last executing test programs: 2m4.482699451s ago: executing program 0 (id=20): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x26}, 0x0, 0x6, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m3.62606913s ago: executing program 0 (id=34): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m2.74807792s ago: executing program 0 (id=45): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x0) 2m2.694124722s ago: executing program 0 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_rdma(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x20000, 0x0) 2m2.650954624s ago: executing program 0 (id=50): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) write$ppp(r1, &(0x7f00000004c0)="33bb9060f8", 0x5) 2m2.363626904s ago: executing program 0 (id=55): pipe(&(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 2m2.317815305s ago: executing program 32 (id=55): pipe(&(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 1m43.043867269s ago: executing program 2 (id=446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010f2b3a4ba0100aaaaaaaaaabb86dd6917007e00482cfffc020000000000000000000000000006ff020000000000000000000000000001000700000000000001"], 0x82) 1m42.892399905s ago: executing program 2 (id=452): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m42.590128065s ago: executing program 2 (id=459): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r3, r3) setresuid(r1, r3, 0x0) 1m42.546289736s ago: executing program 2 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40000, 0x0) 1m42.486303789s ago: executing program 2 (id=462): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808b", 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 1m42.055673244s ago: executing program 2 (id=473): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x20, 0x0) shutdown(r0, 0x1) 1m42.055536874s ago: executing program 33 (id=473): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x20, 0x0) shutdown(r0, 0x1) 1m14.329420899s ago: executing program 1 (id=1060): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x3}], 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0x6}, 0x8) 1m13.469452648s ago: executing program 1 (id=1083): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@deltfilter={0x103c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1004, 0x2, [@TCA_CGROUP_ACT={0x1000, 0x1, [@m_connmark={0xe0, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}]}, {0x1d, 0x6, "091574d9000173335e5beb79fe5c3f08f569883f9e847a92ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x48, 0xf, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cb, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x40, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x103c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m13.388572201s ago: executing program 1 (id=1085): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}}, 0x4) 1m13.340965503s ago: executing program 1 (id=1088): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m13.295921444s ago: executing program 1 (id=1091): r0 = socket$inet6(0xa, 0x1, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e19, 0x80000, @empty, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0xfe}}}}], 0x28}, 0x4000000) 1m13.040352693s ago: executing program 1 (id=1095): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x40044}}], 0x1, 0x4014) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r5, 0x0, 0x39000, 0x0) 1m13.040193993s ago: executing program 34 (id=1095): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x40044}}], 0x1, 0x4014) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r5, 0x0, 0x39000, 0x0) 49.128081627s ago: executing program 3 (id=1539): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000032090000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000007c0500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) 48.402639862s ago: executing program 3 (id=1549): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 48.16448583s ago: executing program 3 (id=1570): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@deltfilter={0x103c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1004, 0x2, [@TCA_CGROUP_ACT={0x1000, 0x1, [@m_connmark={0xe0, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}]}, {0x1d, 0x6, "091574d9000173335e5beb79fe5c3f08f569883f9e847a92ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x48, 0xf, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cb, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x40, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x103c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 48.117791692s ago: executing program 3 (id=1572): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 48.028674725s ago: executing program 3 (id=1563): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000094, &(0x7f0000001a00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c396cae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d8d00000000000000c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2e098d82fde6dba5614d96565c673f893729377685a896ee02018f5d0f83d7f921f9712c8702d305c8c91cbfe1493e8598d611be62863fa02b88e886240514fc8d2d62f72dac126481ef08ca8eaf6de", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eea7304df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x33, 0x0, &(0x7f0000000100)=0xfffffffffffffcf8) 47.89381156s ago: executing program 3 (id=1567): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) 47.87615078s ago: executing program 35 (id=1567): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) 43.514653381s ago: executing program 5 (id=1629): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) clock_gettime(0x0, &(0x7f0000000100)) ppoll(&(0x7f0000000240)=[{r0, 0x400}], 0x1, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) 42.637087081s ago: executing program 5 (id=1647): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) close(r0) 42.593246152s ago: executing program 5 (id=1648): r0 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='fdinfo/3\x00') 42.522921754s ago: executing program 5 (id=1650): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 42.448686888s ago: executing program 5 (id=1654): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 42.310490912s ago: executing program 5 (id=1655): r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 42.267670083s ago: executing program 36 (id=1655): r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.777200599s ago: executing program 4 (id=2386): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000001c0)={0x77359400}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x7a}, 0x0) sendmmsg$unix(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x24048080) 1.667676532s ago: executing program 4 (id=2390): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006a00010026bd7000fbdbdf0000000000000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.587297705s ago: executing program 8 (id=2394): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.586926135s ago: executing program 4 (id=2395): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.489912249s ago: executing program 8 (id=2398): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201001c00128009000100626f6e64000000000c00028008000a00ac"], 0x3c}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.347339614s ago: executing program 8 (id=2400): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 1.290668845s ago: executing program 8 (id=2402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004340)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2a, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xffe0}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24041884}, 0x4880) 1.244940717s ago: executing program 8 (id=2405): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0xa220480, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 743.839844ms ago: executing program 7 (id=2406): kexec_load(0xfffffffffffffffb, 0x1, &(0x7f0000002400)=[{&(0x7f0000000340)="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", 0x1ed, 0x0, 0x204}], 0x30000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private=0xa010101, @in=@remote, 0x0, 0x7, 0x0, 0x843, 0x2}, {0x0, 0x1}, {0xfffffffffffffffc, 0x7fffffffffd, 0x4, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@private, 0x1, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1001}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 743.743494ms ago: executing program 6 (id=2407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200000000310000000008000a40fffffffc08000340000000140c000980080001400000008114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 700.803115ms ago: executing program 4 (id=2408): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x40, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3343f830}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 503.403802ms ago: executing program 4 (id=2409): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 455.994354ms ago: executing program 6 (id=2410): socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) 455.863985ms ago: executing program 4 (id=2411): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0xfc, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 440.056085ms ago: executing program 6 (id=2412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 431.330605ms ago: executing program 7 (id=2413): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b0009", 0x29}], 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 373.769597ms ago: executing program 6 (id=2414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1, 0x25, 0x4, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000cc0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @loopback, @empty}}}}}}}, 0x0) 315.121419ms ago: executing program 7 (id=2416): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 308.648849ms ago: executing program 6 (id=2417): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(r0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 276.82906ms ago: executing program 7 (id=2418): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) 276.73683ms ago: executing program 8 (id=2419): socket(0xa, 0x5, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfdff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r0, &(0x7f00000088c0)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002700)="ab", 0x1}, {0x0, 0x500}], 0x2}}], 0x1, 0x4040000) 247.429301ms ago: executing program 7 (id=2420): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x16a) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x41) fcntl$notify(r0, 0x402, 0x8000002d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 201.978513ms ago: executing program 9 (id=2421): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 201.559643ms ago: executing program 6 (id=2422): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x9, 0x1, [0x70]}, 0xa) 199.509523ms ago: executing program 7 (id=2424): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 170.726714ms ago: executing program 9 (id=2425): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 107.980966ms ago: executing program 9 (id=2426): sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x810, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 85.555157ms ago: executing program 9 (id=2427): unshare(0x22020400) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa06ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x1d1842, 0x6c) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000000), 0x4) 63.431028ms ago: executing program 9 (id=2428): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000480)=@req3={0x3, 0xb, 0x7fff, 0x100, 0x1ff, 0x0, 0x1000}, 0x1c) 0s ago: executing program 9 (id=2429): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) kernel console output (not intermixed with test programs): 9][ T6374] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.626303][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.701123][ T6407] syzkaller1: entered promiscuous mode [ 86.715833][ T6407] syzkaller1: entered allmulticast mode [ 86.778398][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 87.015932][ T6432] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1011'. [ 87.169752][ T6434] netlink: 'syz.3.1010': attribute type 10 has an invalid length. [ 87.177767][ T6434] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1010'. [ 87.187085][ T6434] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 87.499349][ T6454] xt_hashlimit: size too large, truncated to 1048576 [ 87.861602][ T6484] netlink: 'syz.3.1034': attribute type 9 has an invalid length. [ 87.870071][ T6484] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1034'. [ 87.978853][ T6502] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.990955][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b904a00: rx timeout, send abort [ 87.999579][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b904a00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 88.016409][ T6502] bond2: (slave lo): Enslaving as an active interface with an up link [ 88.025231][ T6502] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 88.469336][ T6534] loop1: detected capacity change from 0 to 128 [ 88.534252][ T6535] syz.1.1053: attempt to access beyond end of device [ 88.534252][ T6535] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 88.552321][ T6535] syz.1.1053: attempt to access beyond end of device [ 88.552321][ T6535] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 88.566543][ T6535] syz.1.1053: attempt to access beyond end of device [ 88.566543][ T6535] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 88.580496][ T6535] syz.1.1053: attempt to access beyond end of device [ 88.580496][ T6535] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 88.604184][ T6535] syz.1.1053: attempt to access beyond end of device [ 88.604184][ T6535] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 88.620856][ T6539] loop3: detected capacity change from 0 to 128 [ 88.637677][ T6535] syz.1.1053: attempt to access beyond end of device [ 88.637677][ T6535] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 88.652002][ T6535] syz.1.1053: attempt to access beyond end of device [ 88.652002][ T6535] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 88.667215][ T6535] syz.1.1053: attempt to access beyond end of device [ 88.667215][ T6535] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 88.688634][ T6535] syz.1.1053: attempt to access beyond end of device [ 88.688634][ T6535] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 88.702895][ T6535] syz.1.1053: attempt to access beyond end of device [ 88.702895][ T6535] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 89.364809][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 89.364828][ T28] audit: type=1400 audit(1775126149.752:1727): avc: denied { getopt } for pid=6582 comm="syz.6.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.523170][ T6591] netlink: 'syz.3.1078': attribute type 4 has an invalid length. [ 89.665173][ T6604] netlink: 'syz.3.1082': attribute type 10 has an invalid length. [ 89.684950][ T6604] team0: Port device dummy0 added [ 89.700133][ T6604] netlink: 'syz.3.1082': attribute type 10 has an invalid length. [ 89.728251][ T6604] team0: Port device dummy0 removed [ 89.735428][ T6604] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.805717][ T6618] tipc: Started in network mode [ 89.818692][ T6618] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 89.828597][ T6618] tipc: Enabling of bearer rejected, failed to enable media [ 89.970843][ T28] audit: type=1326 audit(1775126150.352:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 90.022983][ T3607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.034824][ T28] audit: type=1326 audit(1775126150.352:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 90.059281][ T28] audit: type=1326 audit(1775126150.352:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 90.095332][ T28] audit: type=1326 audit(1775126150.352:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 90.127940][ T3607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.139908][ T28] audit: type=1326 audit(1775126150.352:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 90.174191][ T28] audit: type=1326 audit(1775126150.352:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 90.198602][ T28] audit: type=1326 audit(1775126150.352:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 90.229179][ T28] audit: type=1326 audit(1775126150.352:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.1094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 90.269501][ T3607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.319157][ T3607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.332074][ T6639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.391561][ T28] audit: type=1400 audit(1775126150.772:1736): avc: denied { write } for pid=6657 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.442093][ T6634] chnl_net:caif_netlink_parms(): no params data found [ 90.500337][ T3607] bridge_slave_1: left allmulticast mode [ 90.508242][ T3607] bridge_slave_1: left promiscuous mode [ 90.531313][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.564574][ T3607] bridge_slave_0: left allmulticast mode [ 90.582300][ T3607] bridge_slave_0: left promiscuous mode [ 90.608007][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.765175][ T3607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.863313][ T3607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.893537][ T3607] bond0 (unregistering): Released all slaves [ 90.960203][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.977861][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.002234][ T6634] bridge_slave_0: entered allmulticast mode [ 91.013269][ T6634] bridge_slave_0: entered promiscuous mode [ 91.029807][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.037193][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.060058][ T6634] bridge_slave_1: entered allmulticast mode [ 91.084023][ T6634] bridge_slave_1: entered promiscuous mode [ 91.110688][ T3607] hsr_slave_0: left promiscuous mode [ 91.259827][ T3607] hsr_slave_1: left promiscuous mode [ 91.270975][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.281945][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.301810][ T6716] loop3: detected capacity change from 0 to 256 [ 91.310434][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.323445][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.367854][ T3607] veth1_macvtap: left promiscuous mode [ 91.377754][ T3607] veth0_macvtap: left promiscuous mode [ 91.386627][ T3607] veth1_vlan: left promiscuous mode [ 91.393477][ T3607] veth0_vlan: left promiscuous mode [ 91.475804][ T6732] loop5: detected capacity change from 0 to 512 [ 91.494512][ T6732] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1121: invalid indirect mapped block 256 (level 2) [ 91.562707][ T6732] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 91.564069][ T6732] EXT4-fs (loop5): 2 truncates cleaned up [ 91.573991][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 91.574016][ C1] EXT4-fs (loop5): initial error at time 1775126151: ext4_free_branches:1023: inode 11 [ 91.574054][ C1] EXT4-fs (loop5): last error at time 1775126151: ext4_free_branches:1023: inode 11 [ 91.610083][ T6732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.624353][ T3607] team0 (unregistering): Port device team_slave_1 removed [ 91.635531][ T6732] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1121: bg 0: block 5: invalid block bitmap [ 91.651570][ T3607] team0 (unregistering): Port device team_slave_0 removed [ 91.660228][ T6732] EXT4-fs error (device loop5) in ext4_setattr:6028: error 28 [ 91.706021][ T6720] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 91.714634][ T6720] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.744828][ T6634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.757946][ T3686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.801700][ T6634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.889764][ T6634] team0: Port device team_slave_0 added [ 91.901402][ T6634] team0: Port device team_slave_1 added [ 91.919432][ T6753] dvmrp0: entered allmulticast mode [ 91.948946][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.962779][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.990896][ T6634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.006743][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.015202][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.041893][ T6634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.130868][ T6634] hsr_slave_0: entered promiscuous mode [ 92.146899][ T6634] hsr_slave_1: entered promiscuous mode [ 92.159768][ T6634] debugfs: 'hsr0' already exists in 'hsr' [ 92.173420][ T6634] Cannot create hsr debugfs directory [ 92.272305][ T6789] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1134'. [ 92.471448][ T6634] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 92.515295][ T6634] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 92.524051][ T35] IPVS: starting estimator thread 0... [ 92.533542][ T6634] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 92.554494][ T6634] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 92.627904][ T6634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.643883][ T6808] IPVS: using max 2544 ests per chain, 127200 per kthread [ 92.645185][ T6634] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.666585][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.673728][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.710165][ T2097] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.717483][ T2097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.727791][ T6830] loop5: detected capacity change from 0 to 512 [ 92.747309][ T6830] EXT4-fs: Ignoring removed nobh option [ 92.755745][ T6830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.775920][ T6830] EXT4-fs (loop5): 1 truncate cleaned up [ 92.785108][ T6830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.839476][ T3686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.875239][ T6634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.081352][ T6634] veth0_vlan: entered promiscuous mode [ 93.093380][ T6634] veth1_vlan: entered promiscuous mode [ 93.121909][ T6634] veth0_macvtap: entered promiscuous mode [ 93.147010][ T6634] veth1_macvtap: entered promiscuous mode [ 93.209798][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.229641][ T6634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.240969][ T3584] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.250117][ T3584] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.271418][ T3584] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.286681][ T3584] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.072525][ T6928] loop3: detected capacity change from 0 to 32768 [ 94.148667][ T6939] loop4: detected capacity change from 0 to 512 [ 94.193157][ T6939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.242844][ T6939] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.496670][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.543469][ T3302] loop3: p1 p3 < > [ 94.570301][ T6928] loop3: p1 p3 < > [ 94.594568][ T6947] Invalid argument reading file caps for ./file0 [ 94.775887][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 94.775991][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 94.809578][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 94.812995][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 94.851295][ T6969] loop4: detected capacity change from 0 to 2048 [ 94.895162][ T6969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.907849][ T6969] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.931395][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.142922][ T6981] loop4: detected capacity change from 0 to 512 [ 95.150036][ T6981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.160785][ T6981] EXT4-fs (loop4): 1 truncate cleaned up [ 95.167158][ T6981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.191837][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.602267][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 95.602336][ T28] audit: type=1400 audit(1775126155.982:1751): avc: denied { bind } for pid=7006 comm="syz.3.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.407461][ T28] audit: type=1400 audit(1775126156.792:1752): avc: denied { create } for pid=7022 comm="syz.4.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.428922][ T28] audit: type=1400 audit(1775126156.812:1753): avc: denied { write } for pid=7022 comm="syz.4.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.474367][ T6898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.538046][ T7037] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.1220'. [ 96.538092][ T7036] loop3: detected capacity change from 0 to 512 [ 96.558289][ T7036] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.583682][ T7036] EXT4-fs (loop3): 1 orphan inode deleted [ 96.589445][ T7036] EXT4-fs (loop3): 1 truncate cleaned up [ 96.603199][ T7044] loop4: detected capacity change from 0 to 128 [ 96.634846][ T7044] EXT4-fs: Ignoring removed bh option [ 96.641007][ T7036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.674013][ T7044] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.686547][ T7044] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.688277][ T28] audit: type=1326 audit(1775126157.072:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 96.724585][ T28] audit: type=1326 audit(1775126157.072:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 96.749477][ T28] audit: type=1326 audit(1775126157.072:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 96.753562][ T7036] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.1218: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 96.773403][ T28] audit: type=1326 audit(1775126157.072:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 96.816537][ T28] audit: type=1326 audit(1775126157.072:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 96.853466][ T28] audit: type=1326 audit(1775126157.072:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 96.878208][ T7036] EXT4-fs (loop3): Remounting filesystem read-only [ 96.909051][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.919153][ T28] audit: type=1326 audit(1775126157.112:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.3.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814ac1c819 code=0x7ffc0000 [ 96.948196][ T7062] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1231'. [ 96.979721][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.127878][ T7083] loop7: detected capacity change from 0 to 1024 [ 97.138097][ T7086] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1240'. [ 97.168969][ T7083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.225582][ T7083] EXT4-fs (loop7): shut down requested (0) [ 97.291602][ T6634] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.471764][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1255'. [ 97.585923][ T43] Bluetooth: hci0: sending frame failed (-49) [ 97.592435][ T3525] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 98.589895][ T7166] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 98.614263][ T7166] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 99.282038][ T7228] loop7: detected capacity change from 0 to 512 [ 99.324410][ T7228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.343800][ T7228] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.458409][ T6634] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.473721][ T7240] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.533148][ T7246] loop7: detected capacity change from 0 to 512 [ 99.550327][ T7246] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.562101][ T7246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.574120][ T7240] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.596132][ T7246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.608879][ T7246] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.626395][ T7240] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.653342][ T6634] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.690565][ T7240] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.701121][ T7252] loop7: detected capacity change from 0 to 2048 [ 99.734602][ T7252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.770788][ T3584] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.783194][ T3584] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.796114][ T3584] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.807287][ T6634] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.808545][ T3584] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.257514][ T7287] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.1318'. [ 100.324414][ T7291] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.333095][ T7293] loop3: detected capacity change from 0 to 256 [ 100.351772][ T7293] FAT-fs (loop3): bogus number of FAT sectors [ 100.360068][ T7293] FAT-fs (loop3): Can't find a valid FAT filesystem [ 100.381853][ T7297] loop5: detected capacity change from 0 to 2048 [ 100.411558][ T7297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.426058][ T7291] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.479847][ T7291] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.496065][ T3686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.536862][ T7291] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.599313][ T3607] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.612273][ T3607] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.630963][ T3607] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.640330][ T3607] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.926110][ T7321] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.1332'. [ 101.015582][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1333'. [ 101.117595][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1337'. [ 101.141039][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1337'. [ 101.179703][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1337'. [ 101.210241][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1337'. [ 101.426739][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 101.426756][ T28] audit: type=1400 audit(1775126161.812:1788): avc: denied { ioctl } for pid=7341 comm="syz.3.1342" path="socket:[17999]" dev="sockfs" ino=17999 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.537805][ T7308] kexec: Could not allocate control_code_buffer [ 101.703769][ T3584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.786737][ T3584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.856203][ T3584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.946979][ T3584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.996674][ T7358] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.1347'. [ 102.119656][ T3584] bridge_slave_1: left allmulticast mode [ 102.137609][ T3584] bridge_slave_1: left promiscuous mode [ 102.189771][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.200594][ T3584] bridge_slave_0: left allmulticast mode [ 102.206657][ T3584] bridge_slave_0: left promiscuous mode [ 102.212380][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.221676][ T28] audit: type=1400 audit(1775126162.612:1789): avc: denied { bind } for pid=7367 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.242436][ T28] audit: type=1400 audit(1775126162.612:1790): avc: denied { listen } for pid=7367 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.265215][ T28] audit: type=1400 audit(1775126162.612:1791): avc: denied { accept } for pid=7367 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.425496][ T28] audit: type=1400 audit(1775126162.812:1792): avc: denied { create } for pid=7379 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.466869][ T28] audit: type=1400 audit(1775126162.832:1793): avc: denied { bind } for pid=7379 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.486727][ T28] audit: type=1400 audit(1775126162.832:1794): avc: denied { connect } for pid=7379 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.527865][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.538342][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.556229][ T3584] bond0 (unregistering): Released all slaves [ 102.578156][ T7348] chnl_net:caif_netlink_parms(): no params data found [ 102.621909][ T3584] hsr_slave_0: left promiscuous mode [ 102.634064][ T3584] hsr_slave_1: left promiscuous mode [ 102.639921][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.649319][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.660942][ T3584] veth1_macvtap: left promiscuous mode [ 102.666933][ T3584] veth0_macvtap: left promiscuous mode [ 102.673206][ T3584] veth1_vlan: left promiscuous mode [ 102.678718][ T3584] veth0_vlan: left promiscuous mode [ 102.790689][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 102.802513][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 102.900495][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1362'. [ 102.940767][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.948030][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.955809][ T7348] bridge_slave_0: entered allmulticast mode [ 102.962813][ T7348] bridge_slave_0: entered promiscuous mode [ 102.969677][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.976944][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.987215][ T7348] bridge_slave_1: entered allmulticast mode [ 103.005010][ T7348] bridge_slave_1: entered promiscuous mode [ 103.018086][ T28] audit: type=1400 audit(1775126163.402:1795): avc: denied { accept } for pid=7410 comm="syz.5.1364" path="socket:[18182]" dev="sockfs" ino=18182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.028129][ T7348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.058743][ T7348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.094980][ T7348] team0: Port device team_slave_0 added [ 103.115024][ T7348] team0: Port device team_slave_1 added [ 103.191212][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.209144][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.256196][ T7348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.270652][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.278744][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.322888][ T7348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.384858][ T7348] hsr_slave_0: entered promiscuous mode [ 103.391182][ T7348] hsr_slave_1: entered promiscuous mode [ 103.402935][ T7348] debugfs: 'hsr0' already exists in 'hsr' [ 103.408780][ T7348] Cannot create hsr debugfs directory [ 104.033434][ T7348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.055439][ T7348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.064815][ T7348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.084049][ T7348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.170026][ T28] audit: type=1400 audit(1775126164.552:1796): avc: denied { mount } for pid=7503 comm="syz.3.1372" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 104.194919][ T7348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.248138][ T7348] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.261820][ T2097] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.269073][ T2097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.288433][ T2097] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.295540][ T2097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.418670][ T7348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.500537][ T28] audit: type=1400 audit(1775126164.882:1797): avc: denied { map } for pid=7522 comm="syz.3.1379" path="socket:[19425]" dev="sockfs" ino=19425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.702318][ T7348] veth0_vlan: entered promiscuous mode [ 104.711240][ T7348] veth1_vlan: entered promiscuous mode [ 104.730056][ T7348] veth0_macvtap: entered promiscuous mode [ 104.738203][ T7348] veth1_macvtap: entered promiscuous mode [ 104.750222][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.771635][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.783153][ T3607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.792138][ T3607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.801704][ T3607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.813383][ T3607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.851081][ T7545] loop3: detected capacity change from 0 to 2048 [ 104.870873][ T7549] netlink: 'syz.4.1345': attribute type 5 has an invalid length. [ 104.886165][ T7545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.974451][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.984987][ T3607] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.054499][ T3607] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.139928][ T3607] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.202597][ T3607] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.216791][ T7573] chnl_net:caif_netlink_parms(): no params data found [ 105.253194][ T7573] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.260278][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.267590][ T7573] bridge_slave_0: entered allmulticast mode [ 105.274309][ T7573] bridge_slave_0: entered promiscuous mode [ 105.281877][ T7573] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.289692][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.296991][ T7573] bridge_slave_1: entered allmulticast mode [ 105.303671][ T7573] bridge_slave_1: entered promiscuous mode [ 105.320580][ T7573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.335923][ T7573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.366824][ T7573] team0: Port device team_slave_0 added [ 105.373752][ T7573] team0: Port device team_slave_1 added [ 105.390605][ T3607] bridge_slave_1: left allmulticast mode [ 105.396915][ T3607] bridge_slave_1: left promiscuous mode [ 105.402622][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.410681][ T3607] bridge_slave_0: left allmulticast mode [ 105.416620][ T3607] bridge_slave_0: left promiscuous mode [ 105.422366][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.515294][ T3607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.525896][ T3607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.535851][ T3607] bond0 (unregistering): Released all slaves [ 105.548762][ T7573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.555979][ T7573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.582548][ T7573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.601194][ T3607] hsr_slave_0: left promiscuous mode [ 105.608440][ T3607] hsr_slave_1: left promiscuous mode [ 105.614435][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.621947][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.629835][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.637558][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.647822][ T3607] veth1_macvtap: left promiscuous mode [ 105.653463][ T3607] veth0_macvtap: left promiscuous mode [ 105.659121][ T3607] veth1_vlan: left promiscuous mode [ 105.664421][ T3607] veth0_vlan: left promiscuous mode [ 105.727685][ T3607] team0 (unregistering): Port device team_slave_1 removed [ 105.737586][ T3607] team0 (unregistering): Port device team_slave_0 removed [ 105.769425][ T7573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.776477][ T7573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.803559][ T7573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.846147][ T7573] hsr_slave_0: entered promiscuous mode [ 105.853604][ T7573] hsr_slave_1: entered promiscuous mode [ 105.859811][ T7573] debugfs: 'hsr0' already exists in 'hsr' [ 105.882711][ T7573] Cannot create hsr debugfs directory [ 106.210505][ T7602] loop5: detected capacity change from 0 to 256 [ 106.364650][ T7602] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.522645][ T7573] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 106.540196][ T7573] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 106.561633][ T7573] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 106.579801][ T7573] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 106.667965][ T7573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.680993][ T7573] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.696674][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.704068][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.738761][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.746246][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.848193][ T7573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.948791][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1403'. [ 107.209244][ T7573] veth0_vlan: entered promiscuous mode [ 107.253353][ T7573] veth1_vlan: entered promiscuous mode [ 107.317383][ T7573] veth0_macvtap: entered promiscuous mode [ 107.344329][ T7573] veth1_macvtap: entered promiscuous mode [ 107.373819][ T7573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.395496][ T7573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.425481][ T30] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.469129][ T7603] kexec: Could not allocate control_code_buffer [ 107.496698][ T7704] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.524209][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.535415][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.552781][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.622117][ T7709] netlink: 'syz.5.1414': attribute type 2 has an invalid length. [ 107.630634][ T7709] netlink: 'syz.5.1414': attribute type 1 has an invalid length. [ 107.638711][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1414'. [ 107.714868][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.726118][ T35] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.746290][ T7724] loop7: detected capacity change from 0 to 256 [ 107.765885][ T7724] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.780253][ T7724] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2048) [ 107.807414][ T7724] FAT-fs (loop7): Filesystem has been set read-only [ 107.819212][ T7724] FAT-fs (loop7): error, invalid FAT chain (i_pos 196, last_block 8200) [ 107.856423][ T7704] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.948966][ T7704] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.989458][ T7704] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.994684][ T906] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 108.014390][ T906] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.111929][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1425'. [ 108.178889][ T3566] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.219700][ T3566] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.238772][ T3582] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.247780][ T3582] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.263880][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1428'. [ 108.320164][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1429'. [ 109.901350][ T7767] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1444'. [ 109.976120][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.983451][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.028558][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.039054][ T7765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.133718][ T7772] netlink: 'syz.3.1438': attribute type 2 has an invalid length. [ 110.141879][ T7772] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 110.152970][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 110.174422][ T3582] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.192735][ T3582] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.220699][ T3582] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.240616][ T3582] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.331482][ T7782] loop3: detected capacity change from 0 to 2048 [ 110.346387][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 110.346403][ T28] audit: type=1326 audit(1775126170.732:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.6.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff057f9c819 code=0x7ffc0000 [ 110.353069][ T7782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.467097][ T28] audit: type=1326 audit(1775126170.732:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.6.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff057f9c819 code=0x7ffc0000 [ 110.501499][ T28] audit: type=1326 audit(1775126170.732:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.6.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff057f9c819 code=0x7ffc0000 [ 110.547060][ T28] audit: type=1326 audit(1775126170.732:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.6.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff057f9c819 code=0x7ffc0000 [ 110.572487][ T28] audit: type=1326 audit(1775126170.762:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.6.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff057f9c819 code=0x7ffc0000 [ 110.596736][ T7782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.609713][ T28] audit: type=1326 audit(1775126170.792:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.6.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff057f9c819 code=0x7ffc0000 [ 110.633424][ T28] audit: type=1326 audit(1775126170.792:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.6.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff057f9c582 code=0x7ffc0000 [ 110.657524][ T28] audit: type=1326 audit(1775126170.792:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.6.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff057f9c617 code=0x7ffc0000 [ 110.681942][ T28] audit: type=1326 audit(1775126170.792:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.6.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff057f59511 code=0x7ffc0000 [ 110.706263][ T28] audit: type=1326 audit(1775126170.792:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.6.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff057f9d609 code=0x7ffc0000 [ 110.856381][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.962906][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1452'. [ 110.997995][ T7811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.998727][ T7817] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 111.070831][ T7811] bond4: (slave batadv1): Opening slave failed [ 111.090064][ T7814] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 111.104385][ T7817] bond3: entered promiscuous mode [ 111.112497][ T7817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.265370][ T7820] bond3: (slave bridge1): making interface the new active one [ 111.279202][ T7820] bridge1: entered promiscuous mode [ 111.288005][ T7820] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 111.349486][ T7839] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.432619][ T7844] loop7: detected capacity change from 0 to 2048 [ 111.440296][ T7839] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.454394][ T7844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.535244][ T7839] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.556802][ T7844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.600897][ T7851] loop3: detected capacity change from 0 to 4096 [ 111.615035][ T7851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.635920][ T7839] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.643553][ T7851] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 111.696914][ T7851] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 111.728313][ T3615] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.743470][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.752678][ T3615] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.959093][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.990179][ T3582] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.001905][ T3582] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.014028][ T7865] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1474'. [ 112.085952][ T7873] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 112.561648][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'. [ 112.808836][ T7920] netlink: 'syz.6.1495': attribute type 7 has an invalid length. [ 112.835599][ T7902] netlink: 'syz.5.1489': attribute type 10 has an invalid length. [ 112.852801][ T7902] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1489'. [ 112.885240][ T7902] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 113.057049][ T7941] loop5: detected capacity change from 0 to 512 [ 113.085394][ T7941] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.127057][ T7941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.158360][ T7941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.228486][ T7941] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.292025][ T3686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.332919][ T7974] netlink: 'syz.4.1518': attribute type 9 has an invalid length. [ 113.350683][ T7974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1518'. [ 113.398288][ T7984] loop5: detected capacity change from 0 to 2048 [ 113.434798][ T7990] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 113.464952][ T7984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.482149][ T7990] bond1: (slave lo): Enslaving as an active interface with an up link [ 113.493762][ T7990] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 113.579740][ T7984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.839316][ T3686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.300488][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.307905][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.375734][ T8036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.425765][ T8036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.551533][ T2097] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.563812][ T2097] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.582634][ T2097] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.592072][ T2097] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.905387][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.913200][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.993080][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.006030][ T8073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.099030][ T3313] syz_tun (unregistering): left allmulticast mode [ 115.108841][ T3313] syz_tun (unregistering): left promiscuous mode [ 115.118817][ T3313] bridge0: port 3(syz_tun) entered disabled state [ 115.132633][ T3566] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.141906][ T3566] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.174814][ T3566] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.184501][ T8095] netlink: 'syz.4.1566': attribute type 4 has an invalid length. [ 115.196131][ T3566] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.251202][ T8100] xt_hashlimit: size too large, truncated to 1048576 [ 115.302068][ T8106] netlink: 'syz.7.1571': attribute type 10 has an invalid length. [ 115.320025][ T8106] team0: Port device dummy0 added [ 115.327837][ T8106] netlink: 'syz.7.1571': attribute type 10 has an invalid length. [ 115.337762][ T8106] team0: Port device dummy0 removed [ 115.353430][ T8106] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.474559][ T8119] tipc: Started in network mode [ 115.479785][ T8119] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 115.489009][ T8119] tipc: Enabling of bearer rejected, failed to enable media [ 115.523001][ T2097] bridge_slave_1: left allmulticast mode [ 115.533188][ T2097] bridge_slave_1: left promiscuous mode [ 115.538995][ T2097] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.547587][ T2097] bridge_slave_0: left allmulticast mode [ 115.553483][ T2097] bridge_slave_0: left promiscuous mode [ 115.559218][ T2097] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.624215][ T2097] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 115.632441][ T2097] bridge1 (unregistering): left promiscuous mode [ 115.664783][ T2097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.677251][ T2097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.687028][ T2097] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 115.699940][ T2097] bond0 (unregistering): Released all slaves [ 115.707367][ T2097] bond1 (unregistering): Released all slaves [ 115.716165][ T2097] bond2 (unregistering): (slave lo): Releasing backup interface [ 115.724243][ T2097] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 115.736134][ T2097] bond2 (unregistering): Released all slaves [ 115.744528][ T2097] bond3 (unregistering): Released all slaves [ 115.773802][ T8102] chnl_net:caif_netlink_parms(): no params data found [ 115.784127][ T2097] tipc: Left network mode [ 115.792603][ T2097] hsr_slave_0: left promiscuous mode [ 115.798624][ T2097] hsr_slave_1: left promiscuous mode [ 115.805183][ T2097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.813471][ T2097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.851719][ T2097] team0 (unregistering): Port device team_slave_1 removed [ 115.861882][ T2097] team0 (unregistering): Port device team_slave_0 removed [ 115.924895][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.932305][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.939548][ T8102] bridge_slave_0: entered allmulticast mode [ 115.946430][ T8102] bridge_slave_0: entered promiscuous mode [ 115.953940][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.961083][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.968516][ T8102] bridge_slave_1: entered allmulticast mode [ 115.975150][ T8102] bridge_slave_1: entered promiscuous mode [ 115.992273][ T8102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.003501][ T8102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.023200][ T8102] team0: Port device team_slave_0 added [ 116.030187][ T8102] team0: Port device team_slave_1 added [ 116.047709][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.055101][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.091761][ T8102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.108626][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.117748][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.144383][ T8102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.174652][ T8102] hsr_slave_0: entered promiscuous mode [ 116.181096][ T8102] hsr_slave_1: entered promiscuous mode [ 116.266852][ T8102] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 116.276549][ T8102] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 116.285662][ T8102] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 116.294951][ T8102] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 116.315264][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.322412][ T8102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.330142][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.337584][ T8102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.367618][ T8102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.380179][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.388635][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.400808][ T8102] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.411304][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.418378][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.428789][ T2097] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.435858][ T2097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.513156][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.615250][ T8102] veth0_vlan: entered promiscuous mode [ 116.623493][ T8102] veth1_vlan: entered promiscuous mode [ 116.638049][ T8102] veth0_macvtap: entered promiscuous mode [ 116.645671][ T8102] veth1_macvtap: entered promiscuous mode [ 116.657449][ T8102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.669352][ T8102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.679895][ T3607] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.689276][ T3607] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.699326][ T3607] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.708881][ T3615] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.120904][ T8254] xt_hashlimit: size too large, truncated to 1048576 [ 118.916211][ T8289] syzkaller1: entered promiscuous mode [ 118.922631][ T8289] syzkaller1: entered allmulticast mode [ 118.944574][ T8291] loop5: detected capacity change from 0 to 4096 [ 118.985141][ T8291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.029080][ T8298] loop8: detected capacity change from 0 to 512 [ 119.037590][ T8298] EXT4-fs: Ignoring removed nobh option [ 119.056063][ T8298] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 119.074742][ T3686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.075709][ T8298] EXT4-fs (loop8): 1 truncate cleaned up [ 119.114692][ T8298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.236179][ T8102] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.511065][ T8337] netlink: 'syz.4.1625': attribute type 10 has an invalid length. [ 119.535215][ T8337] team0: Port device dummy0 added [ 119.545008][ T8337] netlink: 'syz.4.1625': attribute type 10 has an invalid length. [ 119.572118][ T8337] team0: Port device dummy0 removed [ 119.585410][ T8337] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 119.685790][ T8339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.700575][ T8360] loop4: detected capacity change from 0 to 512 [ 119.709664][ T8360] EXT4-fs: Ignoring removed nobh option [ 119.725054][ T8360] ------------[ cut here ]------------ [ 119.730808][ T8360] EA inode 11 i_nlink=1026 [ 119.730826][ T8360] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.1632/8360 [ 119.746126][ T8360] Modules linked in: [ 119.750473][ T8360] CPU: 0 UID: 0 PID: 8360 Comm: syz.4.1632 Not tainted syzkaller #0 PREEMPT(full) [ 119.760031][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.770241][ T8360] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 119.777068][ T8360] Code: d4 35 99 ff 4c 8d 2d 3d a2 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf c4 dd 03 66 66 66 66 66 66 2e [ 119.796957][ T8360] RSP: 0018:ffffc900025d75a8 EFLAGS: 00010246 [ 119.803151][ T8360] RAX: ffff888104e3ac48 RBX: ffff888108719328 RCX: ffffffff81c02ad8 [ 119.811446][ T8360] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 119.819713][ T8360] RBP: 000000000000000b R08: 00018881087192db R09: 0000000000000000 [ 119.828214][ T8360] R10: ffffc900025d74d8 R11: 0001c900025d74d8 R12: ffff8881087192d8 [ 119.836301][ T8360] R13: ffffffff871dcd00 R14: ffff888108719290 R15: 0000000000000001 [ 119.844309][ T8360] FS: 00007f77b8ab66c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 119.853508][ T8360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.860271][ T8360] CR2: 00007f27d95c8060 CR3: 000000011a72c000 CR4: 00000000003506f0 [ 119.868584][ T8360] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.876852][ T8360] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 119.885105][ T8360] Call Trace: [ 119.888655][ T8360] [ 119.891635][ T8360] ext4_xattr_set_entry+0x77c/0x1010 [ 119.896986][ T8360] ext4_xattr_ibody_set+0x184/0x3c0 [ 119.902304][ T8360] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 119.908170][ T8360] __ext4_expand_extra_isize+0x246/0x280 [ 119.913858][ T8360] __ext4_mark_inode_dirty+0x29b/0x400 [ 119.919409][ T8360] ext4_evict_inode+0x865/0xe40 [ 119.924415][ T8360] ? __pfx_ext4_evict_inode+0x10/0x10 [ 119.929861][ T8360] evict+0x2af/0x510 [ 119.933803][ T8360] ? __dquot_initialize+0x146/0x7c0 [ 119.939540][ T8360] iput+0x41a/0x580 [ 119.943537][ T8360] ext4_process_orphan+0x1a9/0x1c0 [ 119.948807][ T8360] ext4_orphan_cleanup+0x6a8/0xa00 [ 119.954424][ T8360] ext4_fill_super+0x3414/0x37c0 [ 119.959521][ T8360] ? set_blocksize+0x14c/0x270 [ 119.964425][ T8360] ? setup_bdev_super+0x30e/0x370 [ 119.969617][ T8360] ? __pfx_ext4_fill_super+0x10/0x10 [ 119.974965][ T8360] get_tree_bdev_flags+0x291/0x300 [ 119.980378][ T8360] ? __pfx_ext4_fill_super+0x10/0x10 [ 119.985890][ T8360] get_tree_bdev+0x1f/0x30 [ 119.990413][ T8360] ext4_get_tree+0x1c/0x30 [ 119.994881][ T8360] vfs_get_tree+0x57/0x1d0 [ 119.999421][ T8360] do_new_mount+0x288/0x8d0 [ 120.004013][ T8360] path_mount+0x4d0/0xbc0 [ 120.008379][ T8360] __se_sys_mount+0x28c/0x2e0 [ 120.013110][ T8360] __x64_sys_mount+0x67/0x80 [ 120.017737][ T8360] x64_sys_call+0x2d61/0x3020 [ 120.022420][ T8360] do_syscall_64+0x12c/0x370 [ 120.027056][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.033011][ T8360] RIP: 0033:0x7f77ba07da8a [ 120.037530][ T8360] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.057515][ T8360] RSP: 002b:00007f77b8ab5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.066383][ T8360] RAX: ffffffffffffffda RBX: 00007f77b8ab5ee0 RCX: 00007f77ba07da8a [ 120.074549][ T8360] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f77b8ab5ea0 [ 120.082825][ T8360] RBP: 0000200000000180 R08: 00007f77b8ab5ee0 R09: 0000000000800718 [ 120.090977][ T8360] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 120.099001][ T8360] R13: 00007f77b8ab5ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 120.107032][ T8360] [ 120.110054][ T8360] ---[ end trace 0000000000000000 ]--- [ 120.116782][ T8360] EXT4-fs (loop4): 1 orphan inode deleted [ 120.123928][ T8360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.230559][ T7348] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.332903][ T8387] netlink: 'syz.6.1642': attribute type 10 has an invalid length. [ 120.394304][ T8392] netlink: 'syz.6.1642': attribute type 10 has an invalid length. [ 120.426059][ T8387] team0: Port device dummy0 added [ 120.464487][ T8392] team0: Port device dummy0 removed [ 120.482626][ T8392] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 120.629386][ T8404] loop4: detected capacity change from 0 to 4096 [ 120.667624][ T8404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.676914][ T8409] loop7: detected capacity change from 0 to 512 [ 120.740265][ T8409] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1652: invalid indirect mapped block 256 (level 2) [ 120.788637][ T8409] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.789195][ T8409] EXT4-fs (loop7): 2 truncates cleaned up [ 120.798484][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 120.798504][ C0] EXT4-fs (loop7): initial error at time 1775126181: ext4_free_branches:1023: inode 11 [ 120.798540][ C0] EXT4-fs (loop7): last error at time 1775126181: ext4_free_branches:1023: inode 11 [ 120.854664][ T7348] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.866229][ T8409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.909850][ T8409] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1652: bg 0: block 5: invalid block bitmap [ 120.947139][ T8409] EXT4-fs error (device loop7) in ext4_setattr:6028: error 28 [ 121.024788][ T8438] loop4: detected capacity change from 0 to 256 [ 121.056594][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.093339][ T3615] bridge_slave_1: left allmulticast mode [ 121.099116][ T3615] bridge_slave_1: left promiscuous mode [ 121.119588][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.169193][ T3615] bridge_slave_0: left allmulticast mode [ 121.181823][ T3615] bridge_slave_0: left promiscuous mode [ 121.191617][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.207524][ T8452] netlink: 'syz.8.1663': attribute type 10 has an invalid length. [ 121.234927][ T3615] bond1 (unregistering): (slave geneve2): Releasing active interface [ 121.268056][ T8454] netlink: 'syz.8.1663': attribute type 10 has an invalid length. [ 121.289773][ T3615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.300339][ T3615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.311120][ T3615] bond0 (unregistering): Released all slaves [ 121.318837][ T3615] bond1 (unregistering): Released all slaves [ 121.340405][ T8452] team0: Port device dummy0 added [ 121.357172][ T8454] team0: Port device dummy0 removed [ 121.376225][ T8454] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.517670][ T8420] chnl_net:caif_netlink_parms(): no params data found [ 121.546912][ T3615] hsr_slave_0: left promiscuous mode [ 121.564350][ T3615] hsr_slave_1: left promiscuous mode [ 121.570128][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.590377][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.651633][ T3615] team0 (unregistering): Port device team_slave_1 removed [ 121.662447][ T3615] team0 (unregistering): Port device team_slave_0 removed [ 121.766110][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.781539][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.789035][ T8420] bridge_slave_0: entered allmulticast mode [ 121.795890][ T8420] bridge_slave_0: entered promiscuous mode [ 121.805411][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.812828][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.821157][ T8420] bridge_slave_1: entered allmulticast mode [ 121.827980][ T8420] bridge_slave_1: entered promiscuous mode [ 121.848433][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.860096][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.882028][ T8420] team0: Port device team_slave_0 added [ 121.888995][ T8420] team0: Port device team_slave_1 added [ 121.904698][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.911664][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.938117][ T8420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.949815][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.956979][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.983100][ T8420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.001530][ T3615] IPVS: stop unused estimator thread 0... [ 122.012106][ T8420] hsr_slave_0: entered promiscuous mode [ 122.018287][ T8420] hsr_slave_1: entered promiscuous mode [ 122.024340][ T8420] debugfs: 'hsr0' already exists in 'hsr' [ 122.030202][ T8420] Cannot create hsr debugfs directory [ 122.129030][ T8420] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 122.143109][ T8420] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 122.152118][ T8420] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 122.161896][ T8420] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 122.182595][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.189781][ T8420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.197162][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.204401][ T8420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.239104][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.251347][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.259801][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.271582][ T8420] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.288212][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.295650][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.307527][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.314704][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.341665][ T8420] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.353256][ T8420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.424282][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.539918][ T8420] veth0_vlan: entered promiscuous mode [ 122.548377][ T8420] veth1_vlan: entered promiscuous mode [ 122.564240][ T8420] veth0_macvtap: entered promiscuous mode [ 122.571715][ T8420] veth1_macvtap: entered promiscuous mode [ 122.583554][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.595115][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.606320][ T3607] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.616489][ T3607] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.630555][ T3607] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.640719][ T3607] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.691522][ T8559] loop9: detected capacity change from 0 to 512 [ 122.726786][ T8559] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.762878][ T8559] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.792329][ T8420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.842337][ T8571] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 122.849402][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 122.849420][ T28] audit: type=1326 audit(1775126183.232:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7fc00000 [ 122.857174][ T8571] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.086575][ T8582] loop9: detected capacity change from 0 to 2048 [ 123.139370][ T8582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.163681][ T8582] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.261150][ T8420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.444179][ T3403] IPVS: starting estimator thread 0... [ 123.490671][ T8615] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 123.500013][ T8615] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.517024][ T28] audit: type=1326 audit(1775126183.902:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.7.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7fc00000 [ 123.573014][ T8613] IPVS: using max 2400 ests per chain, 120000 per kthread [ 123.667571][ T8627] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1699'. [ 123.789675][ T28] audit: type=1326 audit(1775126184.172:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8632 comm="syz.7.1702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x0 [ 124.580656][ T8665] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 124.590870][ T8665] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 124.630317][ T8670] loop8: detected capacity change from 0 to 512 [ 124.638957][ T8670] EXT4-fs: Ignoring removed nobh option [ 124.657315][ T8670] EXT4-fs (loop8): 1 orphan inode deleted [ 124.664701][ T8670] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.754138][ T8102] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.807944][ T8689] loop8: detected capacity change from 0 to 512 [ 124.814955][ T8689] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 124.826321][ T8689] EXT4-fs (loop8): 1 truncate cleaned up [ 124.832621][ T8689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.866313][ T8102] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.893009][ T28] audit: type=1400 audit(1775126185.282:1852): avc: denied { read write } for pid=8695 comm="syz.7.1729" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 124.919489][ T28] audit: type=1400 audit(1775126185.282:1853): avc: denied { open } for pid=8695 comm="syz.7.1729" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 124.986553][ T8698] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1729'. [ 125.004170][ T8703] loop8: detected capacity change from 0 to 1024 [ 125.037495][ T8703] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.053907][ T8703] EXT4-fs (loop8): shut down requested (0) [ 125.088730][ T8102] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.224307][ T8726] loop7: detected capacity change from 0 to 512 [ 125.233795][ T8726] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 125.267209][ T8726] EXT4-fs (loop7): 1 orphan inode deleted [ 125.275029][ T8726] EXT4-fs (loop7): 1 truncate cleaned up [ 125.285668][ T8726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.314394][ T28] audit: type=1326 audit(1775126185.702:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8723 comm="syz.7.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 125.340154][ T8726] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #12: block 7: comm syz.7.1737: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 125.359030][ T28] audit: type=1326 audit(1775126185.702:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8723 comm="syz.7.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 125.372795][ T8726] EXT4-fs (loop7): Remounting filesystem read-only [ 125.382805][ T28] audit: type=1326 audit(1775126185.722:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8723 comm="syz.7.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 125.382840][ T28] audit: type=1326 audit(1775126185.722:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8723 comm="syz.7.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 125.382868][ T28] audit: type=1326 audit(1775126185.722:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8723 comm="syz.7.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 125.471007][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.037251][ T8708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.480136][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 128.480154][ T28] audit: type=1326 audit(1775126188.862:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.7.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27d8816597 code=0x7fc00000 [ 128.625959][ T8846] loop4: detected capacity change from 0 to 32768 [ 128.686973][ T3302] loop4: p1 p3 < > [ 128.705216][ T8846] loop4: p1 p3 < > [ 128.752622][ T28] audit: type=1326 audit(1775126189.132:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 128.783851][ T28] audit: type=1326 audit(1775126189.172:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 128.822289][ T28] audit: type=1326 audit(1775126189.172:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 128.884605][ T28] audit: type=1326 audit(1775126189.172:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 128.904640][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 128.910232][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 128.920984][ T28] audit: type=1326 audit(1775126189.172:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 128.953494][ T28] audit: type=1326 audit(1775126189.172:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 129.014154][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 129.026575][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 129.046451][ T28] audit: type=1326 audit(1775126189.172:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 129.085465][ T28] audit: type=1326 audit(1775126189.202:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 129.119630][ T8888] loop7: detected capacity change from 0 to 512 [ 129.135143][ T28] audit: type=1326 audit(1775126189.202:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 129.159589][ T8888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.172544][ T8888] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.200527][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.844804][ T8936] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.1795'. [ 129.985247][ T8934] loop9: detected capacity change from 0 to 32768 [ 130.043520][ T8934] loop9: p1 p3 < > [ 130.135399][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 130.135454][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 131.575897][ T8860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.658720][ T8950] loop7: detected capacity change from 0 to 2048 [ 131.681173][ T8953] netlink: 'syz.8.1802': attribute type 1 has an invalid length. [ 131.700423][ T8953] bond1: entered promiscuous mode [ 131.706197][ T8953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.724854][ T8950] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.742897][ T8950] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 16: comm syz.7.1809: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 131.838526][ T8953] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.856248][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 131.864468][ T8953] bond1: (slave bond2): making interface the new active one [ 131.875759][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1806'. [ 131.882677][ T8953] bond2: entered promiscuous mode [ 131.890720][ T8953] bond1: (slave bond2): Enslaving as an active interface with an up link [ 131.897170][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 131.942729][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1806'. [ 132.048634][ T8970] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #12: block 2: comm syz.7.1809: lblock 0 mapped to illegal pblock 2 (length 1) [ 132.373697][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.400566][ T8972] loop4: detected capacity change from 0 to 1024 [ 132.428327][ T8972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.441556][ T3389] IPVS: starting estimator thread 0... [ 132.463525][ T8972] EXT4-fs (loop4): shut down requested (0) [ 132.546397][ T7348] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.562750][ T8979] IPVS: using max 2592 ests per chain, 129600 per kthread [ 133.197126][ T3423] IPVS: starting estimator thread 0... [ 133.302743][ T9024] IPVS: using max 2448 ests per chain, 122400 per kthread [ 133.447771][ T3607] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.877327][ T9085] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 133.933627][ T9087] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 134.038088][ T9091] loop4: detected capacity change from 0 to 512 [ 134.055064][ T9091] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 134.073679][ T9091] EXT4-fs (loop4): 1 truncate cleaned up [ 134.089628][ T9091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.174076][ T7348] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.213676][ T9099] loop4: detected capacity change from 0 to 512 [ 134.254309][ T9099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.283860][ T9099] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.550764][ T9112] loop9: detected capacity change from 0 to 256 [ 134.572794][ T9112] FAT-fs (loop9): bogus number of FAT sectors [ 134.582394][ T9112] FAT-fs (loop9): Can't find a valid FAT filesystem [ 134.669902][ T7348] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.462822][ T9157] loop9: detected capacity change from 0 to 512 [ 135.507166][ T9157] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.512977][ T3525] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.525988][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 135.543823][ T9157] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.777735][ T8420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.913420][ T9169] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1863'. [ 136.010892][ T9150] kexec: Could not allocate control_code_buffer [ 136.022284][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'. [ 136.187491][ T9184] loop7: detected capacity change from 0 to 128 [ 136.293894][ T2097] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.562895][ T9201] loop9: detected capacity change from 0 to 32768 [ 136.583106][ T3302] loop9: p1 p3 < > [ 136.590266][ T9201] loop9: p1 p3 < > [ 136.712367][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 136.714354][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 136.749769][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 136.750805][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 137.175947][ T9212] loop7: detected capacity change from 0 to 1024 [ 137.206037][ T9212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.218752][ T9212] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.296567][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.529414][ T9206] kexec: Could not allocate control_code_buffer [ 138.001438][ T9262] loop7: detected capacity change from 0 to 512 [ 138.018834][ T9262] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.038413][ T9262] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 138.068201][ T9262] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1904: bg 0: block 248: padding at end of block bitmap is not set [ 138.106418][ T9262] loop7: lost filesystem error report for type 5 error -117 [ 138.106754][ T9262] __quota_error: 15 callbacks suppressed [ 138.106770][ T9262] Quota error (device loop7): write_blk: dquota write failed [ 138.114333][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 138.114357][ C0] EXT4-fs (loop7): last error at time 1775126198: ext4_validate_block_bitmap:441 [ 138.133567][ T9260] netlink: 'syz.8.1902': attribute type 4 has an invalid length. [ 138.151050][ T9262] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 138.154579][ T9260] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1902'. [ 138.164192][ T9262] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.1904: Failed to acquire dquot type 1 [ 138.183737][ T9262] loop7: lost filesystem error report for type 5 error -28 [ 138.191538][ T9262] EXT4-fs (loop7): 1 truncate cleaned up [ 138.212958][ T9262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 138.237774][ T28] audit: type=1400 audit(1775126198.622:1904): avc: denied { setopt } for pid=9261 comm="syz.7.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.296460][ T9280] loop8: detected capacity change from 0 to 764 [ 138.306077][ T28] audit: type=1400 audit(1775126198.692:1905): avc: denied { wake_alarm } for pid=9277 comm="syz.8.1910" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.328578][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 138.332978][ T3525] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.338130][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 138.416647][ T9288] loop7: detected capacity change from 0 to 4096 [ 138.457048][ T9288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.492382][ T9297] loop8: detected capacity change from 0 to 512 [ 138.509917][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.539600][ T9297] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 138.584469][ T9297] EXT4-fs (loop8): 1 truncate cleaned up [ 138.614849][ T9297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.670097][ T8102] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.753339][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1920'. [ 138.762592][ T9293] loop4: detected capacity change from 0 to 32768 [ 138.774938][ T9308] bond5: entered promiscuous mode [ 138.780198][ T9308] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.793575][ T9293] loop4: p1 p3 < > [ 138.858355][ T28] audit: type=1326 audit(1775126199.242:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 138.933233][ T28] audit: type=1326 audit(1775126199.272:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 138.941787][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 138.971571][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 138.994030][ T28] audit: type=1326 audit(1775126199.272:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 139.018219][ T28] audit: type=1326 audit(1775126199.272:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 139.045998][ T28] audit: type=1326 audit(1775126199.272:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 139.079098][ T28] audit: type=1326 audit(1775126199.272:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f77ba07c819 code=0x7ffc0000 [ 139.206735][ T9343] loop9: detected capacity change from 0 to 128 [ 139.219077][ T9343] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.242899][ T9343] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.313473][ T9343] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.1933: No space for directory leaf checksum. Please run e2fsck -D. [ 139.329700][ T9343] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.1933: Directory block failed checksum [ 139.371595][ T8420] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.524259][ T9359] syzkaller1: entered promiscuous mode [ 139.535290][ T9359] syzkaller1: entered allmulticast mode [ 139.611388][ T9361] tipc: Enabling of bearer rejected, failed to enable media [ 139.872234][ T9376] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1948'. [ 140.496009][ T9425] PID 9425 killed due to inadequate hugepage pool [ 140.565756][ T9433] netlink: 4580 bytes leftover after parsing attributes in process `syz.9.1969'. [ 140.612030][ T9433] netlink: 4580 bytes leftover after parsing attributes in process `syz.9.1969'. [ 140.825956][ T9458] set_capacity_and_notify: 1 callbacks suppressed [ 140.825974][ T9458] loop7: detected capacity change from 0 to 512 [ 140.841352][ T9458] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 140.854481][ T9458] EXT4-fs (loop7): 1 truncate cleaned up [ 140.865737][ T9458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.951303][ T9462] ref_ctr_offset mismatch. inode: 0x17c offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 140.964174][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.019516][ T9466] netlink: 4580 bytes leftover after parsing attributes in process `syz.8.1982'. [ 141.034535][ T9469] loop9: detected capacity change from 0 to 1024 [ 141.041747][ T9469] EXT4-fs: Ignoring removed bh option [ 141.050750][ T9466] netlink: 4580 bytes leftover after parsing attributes in process `syz.8.1982'. [ 141.093478][ T9469] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.198333][ T8420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.209101][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 141.220868][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1990'. [ 141.234380][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 141.240606][ T3582] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.243704][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1990'. [ 141.261276][ T3582] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.270190][ T3582] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.280538][ T3582] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.484008][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 141.661503][ T9523] loop9: detected capacity change from 0 to 512 [ 141.686946][ T9523] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 141.691865][ T9525] netlink: 'syz.8.2007': attribute type 1 has an invalid length. [ 141.717255][ T9525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.729618][ T9523] EXT4-fs (loop9): 1 truncate cleaned up [ 141.734505][ T9525] bond3: (slave geneve2): making interface the new active one [ 141.744359][ T9523] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.745850][ T9525] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 142.039639][ T8420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.444421][ T9557] netlink: 'syz.6.2018': attribute type 1 has an invalid length. [ 142.954422][ T2097] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.765592][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 143.765611][ T28] audit: type=1400 audit(1775126204.152:1962): avc: denied { write } for pid=35 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27310 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.845444][ T28] audit: type=1400 audit(1775126204.232:1963): avc: denied { read } for pid=9586 comm="syz.8.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.891963][ T9591] netlink: 'syz.9.2032': attribute type 12 has an invalid length. [ 143.900450][ T9591] netlink: 'syz.9.2032': attribute type 29 has an invalid length. [ 143.909871][ T9591] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2032'. [ 144.024701][ T28] audit: type=1400 audit(1775126204.412:1964): avc: denied { setopt } for pid=9607 comm="syz.9.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.045246][ T28] audit: type=1400 audit(1775126204.412:1965): avc: denied { read } for pid=9607 comm="syz.9.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.236213][ T28] audit: type=1326 audit(1775126204.622:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.7.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 144.264625][ T28] audit: type=1326 audit(1775126204.622:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.7.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 144.293464][ T28] audit: type=1326 audit(1775126204.642:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.7.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 144.323246][ T9634] loop9: detected capacity change from 0 to 1024 [ 144.330276][ T28] audit: type=1326 audit(1775126204.652:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9632 comm="syz.7.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f27d87dd04e code=0x7ffc0000 [ 144.354761][ T28] audit: type=1326 audit(1775126204.652:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.7.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 144.378707][ T9634] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 144.386986][ T9634] System zones: 0-1, 3-36 [ 144.392337][ T9634] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.2051: bad orphan inode 134217728 [ 144.406665][ T9634] loop9: lost filesystem error report for type 5 error -117 [ 144.407154][ T9634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.435312][ T28] audit: type=1326 audit(1775126204.652:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.7.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 144.476925][ T8420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.535012][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2052'. [ 144.556969][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2052'. [ 144.769404][ T2097] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.783475][ T2097] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.792319][ T2097] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.801484][ T9662] tipc: Enabled bearer , priority 10 [ 144.808703][ T2097] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.861881][ T9664] loop9: detected capacity change from 0 to 764 [ 145.032934][ T7133] Bluetooth: hci0: command 0x1003 tx timeout [ 145.040309][ T9281] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.208310][ T9679] syzkaller1: entered promiscuous mode [ 145.214767][ T9679] syzkaller1: entered allmulticast mode [ 145.505623][ T9693] loop7: detected capacity change from 0 to 256 [ 145.554188][ T9693] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.629791][ T9693] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.786639][ T9700] loop9: detected capacity change from 0 to 164 [ 145.879800][ T9700] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 145.912814][ T5564] tipc: Node number set to 1073741825 [ 146.264174][ T9725] __nla_validate_parse: 4 callbacks suppressed [ 146.264238][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2091'. [ 146.299212][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2091'. [ 146.324939][ T9725] netlink: 'syz.8.2091': attribute type 11 has an invalid length. [ 146.338514][ T3615] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.351029][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2091'. [ 146.362841][ T3615] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.376582][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2091'. [ 146.388748][ T3615] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.397624][ T9725] netlink: 'syz.8.2091': attribute type 11 has an invalid length. [ 146.397983][ T3615] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.450287][ T9733] loop8: detected capacity change from 0 to 256 [ 146.502850][ T9733] FAT-fs (loop8): Directory bread(block 64) failed [ 146.510176][ T9733] FAT-fs (loop8): Directory bread(block 65) failed [ 146.521484][ T9733] FAT-fs (loop8): Directory bread(block 66) failed [ 146.528612][ T9733] FAT-fs (loop8): Directory bread(block 67) failed [ 146.535925][ T9733] FAT-fs (loop8): Directory bread(block 68) failed [ 146.542687][ T9733] FAT-fs (loop8): Directory bread(block 69) failed [ 146.549896][ T9733] FAT-fs (loop8): Directory bread(block 70) failed [ 146.557042][ T9733] FAT-fs (loop8): Directory bread(block 71) failed [ 146.565871][ T9733] FAT-fs (loop8): Directory bread(block 72) failed [ 146.572586][ T9733] FAT-fs (loop8): Directory bread(block 73) failed [ 146.653918][ T9749] loop7: detected capacity change from 0 to 512 [ 146.695850][ T9749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.739828][ T9749] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.803406][ T9762] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2107'. [ 147.232721][ T9755] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 149.673324][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.794152][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2116'. [ 149.868817][ T9784] Process accounting resumed [ 149.886422][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 149.886485][ T28] audit: type=1400 audit(1775126210.272:2057): avc: denied { read write } for pid=9788 comm="syz.7.2122" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.968466][ T28] audit: type=1400 audit(1775126210.272:2058): avc: denied { open } for pid=9788 comm="syz.7.2122" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.977111][ T9794] loop9: detected capacity change from 0 to 512 [ 150.014075][ T9794] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.050102][ T9794] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 150.066373][ T9794] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 150.077142][ T9794] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 150.094491][ T9794] System zones: 0-2, 18-18, 34-34 [ 150.100471][ T9794] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.2121: bad orphan inode 15 [ 150.111803][ T9794] loop9: lost filesystem error report for type 5 error -117 [ 150.111967][ T9794] ext4_test_bit(bit=14, block=18) = 1 [ 150.119389][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 150.119419][ C0] EXT4-fs (loop9): initial error at time 1775126210: ext4_orphan_get:1423 [ 150.119445][ C0] EXT4-fs (loop9): last error at time 1775126210: ext4_orphan_get:1423 [ 150.148900][ T9794] is_bad_inode(inode)=0 [ 150.153599][ T9794] NEXT_ORPHAN(inode)=2264924160 [ 150.158608][ T9794] max_ino=32 [ 150.161817][ T9794] i_nlink=0 [ 150.165623][ T9794] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #15: comm syz.9.2121: corrupted inode contents [ 150.177930][ T9794] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.178351][ T9794] EXT4-fs error (device loop9): ext4_dirty_inode:6495: inode #15: comm syz.9.2121: mark_inode_dirty error [ 150.200128][ T9794] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.200323][ T9794] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #15: comm syz.9.2121: corrupted inode contents [ 150.222736][ T9794] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.222985][ T9794] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.2121: mark_inode_dirty error [ 150.244785][ T9794] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.245081][ T9794] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.2121: mark inode dirty (error -117) [ 150.293941][ T9794] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.298536][ T9815] netlink: 1010 bytes leftover after parsing attributes in process `syz.8.2131'. [ 150.304762][ T9794] EXT4-fs warning (device loop9): ext4_evict_inode:285: xattr delete (err -117) [ 150.309519][ T9815] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 150.327182][ T9817] loop4: detected capacity change from 0 to 512 [ 150.343637][ T9794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.365169][ T9817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.383593][ T9820] netlink: 'syz.7.2132': attribute type 83 has an invalid length. [ 150.387047][ T9817] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.402153][ T9794] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2121: bg 0: block 80: padding at end of block bitmap is not set [ 150.449427][ T7348] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.461528][ T8420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.521004][ T9833] Invalid argument reading file caps for ./file0 [ 150.622682][ T28] audit: type=1400 audit(1775126211.002:2059): avc: denied { unmount } for pid=7348 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 150.652014][ T9846] syzkaller0: entered promiscuous mode [ 150.657801][ T9846] syzkaller0: entered allmulticast mode [ 150.834909][ T28] audit: type=1400 audit(1775126211.222:2060): avc: denied { write } for pid=9866 comm="syz.8.2154" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 150.909997][ T28] audit: type=1400 audit(1775126211.222:2061): avc: denied { open } for pid=9866 comm="syz.8.2154" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 150.935715][ T28] audit: type=1400 audit(1775126211.222:2062): avc: denied { ioctl } for pid=9866 comm="syz.8.2154" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.320364][ T9895] loop8: detected capacity change from 0 to 1024 [ 151.331547][ T9893] xt_hashlimit: size too large, truncated to 1048576 [ 151.341727][ T9895] EXT4-fs: Ignoring removed bh option [ 151.363077][ T9895] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 151.709846][ T28] audit: type=1326 audit(1775126212.092:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9868 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ba07c819 code=0x7fc00000 [ 151.940609][ T9935] loop7: detected capacity change from 0 to 2048 [ 151.964055][ T9935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.090114][ T9945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.146406][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.408821][ T9987] loop9: detected capacity change from 0 to 256 [ 152.417923][ T9987] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.434178][ T9987] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.848429][ T9992] xt_hashlimit: size too large, truncated to 1048576 [ 153.181612][ T9995] loop9: detected capacity change from 0 to 32768 [ 153.953054][T10024] loop4: detected capacity change from 0 to 1764 [ 154.036041][T10037] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2220'. [ 154.045997][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2219'. [ 154.070683][T10036] hsr_slave_0: left promiscuous mode [ 154.084953][T10036] hsr_slave_1: left promiscuous mode [ 154.178337][ T28] audit: type=1400 audit(1775126214.562:2064): avc: denied { write } for pid=10054 comm="syz.7.2227" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 154.205610][ T28] audit: type=1400 audit(1775126214.562:2065): avc: denied { open } for pid=10054 comm="syz.7.2227" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 154.393899][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 154.510784][T10079] loop4: detected capacity change from 0 to 1024 [ 154.519862][T10079] EXT4-fs: inline encryption not supported [ 154.526600][T10079] EXT4-fs: Ignoring removed nobh option [ 154.555183][T10079] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 154.579740][T10079] System zones: 0-1, 3-12 [ 154.610429][T10079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.684484][ T28] audit: type=1400 audit(1775126215.072:2066): avc: denied { read } for pid=10091 comm="syz.7.2242" path="socket:[28533]" dev="sockfs" ino=28533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.739807][T10093] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 154.757985][ T7348] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.758791][T10105] bond1: option mode: unable to set because the bond device has slaves [ 154.785159][T10105] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 154.887483][T10122] loop8: detected capacity change from 0 to 764 [ 154.903138][T10122] ISOFS: unable to read i-node block [ 155.062068][ T28] audit: type=1326 audit(1775126215.442:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10139 comm="syz.9.2259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc78fa9c819 code=0x0 [ 155.382047][T10150] futex_wake_op: syz.6.2263 tries to shift op by 32; fix this program [ 155.434748][ T28] audit: type=1400 audit(1775126215.822:2068): avc: denied { getopt } for pid=10152 comm="syz.6.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.166321][ T28] audit: type=1400 audit(1775126216.552:2069): avc: denied { listen } for pid=10175 comm="syz.8.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 156.173222][T10176] IPv6: addrconf: prefix option has invalid lifetime [ 156.206360][ T28] audit: type=1400 audit(1775126216.582:2070): avc: denied { getopt } for pid=10175 comm="syz.8.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.264799][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2278'. [ 156.273872][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2278'. [ 156.282982][T10184] netlink: 'syz.8.2278': attribute type 6 has an invalid length. [ 156.291190][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2278'. [ 156.300415][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2278'. [ 156.309439][T10184] netlink: 'syz.8.2278': attribute type 6 has an invalid length. [ 156.333721][ T28] audit: type=1400 audit(1775126216.722:2071): avc: denied { ioctl } for pid=10187 comm="syz.8.2280" path="socket:[29303]" dev="sockfs" ino=29303 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.442073][T10195] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 156.442073][T10195] The task syz.9.2281 (10195) triggered the difference, watch for misbehavior. [ 156.479171][T10197] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 157.243097][T10210] loop9: detected capacity change from 0 to 512 [ 157.449007][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2290'. [ 157.589297][ T28] audit: type=1400 audit(1775126217.972:2072): avc: denied { create } for pid=10225 comm="syz.9.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.617331][ T28] audit: type=1400 audit(1775126218.002:2073): avc: denied { write } for pid=10225 comm="syz.9.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.671234][T10232] netlink: 1347 bytes leftover after parsing attributes in process `syz.9.2297'. [ 157.779201][ T28] audit: type=1400 audit(1775126218.162:2074): avc: denied { read } for pid=10247 comm="syz.8.2305" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.834152][T10110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.919603][T10258] loop4: detected capacity change from 0 to 512 [ 157.990676][T10258] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 158.009117][T10258] System zones: 0-2, 18-18, 34-35 [ 158.032881][T10258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.084563][T10258] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.150086][ T7348] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.358730][T10298] loop4: detected capacity change from 0 to 512 [ 158.369456][T10298] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 158.381783][T10298] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 158.391259][T10298] System zones: 1-12 [ 158.465045][T10298] EXT4-fs (loop4): orphan cleanup on readonly fs [ 158.474392][T10298] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2326: bg 0: block 361: padding at end of block bitmap is not set [ 158.489290][T10298] loop4: lost filesystem error report for type 5 error -117 [ 158.489460][T10298] EXT4-fs (loop4): Remounting filesystem read-only [ 158.497028][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 158.497059][ C0] EXT4-fs (loop4): initial error at time 1775126218: ext4_validate_block_bitmap:441 [ 158.497104][ C0] EXT4-fs (loop4): last error at time 1775126218: ext4_validate_block_bitmap:441 [ 158.545537][T10298] EXT4-fs (loop4): 1 truncate cleaned up [ 158.551796][T10298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 158.565761][T10298] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.2326: error -117 reading directory block [ 158.580709][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2331'. [ 158.596246][ T7348] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 158.766392][T10328] netlink: zone id is out of range [ 158.771849][T10328] netlink: zone id is out of range [ 158.796086][T10328] netlink: set zone limit has 8 unknown bytes [ 159.413906][T10344] loop9: detected capacity change from 0 to 4096 [ 159.439374][T10344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.484980][ T8420] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.770760][ T28] audit: type=1326 audit(1775126220.152:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 159.818194][ T28] audit: type=1326 audit(1775126220.152:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 160.010533][T10396] __nla_validate_parse: 2 callbacks suppressed [ 160.010552][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2363'. [ 160.058406][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2366'. [ 160.112775][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2366'. [ 160.151990][T10381] loop8: detected capacity change from 0 to 32768 [ 160.170059][T10391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.179750][T10391] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.208137][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2367'. [ 160.217094][ T3302] loop8: p1 p3 < > [ 160.229170][T10381] loop8: p1 p3 < > [ 160.234248][T10391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.531683][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 160.533220][T10420] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 160.543846][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 160.575677][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 160.587649][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 160.618151][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 160.618170][ T28] audit: type=1326 audit(1775126221.002:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 160.660373][ T28] audit: type=1326 audit(1775126221.002:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 160.707191][ T28] audit: type=1326 audit(1775126221.002:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 160.741002][ T28] audit: type=1326 audit(1775126221.002:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 160.769904][ T28] audit: type=1326 audit(1775126221.002:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 160.796416][ T28] audit: type=1326 audit(1775126221.002:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 160.824343][ T28] audit: type=1326 audit(1775126221.002:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 160.852031][ T28] audit: type=1326 audit(1775126221.002:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 160.877135][ T28] audit: type=1326 audit(1775126221.002:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 160.901095][ T28] audit: type=1326 audit(1775126221.002:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10422 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27d881c819 code=0x7ffc0000 [ 161.417374][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2389'. [ 161.439378][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2389'. [ 161.513002][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2389'. [ 161.547124][T10470] loop7: detected capacity change from 0 to 512 [ 161.555810][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2389'. [ 161.581314][T10470] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.628624][T10470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.643375][T10476] bond0: option arp_all_targets: invalid value (172) [ 161.656856][T10476] bond0: option arp_all_targets: invalid value (172) [ 161.664229][T10470] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.724967][T10470] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2396: corrupted xattr block 33: invalid ea_ino [ 161.741006][T10470] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 161.751573][T10470] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2396: corrupted xattr block 33: invalid ea_ino [ 162.378141][T10466] kexec: Could not allocate control_code_buffer [ 162.562950][ T7573] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.634710][T10505] loop4: detected capacity change from 0 to 256 [ 162.681972][T10511] netlink: 'syz.7.2413': attribute type 12 has an invalid length. [ 162.712798][T10511] netlink: 'syz.7.2413': attribute type 29 has an invalid length. [ 162.732680][T10511] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2413'. [ 163.231626][T10505] ================================================================== [ 163.239904][T10505] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 163.247218][T10505] [ 163.249636][T10505] write to 0xffff88810a576614 of 4 bytes by task 10514 on cpu 0: [ 163.257605][T10505] xas_set_mark+0x12b/0x140 [ 163.262113][T10505] tag_pages_for_writeback+0xe3/0x2e0 [ 163.267578][T10505] writeback_iter+0x340/0x830 [ 163.272340][T10505] __mpage_writepages+0x8a/0x1390 [ 163.277452][T10505] fat_writepages+0x26/0x30 [ 163.281954][T10505] do_writepages+0x1c6/0x310 [ 163.286632][T10505] file_write_and_wait_range+0x178/0x2f0 [ 163.292440][T10505] __generic_file_fsync+0x46/0x160 [ 163.297673][T10505] fat_file_fsync+0x49/0x100 [ 163.302267][T10505] vfs_fsync_range+0xc5/0xe0 [ 163.307056][T10505] generic_file_write_iter+0x1ba/0x310 [ 163.312517][T10505] iter_file_splice_write+0x6c4/0xa80 [ 163.318248][T10505] direct_splice_actor+0x156/0x2a0 [ 163.323571][T10505] splice_direct_to_actor+0x311/0x670 [ 163.328951][T10505] do_splice_direct+0x119/0x1a0 [ 163.334253][T10505] do_sendfile+0x382/0x650 [ 163.338672][T10505] __x64_sys_sendfile64+0x105/0x150 [ 163.344111][T10505] x64_sys_call+0x2dc4/0x3020 [ 163.348811][T10505] do_syscall_64+0x12c/0x370 [ 163.353410][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.359320][T10505] [ 163.361728][T10505] read to 0xffff88810a576614 of 4 bytes by task 10505 on cpu 1: [ 163.369447][T10505] xas_find_marked+0x5d7/0x620 [ 163.374326][T10505] filemap_get_folios_tag+0xfa/0x510 [ 163.379814][T10505] filemap_fdatawait_range+0x88/0x1e0 [ 163.385544][T10505] __writeback_single_inode+0xdb/0x720 [ 163.391049][T10505] writeback_single_inode+0x16d/0x3f0 [ 163.396434][T10505] sync_inode_metadata+0x6e/0xa0 [ 163.401402][T10505] __generic_file_fsync+0x109/0x160 [ 163.406793][T10505] fat_file_fsync+0x49/0x100 [ 163.411411][T10505] vfs_fsync_range+0xc5/0xe0 [ 163.416015][T10505] generic_file_write_iter+0x1ba/0x310 [ 163.421665][T10505] iter_file_splice_write+0x6c4/0xa80 [ 163.427054][T10505] direct_splice_actor+0x156/0x2a0 [ 163.432234][T10505] splice_direct_to_actor+0x311/0x670 [ 163.437612][T10505] do_splice_direct+0x119/0x1a0 [ 163.442644][T10505] do_sendfile+0x382/0x650 [ 163.447187][T10505] __x64_sys_sendfile64+0x105/0x150 [ 163.452578][T10505] x64_sys_call+0x2dc4/0x3020 [ 163.457450][T10505] do_syscall_64+0x12c/0x370 [ 163.462207][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.468280][T10505] [ 163.470611][T10505] value changed: 0x02000021 -> 0x04000021 [ 163.476425][T10505] [ 163.478755][T10505] Reported by Kernel Concurrency Sanitizer on: [ 163.484914][T10505] CPU: 1 UID: 0 PID: 10505 Comm: syz.4.2411 Tainted: G W syzkaller #0 PREEMPT(full) [ 163.496116][T10505] Tainted: [W]=WARN [ 163.499922][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.509977][T10505] ================================================================== [ 172.558423][ T3615] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.615985][ T3615] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.665578][ T3615] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.705105][ T3615] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.790553][ T3615] bridge_slave_1: left allmulticast mode [ 172.796427][ T3615] bridge_slave_1: left promiscuous mode [ 172.802335][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.810386][ T3615] bridge_slave_0: left allmulticast mode [ 172.816346][ T3615] bridge_slave_0: left promiscuous mode [ 172.822064][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.866588][ T3615] bond1 (unregistering): (slave geneve2): Releasing active interface [ 172.925219][ T3615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.934935][ T3615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.944322][ T3615] bond0 (unregistering): Released all slaves [ 172.951751][ T3615] bond1 (unregistering): Released all slaves [ 173.000792][ T3615] hsr_slave_0: left promiscuous mode [ 173.006562][ T3615] hsr_slave_1: left promiscuous mode [ 173.012235][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.020819][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.028648][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.037314][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.048133][ T3615] veth1_macvtap: left promiscuous mode [ 173.053885][ T3615] veth0_macvtap: left promiscuous mode [ 173.059421][ T3615] veth1_vlan: left promiscuous mode [ 173.065114][ T3615] veth0_vlan: left promiscuous mode [ 173.125233][ T3615] team0 (unregistering): Port device team_slave_1 removed [ 173.136712][ T3615] team0 (unregistering): Port device team_slave_0 removed