21137] loop8: detected capacity change from 0 to 512 [ 325.360167][T21137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.381695][T21137] ext4 filesystem being mounted at /691/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.405005][T21137] netlink: 111804 bytes leftover after parsing attributes in process `syz.8.6940'. [ 325.424762][T21137] netlink: zone id is out of range [ 325.430015][T21137] netlink: del zone limit has 4 unknown bytes [ 325.476643][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.677052][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 325.677102][ T28] audit: type=1326 audit(2000000213.787:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.6.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 325.734360][ T28] audit: type=1326 audit(2000000213.787:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.6.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 325.761802][ T28] audit: type=1326 audit(2000000213.827:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.6.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 325.786024][ T28] audit: type=1326 audit(2000000213.827:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.6.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 325.810535][ T28] audit: type=1326 audit(2000000213.827:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.6.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 325.835869][ T28] audit: type=1326 audit(2000000213.827:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.6.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 325.860346][ T28] audit: type=1326 audit(2000000213.827:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.6.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 325.892167][ T28] audit: type=1326 audit(2000000213.827:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.6.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 325.934037][ T28] audit: type=1326 audit(2000000213.827:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.6.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 325.959043][ T28] audit: type=1326 audit(2000000213.827:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21151 comm="syz.6.6945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5bcec799 code=0x7ffc0000 [ 326.285086][T16404] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.496907][T21167] loop2: detected capacity change from 0 to 512 [ 326.526529][T21167] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.6951: Directory hole found for htree index block 0 [ 326.561973][T21167] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 326.571523][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 326.587390][ C1] EXT4-fs (loop2): initial error at time 2000000214: dx_probe:791: inode 2 [ 326.596090][ C1] EXT4-fs (loop2): last error at time 2000000214: dx_probe:791: inode 2 [ 326.605194][T21167] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 326.622573][T21167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.663506][T21167] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 326.763179][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.819631][T21183] loop9: detected capacity change from 0 to 2048 [ 326.849888][T21183] __nla_validate_parse: 2 callbacks suppressed [ 326.849926][T21183] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6958'. [ 326.902617][T21189] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6958'. [ 326.943244][T21190] bond1: entered promiscuous mode [ 327.028549][T16404] Bluetooth: hci0: Frame reassembly failed (-84) [ 327.418758][T21234] loop8: detected capacity change from 0 to 128 [ 327.701895][T21257] netlink: 'syz.8.6990': attribute type 5 has an invalid length. [ 327.778277][T21265] loop7: detected capacity change from 0 to 7 [ 327.836217][T21267] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6996'. [ 327.952814][T21276] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7000'. [ 327.956337][T21278] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.963983][T21276] netlink: 'syz.8.7000': attribute type 7 has an invalid length. [ 327.985243][T21276] netlink: 'syz.8.7000': attribute type 8 has an invalid length. [ 327.986978][T21278] netlink: 'syz.6.6999': attribute type 4 has an invalid length. [ 327.993420][T21276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7000'. [ 328.015159][T21276] erspan0: entered promiscuous mode [ 328.021290][T21276] gretap0: entered promiscuous mode [ 328.027659][T21276] erspan0: left promiscuous mode [ 328.033642][T21276] gretap0: left promiscuous mode [ 329.081584][ T3496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 329.130756][T21313] loop9: detected capacity change from 0 to 512 [ 329.158170][T21313] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.171451][T21313] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.247946][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.488078][T21346] loop8: detected capacity change from 0 to 128 [ 331.503474][T21346] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 331.523528][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 331.523545][ T28] audit: type=1400 audit(2000000219.637:3447): avc: denied { watch watch_reads } for pid=21344 comm="syz.8.7028" path="/718/file0/file1" dev="loop8" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 331.627852][ T28] audit: type=1400 audit(2000000219.737:3448): avc: denied { create } for pid=21358 comm="syz.2.7032" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 331.678469][T21363] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7034'. [ 331.730792][ T28] audit: type=1326 audit(2000000219.837:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.7037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 331.776234][ T28] audit: type=1326 audit(2000000219.837:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.7037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 331.881591][ T28] audit: type=1326 audit(2000000219.837:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.7037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 331.983723][ T28] audit: type=1326 audit(2000000219.837:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.7037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 332.031643][ T28] audit: type=1326 audit(2000000219.837:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21368 comm="syz.8.7037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 332.094794][ T28] audit: type=1326 audit(2000000219.987:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21384 comm="syz.1.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 332.148737][ T28] audit: type=1326 audit(2000000219.987:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21384 comm="syz.1.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 332.227428][T21411] loop2: detected capacity change from 0 to 512 [ 332.243534][T21411] EXT4-fs: Ignoring removed oldalloc option [ 332.280159][ T28] audit: type=1326 audit(2000000219.997:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21384 comm="syz.1.7045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1614c799 code=0x7ffc0000 [ 332.333015][T21411] EXT4-fs (loop2): 1 truncate cleaned up [ 332.340509][T21411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.402656][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.677108][T21443] SELinux: Context : is not valid (left unmapped). [ 332.945255][T16404] Bluetooth: hci0: Frame reassembly failed (-84) [ 333.040318][T21484] loop9: detected capacity change from 0 to 1024 [ 333.047413][T21484] EXT4-fs: inline encryption not supported [ 333.053569][T21484] EXT4-fs: Ignoring removed i_version option [ 333.081627][T21484] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.107329][T21484] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.7086: Allocating blocks 497-513 which overlap fs metadata [ 333.125179][T21483] EXT4-fs (loop9): pa ffff888108260310: logic 256, phys. 369, len 9 [ 333.133401][T21483] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 333.159760][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.238663][T21498] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 333.663090][T21522] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7102'. [ 333.672754][T21522] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7102'. [ 333.683870][T21522] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7102'. [ 333.694303][T21522] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7102'. [ 333.788160][T21524] loop9: detected capacity change from 0 to 128 [ 333.860163][T21524] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.904845][T21524] ext4 filesystem being mounted at /502/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.956274][T14568] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.145496][T21544] loop9: detected capacity change from 0 to 1024 [ 334.164090][T21544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.198921][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.358379][T21566] IPv6: NLM_F_REPLACE set, but no existing node found! [ 334.694258][T21605] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 335.001555][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 335.002845][ T3496] Bluetooth: hci0: command 0x1003 tx timeout [ 335.472821][T21683] batadv_slave_1: entered promiscuous mode [ 335.484453][T21681] batadv_slave_1: left promiscuous mode [ 335.619160][T21695] loop2: detected capacity change from 0 to 512 [ 335.657708][T21695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.731834][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.984081][T21718] loop8: detected capacity change from 0 to 512 [ 336.002219][T21718] EXT4-fs: Ignoring removed nobh option [ 336.016926][T21718] EXT4-fs (loop8): 1 orphan inode deleted [ 336.031947][T21718] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.087785][T21725] loop9: detected capacity change from 0 to 256 [ 336.111277][T21725] FAT-fs (loop9): bogus number of FAT sectors [ 336.117656][T21725] FAT-fs (loop9): Can't find a valid FAT filesystem [ 336.186085][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.363964][T21735] loop8: detected capacity change from 0 to 1024 [ 336.371284][T21735] EXT4-fs: Ignoring removed oldalloc option [ 336.377675][T21735] EXT4-fs: Ignoring removed bh option [ 336.409356][T21735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.500101][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.556113][T21747] syzkaller1: entered promiscuous mode [ 336.569040][T21747] syzkaller1: entered allmulticast mode [ 336.923346][T21766] loop6: detected capacity change from 0 to 2048 [ 336.953179][T21766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.058809][T21766] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7172: bg 0: block 234: padding at end of block bitmap is not set [ 337.099117][T21766] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 372 with error 28 [ 337.152659][T21766] EXT4-fs (loop6): This should not happen!! Data will be lost [ 337.152659][T21766] [ 337.211922][T21766] EXT4-fs (loop6): Total free blocks count 0 [ 337.231265][T21766] EXT4-fs (loop6): Free/Dirty block details [ 337.266562][T21766] EXT4-fs (loop6): free_blocks=0 [ 337.281847][T21766] EXT4-fs (loop6): dirty_blocks=384 [ 337.297537][T21766] EXT4-fs (loop6): Block reservation details [ 337.307524][T21766] EXT4-fs (loop6): i_reserved_data_blocks=24 [ 337.455549][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.661270][T21794] loop6: detected capacity change from 0 to 512 [ 337.731746][T21794] EXT4-fs: Mount option(s) incompatible with ext2 [ 337.906275][T21807] 9p: Bad value for 'rfdno' [ 338.204303][ T28] kauditd_printk_skb: 579 callbacks suppressed [ 338.204320][ T28] audit: type=1400 audit(2000000226.317:4036): avc: denied { read open } for pid=21825 comm="syz.6.7192" path="/" dev="configfs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 339.145634][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 341.161680][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 341.161749][ T3496] Bluetooth: hci0: command 0x1003 tx timeout [ 342.294029][T21909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7226'. [ 342.312484][T21909] hsr_slave_0: left promiscuous mode [ 342.338723][T21909] hsr_slave_1: left promiscuous mode [ 342.422816][T21925] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7233'. [ 342.435036][T21925] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7233'. [ 342.444851][T21925] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7233'. [ 342.454108][T21925] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7233'. [ 342.494782][T20793] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 342.509854][T20793] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.583872][T21934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7236'. [ 342.593467][T21934] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7236'. [ 342.603627][T21934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7236'. [ 342.637834][T21937] loop2: detected capacity change from 0 to 512 [ 342.666208][T21937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.679247][T21937] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.710039][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.737163][T21942] loop2: detected capacity change from 0 to 128 [ 342.894367][T21944] loop9: detected capacity change from 0 to 32768 [ 342.942113][ T6256] loop9: p1 p3 < > [ 342.950507][T21944] loop9: p1 p3 < > [ 343.056781][ T6262] udevd[6262]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 343.056826][ T6256] udevd[6256]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 343.099490][ T9580] udevd[9580]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 343.100128][ T6256] udevd[6256]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 343.162272][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7243'. [ 343.193622][T21957] hsr_slave_0: left promiscuous mode [ 343.199851][T21957] hsr_slave_1: left promiscuous mode [ 343.329051][ T28] audit: type=1400 audit(2000000231.437:4037): avc: denied { ioctl } for pid=21963 comm="syz.9.7247" path="socket:[66715]" dev="sockfs" ino=66715 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 343.369799][T21966] vhci_hcd vhci_hcd.3: default hub control req: 010b v0000 i0000 l0 [ 343.518510][ T28] audit: type=1326 audit(2000000231.627:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.2.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 343.573411][ T28] audit: type=1326 audit(2000000231.627:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.2.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 343.731729][ T28] audit: type=1326 audit(2000000231.627:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.2.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 343.816080][T21995] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7260'. [ 343.838773][ T28] audit: type=1326 audit(2000000231.627:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.2.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 343.888318][T21997] loop9: detected capacity change from 0 to 4096 [ 343.930795][T21997] EXT4-fs: Ignoring removed bh option [ 343.963932][ T28] audit: type=1326 audit(2000000231.627:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.2.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 344.001664][T21997] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.114306][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.144078][ T28] audit: type=1326 audit(2000000231.677:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.2.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 344.233304][ T28] audit: type=1326 audit(2000000231.677:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.2.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ab454c502 code=0x7ffc0000 [ 344.321472][ T28] audit: type=1326 audit(2000000231.677:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.2.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8ab454c597 code=0x7ffc0000 [ 344.326375][T22008] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 344.404343][ T28] audit: type=1326 audit(2000000231.677:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.2.7255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8ab4509491 code=0x7ffc0000 [ 344.654653][T22020] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 344.734619][T22020] bond2: (slave lo): Enslaving as an active interface with an up link [ 344.804899][T22020] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 345.272461][T22025] loop9: detected capacity change from 0 to 32768 [ 345.349774][T22046] loop6: detected capacity change from 0 to 512 [ 345.362736][ T6262] loop9: p1 p3 < > [ 345.371410][T22025] loop9: p1 p3 < > [ 345.419091][T22046] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 345.511096][T22046] EXT4-fs (loop6): 1 truncate cleaned up [ 345.559554][T22046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.685008][ T6256] udevd[6256]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 345.696734][ T6262] udevd[6262]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 345.735831][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.764832][ T6262] udevd[6262]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 345.778324][ T6256] udevd[6256]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 345.866854][T22065] syz_tun: entered allmulticast mode [ 345.905657][T22065] syz_tun (unregistering): left allmulticast mode [ 346.047208][T22083] loop6: detected capacity change from 0 to 128 [ 346.105854][T22086] loop8: detected capacity change from 0 to 512 [ 346.150115][T22088] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 346.163649][T22088] syzkaller0: group set to 0 [ 346.188691][T22086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.217624][T22086] ext4 filesystem being mounted at /758/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.264354][T22096] loop2: detected capacity change from 0 to 512 [ 346.297993][T22086] EXT4-fs error (device loop8): ext4_lookup:1785: inode #15: comm syz.8.7297: invalid fast symlink length 10 [ 346.329579][T22096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.364171][T22086] EXT4-fs (loop8): Remounting filesystem read-only [ 346.385675][T22096] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.435754][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.760541][T22114] netlink: 'syz.1.7305': attribute type 10 has an invalid length. [ 346.811434][T22114] bond0: entered promiscuous mode [ 346.869748][T22114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.924966][T22114] bridge0: port 1(bond0) entered blocking state [ 346.962352][T22114] bridge0: port 1(bond0) entered disabled state [ 347.152879][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.317873][T22134] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 347.341876][T22134] SELinux: failed to load policy [ 347.517682][T22158] loop8: detected capacity change from 0 to 1024 [ 347.548245][T22158] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.709966][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.910558][T22179] __nla_validate_parse: 3 callbacks suppressed [ 347.910588][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7333'. [ 347.943886][T22179] netlink: 'syz.2.7333': attribute type 26 has an invalid length. [ 347.961129][T22179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7333'. [ 347.995220][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7333'. [ 348.027882][T22179] netlink: 'syz.2.7333': attribute type 26 has an invalid length. [ 348.063408][T22179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7333'. [ 348.252755][T22199] netlink: 1692 bytes leftover after parsing attributes in process `syz.1.7342'. [ 348.397901][T22205] loop2: detected capacity change from 0 to 512 [ 348.418161][T22205] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.437479][T22205] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 348.462335][T22205] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 348.484665][T22205] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 348.501571][T22205] System zones: 0-2, 18-18, 34-34 [ 348.512768][T22205] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7345: bad orphan inode 15 [ 348.536372][T22205] loop2: lost filesystem error report for type 5 error -117 [ 348.536537][T22205] ext4_test_bit(bit=14, block=18) = 1 [ 348.543974][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 348.543990][ C0] EXT4-fs (loop2): initial error at time 2000000236: ext4_orphan_get:1417 [ 348.544023][ C0] EXT4-fs (loop2): last error at time 2000000236: ext4_orphan_get:1417 [ 348.589370][T22205] is_bad_inode(inode)=0 [ 348.593915][T22205] NEXT_ORPHAN(inode)=2264924160 [ 348.621375][T22205] max_ino=32 [ 348.625481][T22205] i_nlink=0 [ 348.629036][T22205] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.7345: corrupted inode contents [ 348.645455][T22210] bond2: (slave lo): Releasing backup interface [ 348.653764][T22210] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 348.655304][T22214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7349'. [ 348.664101][T22205] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.674585][T22210] bridge_slave_0: left allmulticast mode [ 348.693467][T22205] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.7345: mark_inode_dirty error [ 348.705259][T22210] bridge_slave_0: left promiscuous mode [ 348.711128][T22210] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.718713][T22205] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.718936][T22205] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.7345: corrupted inode contents [ 348.741820][T22205] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.743910][T22205] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.7345: mark_inode_dirty error [ 348.766750][T22210] bridge_slave_1: left allmulticast mode [ 348.772606][T22210] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.780043][T22205] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.781774][T22205] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.7345: mark inode dirty (error -117) [ 348.809081][T22210] bond0: (slave bond_slave_0): Releasing backup interface [ 348.816785][T22205] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.817187][T22205] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 348.837783][T22210] bond0: (slave bond_slave_1): Releasing backup interface [ 348.845680][T22205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.859213][T22210] team0: Port device team_slave_0 removed [ 348.865993][T22210] team0: Port device team_slave_1 removed [ 348.872439][T22210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.881962][T22210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.897347][T22210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.162688][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.273393][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 349.273411][ T28] audit: type=1400 audit(2000000237.387:4082): avc: denied { read } for pid=22249 comm="syz.9.7363" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 349.320637][ T28] audit: type=1400 audit(2000000237.417:4083): avc: denied { open } for pid=22249 comm="syz.9.7363" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 349.345337][ T28] audit: type=1400 audit(2000000237.417:4084): avc: denied { ioctl } for pid=22249 comm="syz.9.7363" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 349.454428][ T28] audit: type=1400 audit(2000000237.567:4085): avc: denied { unmount } for pid=14568 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 349.612416][T22272] loop6: detected capacity change from 0 to 128 [ 349.902415][T22296] loop8: detected capacity change from 0 to 128 [ 349.915014][T22296] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 349.928376][T22296] ext4 filesystem being mounted at /786/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 349.974324][T12386] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.160699][T22302] loop8: detected capacity change from 0 to 32768 [ 350.202748][ T6256] loop8: p1 p3 < > [ 350.212915][T22302] loop8: p1 p3 < > [ 350.254327][T22309] loop8: detected capacity change from 0 to 512 [ 350.273902][T22309] journal_path: Non-blockdev passed as './file2' [ 350.280413][T22309] EXT4-fs: error: could not find journal device path [ 350.324908][ T6256] udevd[6256]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 350.335525][ T6262] udevd[6262]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 350.354324][ T6262] udevd[6262]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 350.364698][ T6256] udevd[6256]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 350.406567][T22307] loop6: detected capacity change from 0 to 256 [ 350.617136][ T28] audit: type=1326 audit(2000000238.727:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 350.642720][ T28] audit: type=1326 audit(2000000238.727:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 350.668586][ T28] audit: type=1326 audit(2000000238.737:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 350.693431][ T28] audit: type=1326 audit(2000000238.737:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 350.726888][ T28] audit: type=1326 audit(2000000238.757:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 350.752281][ T28] audit: type=1326 audit(2000000238.757:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22320 comm="syz.9.7391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 351.065007][T22349] loop6: detected capacity change from 0 to 256 [ 351.077970][T22349] FAT-fs (loop6): bogus number of FAT sectors [ 351.089568][T22349] FAT-fs (loop6): Can't find a valid FAT filesystem [ 351.271050][T22365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.280519][T22365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.523117][T22377] ipip0: entered promiscuous mode [ 351.528325][T22377] ipip0: entered allmulticast mode [ 351.835369][T22393] loop6: detected capacity change from 0 to 128 [ 351.860439][T22393] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.882532][T22393] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.935919][ T36] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.964153][T22402] loop6: detected capacity change from 0 to 512 [ 352.026089][T22404] loop9: detected capacity change from 0 to 1024 [ 352.051082][T22404] EXT4-fs: Ignoring removed oldalloc option [ 352.062500][T22404] EXT4-fs: Ignoring removed bh option [ 352.085528][T22404] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.184634][T22238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.203867][T22236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7358'. [ 352.662155][T22420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7431'. [ 352.921090][T22424] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 353.129969][T22429] Invalid option length (63724) for dns_resolver key [ 353.140542][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.208956][ T58] kworker/u8:4: attempt to access beyond end of device [ 353.208956][ T58] loop2: rw=1, sector=145, nr_sectors = 40 limit=128 [ 353.248712][ T58] kworker/u8:4: attempt to access beyond end of device [ 353.248712][ T58] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 353.263448][ T58] kworker/u8:4: attempt to access beyond end of device [ 353.263448][ T58] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 353.277468][ T58] kworker/u8:4: attempt to access beyond end of device [ 353.277468][ T58] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 353.291383][ T58] kworker/u8:4: attempt to access beyond end of device [ 353.291383][ T58] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 353.305454][ T58] kworker/u8:4: attempt to access beyond end of device [ 353.305454][ T58] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 353.319633][ T58] kworker/u8:4: attempt to access beyond end of device [ 353.319633][ T58] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 353.333463][ T58] kworker/u8:4: attempt to access beyond end of device [ 353.333463][ T58] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 353.347452][ T58] kworker/u8:4: attempt to access beyond end of device [ 353.347452][ T58] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 353.362033][ T58] kworker/u8:4: attempt to access beyond end of device [ 353.362033][ T58] loop2: rw=1, sector=321, nr_sectors = 8 limit=128 [ 353.756358][T10612] kernel write not supported for file bpf-prog (pid: 10612 comm: kworker/0:12) [ 355.236876][T22516] set_capacity_and_notify: 1 callbacks suppressed [ 355.236948][T22516] loop2: detected capacity change from 0 to 128 [ 355.468573][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 355.468589][ T28] audit: type=1326 audit(2000000243.587:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 355.503140][ T28] audit: type=1326 audit(2000000243.587:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 355.528810][ T28] audit: type=1326 audit(2000000243.587:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 355.552877][ T28] audit: type=1326 audit(2000000243.587:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 355.601424][ T28] audit: type=1326 audit(2000000243.587:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 355.627007][ T28] audit: type=1326 audit(2000000243.587:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 355.655752][ T28] audit: type=1326 audit(2000000243.587:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 355.714223][ T28] audit: type=1326 audit(2000000243.587:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 355.742529][ T28] audit: type=1326 audit(2000000243.587:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 355.767274][ T28] audit: type=1326 audit(2000000243.587:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22529 comm="syz.9.7477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8744a9c799 code=0x7ffc0000 [ 355.839289][T22547] netlink: 'syz.9.7484': attribute type 1 has an invalid length. [ 355.853794][T22547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.205506][T22435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.558863][T22592] loop6: detected capacity change from 0 to 512 [ 356.575153][T22592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 356.588072][T22592] ext4 filesystem being mounted at /1145/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.614426][T22592] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7502'. [ 356.623782][T22592] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7502'. [ 356.662475][ T8098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 357.159928][T22631] netlink: 199828 bytes leftover after parsing attributes in process `syz.8.7518'. [ 358.233636][ T58] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.260540][ T58] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.342875][ T58] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.363518][ T58] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.400951][T22687] loop2: detected capacity change from 0 to 512 [ 358.423126][ T58] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.440220][T22687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.456973][ T58] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.467441][T22687] ext4 filesystem being mounted at /406/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.550672][ T58] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.564494][ T58] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.661957][T18029] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.708715][T22704] netlink: 'syz.2.7547': attribute type 10 has an invalid length. [ 358.755907][T22705] netlink: 'syz.2.7547': attribute type 10 has an invalid length. [ 358.787871][T22704] team0: Port device dummy0 added [ 358.815163][T22705] team0: Port device dummy0 removed [ 358.825095][T22705] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 358.878321][ T58] vlan2: left promiscuous mode [ 358.903644][ T58] dummy0: left promiscuous mode [ 358.908902][ T58] bridge0: port 3(vlan2) entered disabled state [ 359.007206][ T58] bridge_slave_1: left allmulticast mode [ 359.024004][ T58] bridge_slave_1: left promiscuous mode [ 359.031874][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.050532][ T58] bridge_slave_0: left allmulticast mode [ 359.071550][ T58] bridge_slave_0: left promiscuous mode [ 359.077402][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.394629][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.405538][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.416253][ T58] bond0 (unregistering): Released all slaves [ 359.511907][ T58] IPVS: stopping master sync thread 13853 ... [ 359.523003][T22682] chnl_net:caif_netlink_parms(): no params data found [ 359.548878][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.567937][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.591355][ T58] veth1_vlan: left promiscuous mode [ 359.602927][ T58] veth0_vlan: left promiscuous mode [ 359.783822][T22682] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.791110][T22682] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.798728][T22682] bridge_slave_0: entered allmulticast mode [ 359.806345][T22682] bridge_slave_0: entered promiscuous mode [ 359.819384][T22682] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.841589][T22682] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.851900][T22682] bridge_slave_1: entered allmulticast mode [ 359.858701][T22682] bridge_slave_1: entered promiscuous mode [ 359.906601][T22682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.927676][T22682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.974343][T22682] team0: Port device team_slave_0 added [ 359.984138][T22682] team0: Port device team_slave_1 added [ 360.006309][ T58] IPVS: stop unused estimator thread 0... [ 360.064980][T22682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.073537][T22682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.100245][T22682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.115163][T22682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.132797][T22682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.178684][T22682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.252516][T22682] hsr_slave_0: entered promiscuous mode [ 360.263571][T22784] TCP: TCP_TX_DELAY enabled [ 360.269971][T22682] hsr_slave_1: entered promiscuous mode [ 360.448809][T22804] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7568'. [ 360.973176][T22682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.000867][T22682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.038285][T22682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 361.072886][T22682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.349056][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 361.349073][ T28] audit: type=1326 audit(2000000249.457:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.8.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 361.369761][T22682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.434626][ T28] audit: type=1326 audit(2000000249.457:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.8.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 361.486838][T22682] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.532192][ T28] audit: type=1326 audit(2000000249.477:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22888 comm="syz.2.7589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 361.572915][T16398] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.580298][T16398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.630812][T22903] dvmrp0: entered allmulticast mode [ 361.656150][T16398] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.663744][T16398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.691587][ T28] audit: type=1326 audit(2000000249.477:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22888 comm="syz.2.7589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 361.771656][ T28] audit: type=1326 audit(2000000249.507:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22888 comm="syz.2.7589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 361.831575][T22918] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 361.856689][ T28] audit: type=1326 audit(2000000249.507:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22888 comm="syz.2.7589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ab454c799 code=0x7ffc0000 [ 361.887441][T22918] SELinux: failed to load policy [ 361.935546][ T28] audit: type=1326 audit(2000000249.507:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.8.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 361.998862][T22936] pimreg: entered allmulticast mode [ 362.024212][ T28] audit: type=1326 audit(2000000249.507:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.8.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 362.096003][ T28] audit: type=1326 audit(2000000249.507:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.8.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 362.097015][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7604'. [ 362.187767][ T28] audit: type=1326 audit(2000000249.507:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.8.7588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f03cc39c799 code=0x7ffc0000 [ 362.221678][T22948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7604'. [ 362.242668][T22948] netlink: 'syz.1.7604': attribute type 6 has an invalid length. [ 362.262303][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7604'. [ 362.277009][T22682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.297356][T22948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7604'. [ 362.345291][T22948] netlink: 'syz.1.7604': attribute type 6 has an invalid length. [ 362.740655][T22682] veth0_vlan: entered promiscuous mode [ 362.815168][T22682] veth1_vlan: entered promiscuous mode [ 362.951503][T22682] veth0_macvtap: entered promiscuous mode [ 363.003818][T22682] veth1_macvtap: entered promiscuous mode [ 363.077608][T22682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.096525][T22993] netlink: 'syz.1.7614': attribute type 7 has an invalid length. [ 363.176219][T22993] netlink: 'syz.1.7614': attribute type 7 has an invalid length. [ 363.188363][T22682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.253643][T20275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.302442][T23010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.311269][T23010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.322728][T20275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.369185][T20275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.409368][T20275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.600813][T10611] IPVS: starting estimator thread 0... [ 363.691696][T23039] IPVS: using max 2304 ests per chain, 115200 per kthread [ 364.891957][T23171] loop9: detected capacity change from 0 to 512 [ 364.938590][T23171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.987344][T23171] ext4 filesystem being mounted at /633/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.089133][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.223968][T23189] netlink: 84 bytes leftover after parsing attributes in process `syz.9.7658'. [ 365.635594][T23232] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 365.928728][T23258] syz_tun: left allmulticast mode [ 365.952224][T23258] syz_tun: left promiscuous mode [ 365.965084][T23258] bridge0: port 3(syz_tun) entered disabled state [ 365.982950][T23261] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7674'. [ 366.001561][T23258] bond0: (slave dummy0): Releasing backup interface [ 366.028613][T23258] bridge_slave_0: left allmulticast mode [ 366.038533][T23258] bridge_slave_0: left promiscuous mode [ 366.062551][T23258] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.081270][T23258] bridge_slave_1: left allmulticast mode [ 366.087317][T23258] bridge_slave_1: left promiscuous mode [ 366.098517][T23258] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.106912][T23266] xt_hashlimit: size too large, truncated to 1048576 [ 366.115619][T23258] bond0: (slave bond_slave_0): Releasing backup interface [ 366.133566][T23258] bond0: (slave bond_slave_1): Releasing backup interface [ 366.153270][T23258] team0: Port device team_slave_0 removed [ 366.171843][T23258] team0: Port device team_slave_1 removed [ 366.188786][T23258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.212054][T23258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.863621][T23288] loop9: detected capacity change from 0 to 128 [ 367.164837][T23306] syz_tun: left allmulticast mode [ 367.170018][T23306] syz_tun: left promiscuous mode [ 367.198281][T23306] bridge0: port 3(syz_tun) entered disabled state [ 367.226473][T23306] bridge_slave_0: left allmulticast mode [ 367.242519][T23306] bridge_slave_0: left promiscuous mode [ 367.248414][T23306] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.263027][T23306] bridge_slave_1: left allmulticast mode [ 367.268847][T23306] bridge_slave_1: left promiscuous mode [ 367.291770][T23306] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.311855][T23306] bond0: (slave bond_slave_0): Releasing backup interface [ 367.331878][T23306] bond0: (slave bond_slave_1): Releasing backup interface [ 367.353162][T23306] team0: Port device team_slave_0 removed [ 367.360480][T23306] team0: Port device team_slave_1 removed [ 367.369060][T23306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.377261][T23306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.411606][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 367.411625][ T28] audit: type=1400 audit(2000000255.507:4228): avc: denied { firmware_load } for pid=23310 comm="syz.0.7692" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 367.539625][T23319] xt_hashlimit: size too large, truncated to 1048576 [ 367.917195][T23347] team0: Port device syz_tun removed [ 367.942634][T23347] bridge0: port 1(bond0) entered disabled state [ 367.971012][T23347] batman_adv: batadv0: Removing interface: vlan2 [ 367.993023][T23347] team0: Port device bridge2 removed [ 368.305706][ T28] audit: type=1400 audit(2000000256.417:4229): avc: denied { bind } for pid=23370 comm="syz.0.7717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 368.370253][T23380] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7722'. [ 369.088954][T23396] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7727'. [ 369.129123][T23396] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 369.151434][T23396] bond3: (slave ip6gre2): Error -95 calling set_mac_address [ 369.436879][T23406] 9p: Bad value for 'rfdno' [ 369.892985][T23425] syz_tun: entered allmulticast mode [ 369.902969][T23424] syz_tun: left allmulticast mode [ 370.006031][T23433] loop8: detected capacity change from 0 to 512 [ 370.022965][T23433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.058370][T23433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.071225][T23433] ext4 filesystem being mounted at /869/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.102700][T12386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.243506][T23440] loop8: detected capacity change from 0 to 512 [ 370.826697][T23335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.924930][T23440] ================================================================== [ 370.933372][T23440] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 370.941316][T23440] [ 370.943908][T23440] write to 0xffff888100494814 of 4 bytes by task 23447 on cpu 1: [ 370.951746][T23440] xas_set_mark+0x12b/0x140 [ 370.957422][T23440] __folio_start_writeback+0x17b/0x370 [ 370.963068][T23440] mpage_writepages+0xd5e/0x1310 [ 370.968244][T23440] fat_writepages+0x24/0x30 [ 370.972896][T23440] do_writepages+0x1c6/0x310 [ 370.977719][T23440] file_write_and_wait_range+0x178/0x2f0 [ 370.983492][T23440] __generic_file_fsync+0x46/0x160 [ 370.988834][T23440] fat_file_fsync+0x49/0x100 [ 370.993631][T23440] vfs_fsync_range+0xc5/0xe0 [ 370.998737][T23440] generic_file_write_iter+0x1ba/0x310 [ 371.004258][T23440] iter_file_splice_write+0x6c4/0xa80 [ 371.009859][T23440] direct_splice_actor+0x156/0x2a0 [ 371.015283][T23440] splice_direct_to_actor+0x311/0x670 [ 371.020695][T23440] do_splice_direct+0x119/0x1a0 [ 371.025619][T23440] do_sendfile+0x382/0x650 [ 371.030123][T23440] __x64_sys_sendfile64+0x105/0x150 [ 371.035362][T23440] x64_sys_call+0x2dc4/0x3020 [ 371.040197][T23440] do_syscall_64+0x12c/0x370 [ 371.044873][T23440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.050974][T23440] [ 371.053498][T23440] read to 0xffff888100494814 of 4 bytes by task 23440 on cpu 0: [ 371.061233][T23440] xas_find_marked+0x5d7/0x620 [ 371.066050][T23440] filemap_get_folios_tag+0xfa/0x510 [ 371.071565][T23440] writeback_iter+0x4bb/0x830 [ 371.076550][T23440] mpage_writepages+0x87/0x1310 [ 371.081582][T23440] fat_writepages+0x24/0x30 [ 371.086233][T23440] do_writepages+0x1c6/0x310 [ 371.091063][T23440] file_write_and_wait_range+0x178/0x2f0 [ 371.096940][T23440] __generic_file_fsync+0x46/0x160 [ 371.102203][T23440] fat_file_fsync+0x49/0x100 [ 371.106909][T23440] vfs_fsync_range+0xc5/0xe0 [ 371.112244][T23440] generic_file_write_iter+0x1ba/0x310 [ 371.118100][T23440] iter_file_splice_write+0x6c4/0xa80 [ 371.123525][T23440] direct_splice_actor+0x156/0x2a0 [ 371.128797][T23440] splice_direct_to_actor+0x311/0x670 [ 371.134296][T23440] do_splice_direct+0x119/0x1a0 [ 371.139351][T23440] do_sendfile+0x382/0x650 [ 371.144202][T23440] __x64_sys_sendfile64+0x105/0x150 [ 371.149708][T23440] x64_sys_call+0x2dc4/0x3020 [ 371.154545][T23440] do_syscall_64+0x12c/0x370 [ 371.159254][T23440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.165349][T23440] [ 371.167783][T23440] value changed: 0x0a000021 -> 0x00000021 [ 371.174034][T23440] [ 371.176385][T23440] Reported by Kernel Concurrency Sanitizer on: [ 371.182769][T23440] CPU: 0 UID: 0 PID: 23440 Comm: syz.8.7755 Tainted: G W syzkaller #0 PREEMPT(full) [ 371.193927][T23440] Tainted: [W]=WARN [ 371.197839][T23440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.208537][T23440] ==================================================================