last executing test programs: 7m34.507921326s ago: executing program 32 (id=1116): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m31.170163314s ago: executing program 33 (id=1209): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e25, 0x400, @remote, 0x2}, 0x1c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 6m53.388250377s ago: executing program 34 (id=2095): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x1000000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 6m40.124041861s ago: executing program 35 (id=2897): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6m33.903927749s ago: executing program 36 (id=3046): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x83) 6m1.523655293s ago: executing program 37 (id=3560): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff3}, {0x0, 0xb}}}, 0x24}}, 0x0) 5m32.968764621s ago: executing program 38 (id=4280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) 4m55.114572559s ago: executing program 39 (id=5302): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) 4m14.885777257s ago: executing program 40 (id=7067): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x20004080) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3m17.975473331s ago: executing program 41 (id=8472): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2m16.874498673s ago: executing program 42 (id=10406): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r0, 0x0, 0x0, 0x4000000, &(0x7f00000002c0)={0x11, 0x4, r2, 0x1, 0x8, 0x6, @link_local}, 0x14) 1m25.938036624s ago: executing program 43 (id=12040): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000080), &(0x7f0000000840)=r1}, 0x20) 1m22.022964086s ago: executing program 44 (id=12114): r0 = msgget$private(0x0, 0x7fc) msgrcv(r0, 0xffffffffffffffff, 0x0, 0x0, 0x1000) msgsnd(r0, &(0x7f0000001980)=ANY=[@ANYRES16], 0x8, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x15, 0x800) msgrcv(r0, &(0x7f00000005c0)={0x0, ""/4096}, 0x1008, 0x0, 0x0) 1m14.347706899s ago: executing program 2 (id=12291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f00000005c0)={0x0}, 0x2, 0x0, 0x0, 0x4080}, 0x0) 1m14.291902962s ago: executing program 2 (id=12293): unshare(0x4040600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000814000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 1m14.253312714s ago: executing program 2 (id=12294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100}}, 0x30) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 1m14.177540019s ago: executing program 2 (id=12297): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@session={'session', 0x3d, 0x4}}, {@check_strict}, {@check_strict}, {@session={'session', 0x3d, 0x48}}, {@dmode={'dmode', 0x3d, 0x4}}, {@map_acorn}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@map_off}, {@nocompress}, {@mode}, {@hide}, {@nojoliet}, {@dmode={'dmode', 0x3d, 0x40}}]}, 0x0, 0x3f1, &(0x7f0000000840)="$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") mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m14.090755774s ago: executing program 2 (id=12300): unshare(0x2a020400) r0 = getpid() unshare(0x26020480) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) 1m13.796104892s ago: executing program 2 (id=12308): r0 = syz_io_uring_setup(0x1c2f, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x4, 0x163}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="6c0100"], 0x16c}}, 0x0) io_uring_enter(r0, 0x847ba, 0x4c86, 0x5, 0x0, 0x0) 1m13.742081485s ago: executing program 45 (id=12308): r0 = syz_io_uring_setup(0x1c2f, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x4, 0x163}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="6c0100"], 0x16c}}, 0x0) io_uring_enter(r0, 0x847ba, 0x4c86, 0x5, 0x0, 0x0) 56.005269043s ago: executing program 9 (id=12842): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 55.257358148s ago: executing program 9 (id=12851): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa01, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x4048810) close(r0) 55.118614186s ago: executing program 9 (id=12853): r0 = socket$unix(0x1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 55.091410687s ago: executing program 9 (id=12854): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 55.008761452s ago: executing program 9 (id=12857): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x2412, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 54.70397638s ago: executing program 9 (id=12862): r0 = syz_io_uring_setup(0x5ef9, &(0x7f0000000280)={0x0, 0x3b4f, 0x1, 0x3, 0x14}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x7dd6, 0x8029, 0x1, 0x0, 0x0) io_uring_enter(r0, 0xb82, 0xe875, 0x49, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 54.670429332s ago: executing program 46 (id=12862): r0 = syz_io_uring_setup(0x5ef9, &(0x7f0000000280)={0x0, 0x3b4f, 0x1, 0x3, 0x14}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x7dd6, 0x8029, 0x1, 0x0, 0x0) io_uring_enter(r0, 0xb82, 0xe875, 0x49, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 48.897460603s ago: executing program 8 (id=13005): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@user_xattr}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 48.585857451s ago: executing program 8 (id=13007): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0}]) open(&(0x7f00000002c0)='./file0\x00', 0x4081, 0x100) 48.337133136s ago: executing program 8 (id=13013): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a463978044b864f940e1137ce034002852c9ef5606de83cf95a02ef4bacef1195250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27fc9eeb304bb3e260a261", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f00000009c0)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x230000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 48.001820826s ago: executing program 8 (id=13019): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000000)='./file0/file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) 47.902607472s ago: executing program 8 (id=13021): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) 47.516085905s ago: executing program 8 (id=13028): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="00214717a7070000000003060000000000000000a8a6", 0x16}], 0x1, 0xe, 0x200004) 47.515932515s ago: executing program 47 (id=13028): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="00214717a7070000000003060000000000000000a8a6", 0x16}], 0x1, 0xe, 0x200004) 34.110030147s ago: executing program 6 (id=13381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r2, r1, 0x4, r0}, 0x10) 34.04264996s ago: executing program 6 (id=13392): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r1, 0x4, 0x6c00) write$UHID_INPUT(r1, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) read$hiddev(r0, &(0x7f0000000100)=""/4096, 0x1000) write$P9_RVERSION(r1, &(0x7f0000002380)={0x15, 0x65, 0xffff, 0xed30, 0x8, '9P2000.u'}, 0x15) 33.981940064s ago: executing program 6 (id=13383): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 33.944684946s ago: executing program 6 (id=13384): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe4a}}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 33.650538283s ago: executing program 6 (id=13385): r0 = gettid() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 33.355295991s ago: executing program 6 (id=13386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 33.354817341s ago: executing program 7 (id=13387): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0xa87, &(0x7f00000002c0)={0x0, 0x3593, 0x800, 0x3, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x50b, 0x7817, 0xb, 0x0, 0xfe40) 33.290337824s ago: executing program 48 (id=13386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 33.271534576s ago: executing program 7 (id=13389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 33.140113014s ago: executing program 7 (id=13391): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x300, &(0x7f00000000c0)="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"}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=', @ANYBLOB="120ddb4f2a337f81c4f61421db4c3b82b9d22878eb3f38b0803e247bd353baa137ae23caeedfc8216792b32e265b6ed9a6fabb39eca350395c1445b154955771c1189b33a848132ad8011338e7c659594ca4169cd622e4479c1f52c32149aac62ab7b90ef2270cf5e69c4344ca1fd9580aeac17330646eee7068f3f2eb354c3019b5d9118deb7ca0011271f2cefc96f54438c431c08ef28bfb417bea8886866e4b0c845022"]) 33.006741341s ago: executing program 7 (id=13394): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000000)='./file0/file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) 32.957235334s ago: executing program 7 (id=13395): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0}]) open(&(0x7f00000002c0)='./file0\x00', 0x4081, 0x100) 32.289803714s ago: executing program 7 (id=13399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.247281456s ago: executing program 49 (id=13399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.39065317s ago: executing program 1 (id=14116): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) 3.357441252s ago: executing program 1 (id=14118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a01040000000000002eca86e200000900020073797a32000000000900010073797a3000"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 3.268161937s ago: executing program 1 (id=14121): r0 = gettid() timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) lsm_list_modules(0x0, &(0x7f0000000040), 0x0) 3.22366691s ago: executing program 1 (id=14122): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10f18c0, 0x0) 3.194573591s ago: executing program 1 (id=14124): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x2}, 0x1004, 0x0, 0x1, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x208000, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.35931592s ago: executing program 1 (id=14135): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4000, 0x7}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffffff81, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 2.326136312s ago: executing program 50 (id=14135): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4000, 0x7}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffffff81, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 2.255123377s ago: executing program 4 (id=14139): socket$inet_mptcp(0x2, 0x1, 0x106) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) 2.112099025s ago: executing program 4 (id=14141): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x1, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x6, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) 2.021609331s ago: executing program 0 (id=14145): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x1) 1.897541168s ago: executing program 0 (id=14147): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.779755934s ago: executing program 0 (id=14149): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002500)={0x10, 0x19, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x14}, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) 1.440888475s ago: executing program 3 (id=14153): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.273163495s ago: executing program 4 (id=14155): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 1.117257054s ago: executing program 3 (id=14156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xfd46, 0x1, 0x0, 0xffffffffffffff71}, &(0x7f00000000c0)=0x40) 1.049125768s ago: executing program 3 (id=14157): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.048765418s ago: executing program 3 (id=14158): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x183}], 0x1}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="f24f", 0x2}], 0x1, 0x7, 0x400) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x5) 1.043291108s ago: executing program 4 (id=14159): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 902.925907ms ago: executing program 4 (id=14161): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 902.794997ms ago: executing program 3 (id=14162): clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000180)=[{r1, 0x2005}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 862.017679ms ago: executing program 0 (id=14164): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 602.215575ms ago: executing program 0 (id=14166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c00028005000c000500000008000a00", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 406.741186ms ago: executing program 5 (id=14168): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000901000/0x1000)=nil, 0x1000) 406.011986ms ago: executing program 0 (id=14169): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x2, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x9}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 199.936708ms ago: executing program 5 (id=14170): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000200), 0x0}, 0x20) 196.889158ms ago: executing program 5 (id=14171): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x50, 0xc, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x8044) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x88, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25a51027}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x493c1927}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 93.557084ms ago: executing program 5 (id=14172): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x16) 58.052897ms ago: executing program 5 (id=14173): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="25b0eb0b", 0x4}], 0x1}, 0x4847) 31.264158ms ago: executing program 3 (id=14174): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002500)={0x10, 0x19, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x14}, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) 4.93091ms ago: executing program 5 (id=14175): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083, 0x2010}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 0s ago: executing program 4 (id=14176): r0 = syz_io_uring_setup(0x11cd, &(0x7f00000003c0)={0x0, 0xde73, 0x80, 0x1103, 0x2c}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) kernel console output (not intermixed with test programs): type=1400 audit(995.677:4293): avc: denied { mounton } for pid=4331 comm="syz.9.12854" path="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 479.758974][ T29] audit: type=1400 audit(995.727:4294): avc: denied { unmount } for pid=1680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 479.849156][ T4338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.965820][ T4338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.023834][ T393] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.033716][ T393] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.045004][ T4345] loop8: detected capacity change from 0 to 256 [ 480.090604][ T393] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.100461][ T393] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.190400][ T393] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.200295][ T393] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.263930][ T393] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.273884][ T393] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.350999][ T4363] team0 (unregistering): Port device team_slave_1 removed [ 480.371515][ T4363] team0 (unregistering): Port device bond1 removed [ 480.403588][ T4371] loop7: detected capacity change from 0 to 512 [ 480.423589][ T4371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.493775][ T4351] lo speed is unknown, defaulting to 1000 [ 480.522003][ T393] bridge_slave_1: left allmulticast mode [ 480.527711][ T393] bridge_slave_1: left promiscuous mode [ 480.533539][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.550739][ T1995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.601681][ T393] bridge_slave_0: left allmulticast mode [ 480.607416][ T393] bridge_slave_0: left promiscuous mode [ 480.613329][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.632527][ T4386] loop7: detected capacity change from 0 to 512 [ 480.671190][ T4386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.775956][ T1995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.811958][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.842525][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.869911][ T393] bond0 (unregistering): Released all slaves [ 480.885303][ T393] bond1 (unregistering): Released all slaves [ 480.896258][ T3472] kernel write not supported for file bpf-prog (pid: 3472 comm: kworker/0:4) [ 480.981494][ T4420] loop6: detected capacity change from 0 to 512 [ 481.014465][ T29] audit: type=1326 audit(996.987:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.7.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09c81acb9 code=0x7ffc0000 [ 481.045873][ T29] audit: type=1326 audit(997.007:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.7.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09c81acb9 code=0x7ffc0000 [ 481.065890][ T4420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.069193][ T29] audit: type=1326 audit(997.017:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.7.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd09c81acb9 code=0x7ffc0000 [ 481.104495][ T29] audit: type=1326 audit(997.017:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.7.12885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09c81acb9 code=0x7ffc0000 [ 481.135498][ T393] hsr_slave_0: left promiscuous mode [ 481.144727][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.152252][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.160444][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.167868][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.200401][ T393] veth1_macvtap: left promiscuous mode [ 481.207339][T18271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.211433][ T393] veth0_macvtap: left promiscuous mode [ 481.268368][ T393] veth1_vlan: left promiscuous mode [ 481.286048][ T393] veth0_vlan: left promiscuous mode [ 481.297552][ T4445] loop6: detected capacity change from 0 to 1024 [ 481.309176][ T4445] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.12888: Failed to acquire dquot type 0 [ 481.362932][ T4445] EXT4-fs (loop6): 1 truncate cleaned up [ 481.375395][ T4445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.398323][ T4445] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.12888: Failed to acquire dquot type 0 [ 481.468413][T18271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.486780][ T4449] dummy0: Caught tx_queue_len zero misconfig [ 481.493351][T18561] page_pool_release_retry() stalled pool shutdown: id 245, 1 inflight 60 sec [ 481.655167][ T4351] chnl_net:caif_netlink_parms(): no params data found [ 481.773589][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.780809][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.881167][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.901933][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.943339][ T393] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.976529][ T393] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.998667][ T393] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.007705][ T393] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.044824][ T4512] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12907'. [ 482.065612][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.072834][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.081197][ T4351] bridge_slave_0: entered allmulticast mode [ 482.088261][ T4351] bridge_slave_0: entered promiscuous mode [ 482.095782][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.103079][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.111176][ T4351] bridge_slave_1: entered allmulticast mode [ 482.117835][ T4351] bridge_slave_1: entered promiscuous mode [ 482.142877][ T4512] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12907'. [ 482.146388][ T4351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.163057][ T4351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.187689][ T4351] team0: Port device team_slave_0 added [ 482.194763][ T4351] team0: Port device team_slave_1 added [ 482.235344][ T4351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.242381][ T4351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.268496][ T4351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.283805][ T4351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.290830][ T4351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.316949][ T4351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.366037][ T4351] hsr_slave_0: entered promiscuous mode [ 482.379591][ T4351] hsr_slave_1: entered promiscuous mode [ 482.388177][ T4351] debugfs: 'hsr0' already exists in 'hsr' [ 482.394050][ T4351] Cannot create hsr debugfs directory [ 482.480177][ T4537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12911'. [ 482.691618][ T4559] loop8: detected capacity change from 0 to 1024 [ 482.725329][ T4559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.764603][ T2840] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.827238][ T4577] veth1_to_bond: entered allmulticast mode [ 482.833351][ T4351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 482.851877][ T4351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 482.868041][ T4351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 482.883396][ T4576] veth1_to_bond: left allmulticast mode [ 482.889119][ T4351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 482.930732][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.937955][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.945285][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.952437][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.009900][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.019229][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.055624][ T4351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.076293][ T4607] loop8: detected capacity change from 0 to 256 [ 483.095311][ T4351] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.120175][ T4607] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 483.133496][ T1642] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.140750][ T1642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.162670][ T4602] loop7: detected capacity change from 0 to 8192 [ 483.179748][ T1642] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.182136][ T4614] EXT4-fs: Ignoring removed nobh option [ 483.186986][ T1642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.234686][ T4614] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 483.251885][ T4614] EXT4-fs (loop6): 1 truncate cleaned up [ 483.259232][ T4619] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779264) [ 483.267182][ T4619] FAT-fs (loop8): Filesystem has been set read-only [ 483.301266][ T4614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.336226][ T4619] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 483.345816][ T4619] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 483.419448][ T4351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.463870][T18271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.597287][ T4351] veth0_vlan: entered promiscuous mode [ 483.616329][ T4351] veth1_vlan: entered promiscuous mode [ 483.647174][ T4351] veth0_macvtap: entered promiscuous mode [ 483.666265][ T4351] veth1_macvtap: entered promiscuous mode [ 483.725414][ T4351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.750372][ T4351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.767925][ T340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.799367][ T340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.819208][ T4683] set_capacity_and_notify: 1 callbacks suppressed [ 483.819229][ T4683] loop6: detected capacity change from 0 to 128 [ 483.821572][ T340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.855362][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 483.855399][ T29] audit: type=1400 audit(999.827:4309): avc: denied { share } for pid=4673 comm="syz.8.12941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 483.874358][ T340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.929417][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12863'. [ 483.938437][ T4689] netlink: 'syz.3.12863': attribute type 29 has an invalid length. [ 483.946458][ T4689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12863'. [ 484.038921][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12949'. [ 484.079830][ T4709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12952'. [ 484.125127][ T29] audit: type=1326 audit(1000.097:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.12954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 484.180070][ T3412] IPVS: starting estimator thread 0... [ 484.229597][ T29] audit: type=1326 audit(1000.127:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.12954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 484.252827][ T29] audit: type=1326 audit(1000.127:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.12954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 484.269066][ T4721] IPVS: using max 1680 ests per chain, 84000 per kthread [ 484.276354][ T29] audit: type=1326 audit(1000.127:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.12954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 484.305825][ T29] audit: type=1326 audit(1000.127:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.12954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 484.328943][ T29] audit: type=1326 audit(1000.127:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.12954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 484.352302][ T29] audit: type=1326 audit(1000.127:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.12954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 484.375407][ T29] audit: type=1326 audit(1000.127:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.12954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 484.398489][ T29] audit: type=1326 audit(1000.127:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.4.12954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 485.453019][ T4865] loop3: detected capacity change from 0 to 1024 [ 485.461059][ T4865] EXT4-fs: inline encryption not supported [ 485.489537][ T4865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.575498][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.616567][ T4879] loop7: detected capacity change from 0 to 256 [ 485.662196][ T4879] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 485.765919][ T4877] lo speed is unknown, defaulting to 1000 [ 485.790631][ T4893] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 485.790659][ T4893] FAT-fs (loop7): Filesystem has been set read-only [ 485.790891][ T4893] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 485.790922][ T4893] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 485.908433][ T4900] loop8: detected capacity change from 0 to 1024 [ 485.911369][ T4900] EXT4-fs: Ignoring removed nobh option [ 485.911399][ T4900] EXT4-fs: inline encryption not supported [ 485.942714][ T4900] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.969051][ T4900] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.13005: Allocating blocks 385-513 which overlap fs metadata [ 486.082689][ T4899] EXT4-fs (loop8): pa ffff8881079d7770: logic 16, phys. 129, len 24 [ 486.090917][ T4899] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 486.190095][ T2840] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.621493][ T4948] loop8: detected capacity change from 0 to 8192 [ 486.818457][ T4972] loop8: detected capacity change from 0 to 256 [ 486.831419][ T4973] sd 0:0:1:0: device reset [ 486.864318][ T2840] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 486.872189][ T2840] FAT-fs (loop8): Filesystem has been set read-only [ 486.897488][ T2840] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 487.059894][ T4979] lo speed is unknown, defaulting to 1000 [ 487.132502][ T397] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.326527][ T4989] loop7: detected capacity change from 0 to 128 [ 487.405842][ T397] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.483485][ T397] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.531295][ T5001] netlink: 'syz.3.13033': attribute type 83 has an invalid length. [ 487.550808][ T397] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.643244][ T5011] loop3: detected capacity change from 0 to 256 [ 487.661490][ T4990] lo speed is unknown, defaulting to 1000 [ 487.699759][ T5014] loop7: detected capacity change from 0 to 128 [ 487.727671][ T397] bridge_slave_1: left allmulticast mode [ 487.733467][ T397] bridge_slave_1: left promiscuous mode [ 487.739281][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.749525][ T5014] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 322) [ 487.757790][ T5014] FAT-fs (loop7): Filesystem has been set read-only [ 487.780636][ T397] bridge_slave_0: left allmulticast mode [ 487.786510][ T397] bridge_slave_0: left promiscuous mode [ 487.792246][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.807229][ T5017] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 322) [ 487.991404][ T397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.021193][ T397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.037780][ T397] bond0 (unregistering): Released all slaves [ 488.217043][ T4990] chnl_net:caif_netlink_parms(): no params data found [ 488.254335][ T5036] loop7: detected capacity change from 0 to 512 [ 488.266423][ T397] hsr_slave_0: left promiscuous mode [ 488.296227][ T397] hsr_slave_1: left promiscuous mode [ 488.307951][ T5036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 488.340312][ T397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.347783][ T397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.373951][ T5036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.389759][ T397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.397183][ T397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.409420][ T397] veth1_macvtap: left promiscuous mode [ 488.414979][ T397] veth0_macvtap: left promiscuous mode [ 488.429009][ T397] veth1_vlan: left promiscuous mode [ 488.434294][ T397] veth0_vlan: left promiscuous mode [ 488.435197][ T5036] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13046: bg 0: block 217: padding at end of block bitmap is not set [ 488.539136][ T5036] EXT4-fs (loop7): Remounting filesystem read-only [ 488.569437][ T397] team0 (unregistering): Port device team_slave_1 removed [ 488.595077][ T397] team0 (unregistering): Port device team_slave_0 removed [ 488.597472][ T1995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.617553][ T5064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13052'. [ 488.720087][ T5067] lo: entered allmulticast mode [ 488.782575][ T5072] lo: left allmulticast mode [ 488.857333][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.864498][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.878995][ T4990] bridge_slave_0: entered allmulticast mode [ 488.888132][ T4990] bridge_slave_0: entered promiscuous mode [ 488.908467][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.915625][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.932032][ T4990] bridge_slave_1: entered allmulticast mode [ 488.942399][ T4990] bridge_slave_1: entered promiscuous mode [ 488.951766][ T5087] loop5: detected capacity change from 0 to 7 [ 489.071515][ T4990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.090654][ T4990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.107928][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 489.118043][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 489.155624][ T4990] team0: Port device team_slave_0 added [ 489.167185][ T4990] team0: Port device team_slave_1 added [ 489.181982][ T397] IPVS: stop unused estimator thread 0... [ 489.220883][ T4990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.227890][ T4990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.253993][ T4990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.328567][ T4990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.335716][ T4990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.361689][ T4990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.501507][ T4990] hsr_slave_0: entered promiscuous mode [ 489.509247][ T4990] hsr_slave_1: entered promiscuous mode [ 489.525536][ T4990] debugfs: 'hsr0' already exists in 'hsr' [ 489.531424][ T4990] Cannot create hsr debugfs directory [ 489.653637][ T5123] loop6: detected capacity change from 0 to 1024 [ 489.688750][ T5130] netlink: 'syz.7.13068': attribute type 1 has an invalid length. [ 489.703658][ T5123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 489.732492][ T5123] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.13066: bg 0: block 112: padding at end of block bitmap is not set [ 489.844383][ T5123] EXT4-fs (loop6): Remounting filesystem read-only [ 489.862275][ T5147] loop3: detected capacity change from 0 to 256 [ 489.937695][T18271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 490.025131][ T5156] loop6: detected capacity change from 0 to 512 [ 490.052994][ T5156] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 490.083167][ T5156] EXT4-fs (loop6): 1 truncate cleaned up [ 490.099214][ T5156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.247414][ T5182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13079'. [ 490.349966][ T4990] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 490.362509][ T4990] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 490.385551][ T4990] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 490.405180][ T4990] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 490.496799][ T4990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.525829][ T4990] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.551170][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.558307][ T397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.598115][ T397] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.605278][ T397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.633863][ T4990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.644493][ T4990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.740752][ T4990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.866061][T18271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.963603][ T4990] veth0_vlan: entered promiscuous mode [ 490.966244][ T5273] loop6: detected capacity change from 0 to 256 [ 490.999896][ T4990] veth1_vlan: entered promiscuous mode [ 491.042118][ T4990] veth0_macvtap: entered promiscuous mode [ 491.060869][ T4990] veth1_macvtap: entered promiscuous mode [ 491.090675][ T5283] loop3: detected capacity change from 0 to 512 [ 491.100296][ T4990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.108259][ T5283] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 491.118175][ T5283] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 491.134419][ T4990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.173540][ T397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.220605][ T397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.250286][T15540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.277183][ T397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.425408][ T5312] loop7: detected capacity change from 0 to 512 [ 491.432249][ T5316] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.450577][ T5312] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 491.513616][ T5312] EXT4-fs (loop7): invalid journal inode [ 491.524286][ T5312] EXT4-fs (loop7): can't get journal size [ 491.534261][ T5312] EXT4-fs (loop7): 1 truncate cleaned up [ 491.553090][ T5312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.581272][ T5312] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 1986356271 (only 1 groups) [ 491.622976][ T1995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.654710][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 491.654730][ T29] audit: type=1326 audit(1007.627:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.4.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 491.686972][ T5337] 9pnet: p9_errstr2errno: server reported unknown error  [ 491.707492][ T29] audit: type=1326 audit(1007.657:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.4.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 491.730587][ T29] audit: type=1326 audit(1007.657:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.4.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 491.753635][ T29] audit: type=1326 audit(1007.657:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.4.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 491.776676][ T29] audit: type=1326 audit(1007.657:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.4.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 491.799730][ T29] audit: type=1326 audit(1007.657:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.4.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 491.823041][ T29] audit: type=1326 audit(1007.657:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.4.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 491.846237][ T29] audit: type=1326 audit(1007.657:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.4.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 491.869273][ T29] audit: type=1326 audit(1007.657:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.4.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 491.912117][ T29] audit: type=1326 audit(1007.887:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.4.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4c20c9acb9 code=0x7ffc0000 [ 492.101038][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13118'. [ 492.184134][ T5389] lo speed is unknown, defaulting to 1000 [ 492.598981][ T5451] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13137'. [ 492.655104][ T5455] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 492.838244][ T5481] loop7: detected capacity change from 0 to 256 [ 492.920917][ T5481] FAT-fs (loop7): Directory bread(block 64) failed [ 492.963930][ T5481] FAT-fs (loop7): Directory bread(block 65) failed [ 492.995082][ T5481] FAT-fs (loop7): Directory bread(block 66) failed [ 493.002293][ T5481] FAT-fs (loop7): Directory bread(block 67) failed [ 493.026409][ T5481] FAT-fs (loop7): Directory bread(block 68) failed [ 493.045213][ T5481] FAT-fs (loop7): Directory bread(block 69) failed [ 493.059130][ T5497] loop1: detected capacity change from 0 to 1764 [ 493.071005][ T5481] FAT-fs (loop7): Directory bread(block 70) failed [ 493.085363][ T5481] FAT-fs (loop7): Directory bread(block 71) failed [ 493.098709][ T5481] FAT-fs (loop7): Directory bread(block 72) failed [ 493.134903][ T5481] FAT-fs (loop7): Directory bread(block 73) failed [ 493.270621][ T5523] xt_hashlimit: max too large, truncated to 1048576 [ 493.278233][ T5523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.371064][ T5481] syz.7.13144: attempt to access beyond end of device [ 493.371064][ T5481] loop7: rw=2049, sector=1800, nr_sectors = 128 limit=256 [ 493.494272][ T5539] loop6: detected capacity change from 0 to 128 [ 493.519328][ T5539] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 493.630915][ T12] kworker/u8:0: attempt to access beyond end of device [ 493.630915][ T12] loop7: rw=1, sector=1928, nr_sectors = 1924 limit=256 [ 493.704229][T18271] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 493.758014][ T5549] vfat: Unknown parameter '1844674407370955161518446744073709551615' [ 493.760447][ T5551] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 493.812111][ T5551] EXT4-fs (loop6): 1 truncate cleaned up [ 493.823626][ T5551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.003874][T18271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.120014][ T5564] futex_wake_op: syz.6.13167 tries to shift op by -1; fix this program [ 494.320291][ T5580] set_capacity_and_notify: 3 callbacks suppressed [ 494.320312][ T5580] loop6: detected capacity change from 0 to 2048 [ 494.346420][ T5580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.447824][T18271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.450301][ T5596] netlink: 'syz.7.13180': attribute type 34 has an invalid length. [ 494.522540][ T5603] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13185'. [ 494.535932][ T5602] loop6: detected capacity change from 0 to 1024 [ 494.581696][ T5602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 494.620468][ T5602] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.13183: lblock 0 mapped to illegal pblock 0 (length 1) [ 494.661256][ T5618] loop7: detected capacity change from 0 to 512 [ 494.668267][ T5618] EXT4-fs: inline encryption not supported [ 494.679004][ T5602] EXT4-fs (loop6): Remounting filesystem read-only [ 494.693924][ T5618] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 494.710632][ T5618] EXT4-fs (loop7): orphan cleanup on readonly fs [ 494.718035][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13194'. [ 494.719012][ T5618] EXT4-fs (loop7): 1 orphan inode deleted [ 494.733309][T29050] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1 [ 494.745980][ T5618] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 494.819995][ T5633] syzkaller1: entered promiscuous mode [ 494.825597][ T5633] syzkaller1: entered allmulticast mode [ 494.850353][ T1995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.875303][ T5637] syz_tun: entered allmulticast mode [ 494.884307][ T5636] syz_tun: left allmulticast mode [ 494.989494][ T5653] loop3: detected capacity change from 0 to 128 [ 495.230528][ T5665] loop3: detected capacity change from 0 to 512 [ 495.239722][ T5665] EXT4-fs: Ignoring removed i_version option [ 495.240718][T18271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 495.264267][ T5665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.300228][ T5669] loop6: detected capacity change from 0 to 128 [ 495.318952][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.355153][ T5669] syz.6.13213: attempt to access beyond end of device [ 495.355153][ T5669] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 495.477921][ T5668] syz.6.13213: attempt to access beyond end of device [ 495.477921][ T5668] loop6: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 495.497270][ T5685] atomic_op ffff888114025528 conn xmit_atomic 0000000000000000 [ 495.680882][ T5709] loop1: detected capacity change from 0 to 1024 [ 495.709663][ T5709] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 495.720758][ T5709] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 495.741076][ T5715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13225'. [ 495.763670][ T5709] JBD2: no valid journal superblock found [ 495.769484][ T5709] EXT4-fs (loop1): Could not load journal inode [ 495.896032][ T5731] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13229'. [ 495.905165][ T5731] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13229'. [ 495.951804][ T5731] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13229'. [ 495.960891][ T5731] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13229'. [ 496.461158][ T5788] netlink: 6 bytes leftover after parsing attributes in process `syz.1.13248'. [ 496.472176][ T5788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.659376][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 496.659391][ T29] audit: type=1326 audit(1012.638:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.13243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd09c7db58e code=0x7ffc0000 [ 496.697905][ T29] audit: type=1326 audit(1012.638:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.13243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd09c7db58e code=0x7ffc0000 [ 496.721145][ T29] audit: type=1326 audit(1012.638:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.13243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd09c7db58e code=0x7ffc0000 [ 496.744178][ T29] audit: type=1326 audit(1012.638:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.13243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd09c7db58e code=0x7ffc0000 [ 496.767230][ T29] audit: type=1326 audit(1012.638:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.13243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd09c7db58e code=0x7ffc0000 [ 496.790321][ T29] audit: type=1326 audit(1012.638:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.13243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd09c7db58e code=0x7ffc0000 [ 496.813509][ T29] audit: type=1326 audit(1012.638:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.13243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd09c7db58e code=0x7ffc0000 [ 496.836566][ T29] audit: type=1326 audit(1012.638:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.13243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd09c7db58e code=0x7ffc0000 [ 496.859690][ T29] audit: type=1326 audit(1012.638:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.13243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd09c7db58e code=0x7ffc0000 [ 496.882801][ T29] audit: type=1326 audit(1012.638:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.7.13243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd09c7db58e code=0x7ffc0000 [ 496.928550][ T5809] loop1: detected capacity change from 0 to 128 [ 496.993040][ T5815] tap0: tun_chr_ioctl cmd 1074025675 [ 496.998422][ T5815] tap0: persist enabled [ 497.003080][ T5815] tap0: tun_chr_ioctl cmd 1074025675 [ 497.008402][ T5815] tap0: persist disabled [ 497.165179][ T5833] sctp: [Deprecated]: syz.1.13268 (pid 5833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.165179][ T5833] Use struct sctp_sack_info instead [ 497.232969][ T5839] loop1: detected capacity change from 0 to 2048 [ 497.301940][ T5839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.331222][ T5839] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 497.346431][ T5839] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 497.358770][ T5839] EXT4-fs (loop1): This should not happen!! Data will be lost [ 497.358770][ T5839] [ 497.368524][ T5839] EXT4-fs (loop1): Total free blocks count 0 [ 497.374585][ T5839] EXT4-fs (loop1): Free/Dirty block details [ 497.380548][ T5839] EXT4-fs (loop1): free_blocks=2415919504 [ 497.386350][ T5839] EXT4-fs (loop1): dirty_blocks=16 [ 497.391555][ T5839] EXT4-fs (loop1): Block reservation details [ 497.397629][ T5839] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 497.444522][ T4990] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.461623][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13278'. [ 497.603012][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13278'. [ 497.694405][ T5892] loop6: detected capacity change from 0 to 512 [ 497.709565][ T5892] EXT4-fs: Ignoring removed orlov option [ 497.715343][ T5892] EXT4-fs: Ignoring removed i_version option [ 497.721423][ T5892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 497.758699][ T5892] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 497.766709][ T5892] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 497.795896][ T5892] EXT4-fs (loop6): orphan cleanup on readonly fs [ 497.802423][ T5892] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 497.817108][ T5892] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 497.824551][ T5892] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.13289: bg 0: block 40: padding at end of block bitmap is not set [ 497.839623][ T5892] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 497.848483][ T5892] EXT4-fs (loop6): 1 truncate cleaned up [ 497.854815][ T5892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.874724][ T5892] EXT4-fs (loop6): shut down requested (2) [ 497.896829][ T5892] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 497.912780][ T5892] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 497.921945][ T5892] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 497.936018][ T5911] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 497.964806][T18271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.975645][ T5911] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 498.015109][ T5911] EXT4-fs (loop3): 1 truncate cleaned up [ 498.053040][ T5911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.134760][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.499571][ T5939] EXT4-fs: Ignoring removed bh option [ 498.533110][ T5939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.597511][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.771994][ T5961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.041019][ T5961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.110083][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.211203][ T6002] program syz.1.13335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.489902][ T6015] set_capacity_and_notify: 3 callbacks suppressed [ 499.489924][ T6015] loop1: detected capacity change from 0 to 1024 [ 499.521713][ T6015] EXT4-fs: Ignoring removed bh option [ 499.554846][ T6015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.614172][ T4990] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.681834][ T6030] loop1: detected capacity change from 0 to 136 [ 499.774824][ T6040] netlink: 'syz.7.13349': attribute type 1 has an invalid length. [ 500.018770][ T6053] loop3: detected capacity change from 0 to 512 [ 500.056840][ T6053] EXT4-fs: Ignoring removed orlov option [ 500.062667][ T6053] EXT4-fs: Ignoring removed i_version option [ 500.068794][ T6053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 500.124707][ T6053] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 500.132735][ T6053] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 500.167936][ T6053] EXT4-fs (loop3): orphan cleanup on readonly fs [ 500.174517][ T6053] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 500.189175][ T6053] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 500.196587][ T6053] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.13357: bg 0: block 40: padding at end of block bitmap is not set [ 500.211414][ T6053] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 500.231501][ T6053] EXT4-fs (loop3): 1 truncate cleaned up [ 500.248686][ T6053] EXT4-fs (loop3): shut down requested (2) [ 500.299925][ T6053] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 500.344708][ T6053] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 500.374673][ T6053] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 500.460915][ T6088] 9p: Bad value for 'wfdno' [ 500.523717][ T6095] loop6: detected capacity change from 0 to 512 [ 500.546441][ T6095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 500.842006][ T6118] loop6: detected capacity change from 0 to 512 [ 500.868415][ T6118] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 500.877249][ T6118] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 500.910227][ T6118] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.13384: Allocating blocks 41-42 which overlap fs metadata [ 500.929727][ T6118] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.13384: Failed to acquire dquot type 1 [ 500.943529][ T6118] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 500.958965][ T6118] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.13384: corrupted inode contents [ 500.971889][ T6118] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.13384: mark_inode_dirty error [ 500.985086][ T6118] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.13384: corrupted inode contents [ 500.997614][ T6118] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.13384: mark_inode_dirty error [ 501.010589][ T6118] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.13384: corrupted inode contents [ 501.023149][ T6118] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 501.032670][ T6118] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.13384: corrupted inode contents [ 501.045501][ T6118] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.13384: mark_inode_dirty error [ 501.060103][ T6118] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 501.069703][ T6118] EXT4-fs (loop6): 1 truncate cleaned up [ 501.115280][T18271] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 501.134351][T18271] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 501.664068][ T6147] SELinux: security_context_str_to_sid (O*3!L;(x?8>${S7#!g.&[n٦9P9\ETWq3H*8YYLGR!I*' CDX [ 501.664068][ T6147] s0dnph5L0|qD81A{ꈆnK Ph[ZӉtg0vXhW͐ KңּPTr) failed with errno=-22 [ 501.778708][ T6154] loop7: detected capacity change from 0 to 256 [ 501.807482][ T1995] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 501.815185][ T1995] FAT-fs (loop7): Filesystem has been set read-only [ 501.860723][ T6143] lo speed is unknown, defaulting to 1000 [ 501.896097][ T1995] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 502.300742][ T6175] netlink: 'syz.4.13397': attribute type 83 has an invalid length. [ 502.311831][ T6143] chnl_net:caif_netlink_parms(): no params data found [ 502.404276][ T6181] loop3: detected capacity change from 0 to 128 [ 502.439950][ T6181] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 322) [ 502.448105][ T6181] FAT-fs (loop3): Filesystem has been set read-only [ 502.460554][ T6143] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.467715][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.475913][ T6143] bridge_slave_0: entered allmulticast mode [ 502.477694][ T6181] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 322) [ 502.483718][ T6143] bridge_slave_0: entered promiscuous mode [ 502.520218][ T6143] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.527380][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.535166][ T6143] bridge_slave_1: entered allmulticast mode [ 502.556609][ T6143] bridge_slave_1: entered promiscuous mode [ 502.592401][ T6143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.609433][ T6143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.672489][ T6143] team0: Port device team_slave_0 added [ 502.684756][ T6143] team0: Port device team_slave_1 added [ 502.699506][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 502.699525][ T29] audit: type=1326 audit(1018.678:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac207acb9 code=0x7ffc0000 [ 502.734019][ T29] audit: type=1326 audit(1018.708:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac207acb9 code=0x7ffc0000 [ 502.755862][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.757324][ T29] audit: type=1326 audit(1018.708:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac207acb9 code=0x7ffc0000 [ 502.764096][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.787113][ T29] audit: type=1326 audit(1018.708:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac207acb9 code=0x7ffc0000 [ 502.813051][ T6143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.836048][ T29] audit: type=1326 audit(1018.708:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac207acb9 code=0x7ffc0000 [ 502.869688][ T29] audit: type=1326 audit(1018.708:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac207acb9 code=0x7ffc0000 [ 502.881029][ T6143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.892691][ T29] audit: type=1326 audit(1018.708:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac207acb9 code=0x7ffc0000 [ 502.899757][ T6143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.922657][ T29] audit: type=1326 audit(1018.708:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac207acb9 code=0x7ffc0000 [ 502.948682][ T6143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.971605][ T29] audit: type=1326 audit(1018.708:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f6ac207acb9 code=0x7ffc0000 [ 503.005122][ T29] audit: type=1326 audit(1018.708:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.13403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac207acb9 code=0x7ffc0000 [ 503.100656][ T6143] hsr_slave_0: entered promiscuous mode [ 503.108058][ T6143] hsr_slave_1: entered promiscuous mode [ 503.114551][ T6143] debugfs: 'hsr0' already exists in 'hsr' [ 503.120383][ T6143] Cannot create hsr debugfs directory [ 503.161933][ T6192] lo speed is unknown, defaulting to 1000 [ 503.186657][ T6217] __nla_validate_parse: 3 callbacks suppressed [ 503.186728][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13411'. [ 503.318249][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 503.410368][ T6239] xt_hashlimit: max too large, truncated to 1048576 [ 503.427165][ T6239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.436572][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.443944][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.471066][ T6192] bridge_slave_0: entered allmulticast mode [ 503.478068][ T6192] bridge_slave_0: entered promiscuous mode [ 503.485942][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.493468][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.501492][ T6192] bridge_slave_1: entered allmulticast mode [ 503.508064][ T6192] bridge_slave_1: entered promiscuous mode [ 503.546171][ T6143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 503.571760][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.581279][ T6143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 503.592436][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.601615][ T6143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 503.624666][ T6143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 503.635205][ T6192] team0: Port device team_slave_0 added [ 503.648747][ T6192] team0: Port device team_slave_1 added [ 503.678134][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.685180][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.711315][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.723352][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.730510][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.756540][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.787433][ T6192] hsr_slave_0: entered promiscuous mode [ 503.793780][ T6192] hsr_slave_1: entered promiscuous mode [ 503.800030][ T6192] debugfs: 'hsr0' already exists in 'hsr' [ 503.805796][ T6192] Cannot create hsr debugfs directory [ 503.920441][ T6278] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 503.970068][ T6143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.977862][ T6280] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 503.978389][T11595] IPVS: starting estimator thread 0... [ 504.010778][ T6143] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.023338][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.030466][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.047785][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.054982][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.078878][ T6286] IPVS: using max 1776 ests per chain, 88800 per kthread [ 504.211680][ T6192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 504.249713][ T6192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 504.271603][ T6192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 504.289376][ T6192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 504.354432][ T6143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.436305][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.460290][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.479471][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.486646][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.509233][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.516350][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.600877][ T6355] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 504.707262][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.761581][ T6143] veth0_vlan: entered promiscuous mode [ 504.800355][ T6143] veth1_vlan: entered promiscuous mode [ 504.843905][ T6143] veth0_macvtap: entered promiscuous mode [ 504.863910][ T6143] veth1_macvtap: entered promiscuous mode [ 504.915746][ T6192] veth0_vlan: entered promiscuous mode [ 504.930417][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.950316][ T6143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.974357][T29050] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.983903][ T6192] veth1_vlan: entered promiscuous mode [ 505.005860][T29050] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.023485][ T6396] loop5: detected capacity change from 0 to 7 [ 505.054676][T29050] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.086352][ T6192] veth0_macvtap: entered promiscuous mode [ 505.151013][ T6192] veth1_macvtap: entered promiscuous mode [ 505.164974][T29050] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.191927][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.225232][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 505.235348][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 505.248847][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.293975][ T6416] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13440'. [ 505.309776][ T6420] netlink: 'syz.4.13442': attribute type 10 has an invalid length. [ 505.312095][ T340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.326541][ T6420] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 505.336821][ T6420] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 505.349303][ T6420] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 505.400871][ T340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.435397][ T340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.456530][ T340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.515822][ T6343] loop3: detected capacity change from 0 to 512 [ 505.555706][ T6438] loop5: detected capacity change from 0 to 164 [ 505.610382][ T6438] Unable to read rock-ridge attributes [ 505.633307][ T6438] Unable to read rock-ridge attributes [ 505.662311][ T6438] syz.5.13446: attempt to access beyond end of device [ 505.662311][ T6438] loop5: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 505.849366][ T6343] EXT4-fs mount: 6 callbacks suppressed [ 505.849428][ T6343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.929548][ T6463] loop5: detected capacity change from 0 to 1024 [ 505.949227][ T6463] /dev/loop5: Can't open blockdev [ 506.014475][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.286605][ T6492] loop5: detected capacity change from 0 to 512 [ 506.322379][ T6492] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 506.332334][ T6492] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 506.514069][ T6502] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 506.568761][ T3391] IPVS: starting estimator thread 0... [ 506.658686][ T6509] IPVS: using max 2160 ests per chain, 108000 per kthread [ 506.934559][ T6548] netlink: 'syz.0.13468': attribute type 15 has an invalid length. [ 507.149466][ T6573] loop3: detected capacity change from 0 to 1024 [ 507.162440][ T6575] netlink: 'syz.4.13473': attribute type 1 has an invalid length. [ 507.199172][ T6573] EXT4-fs: Ignoring removed orlov option [ 507.257997][ T6573] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 507.321249][ T6573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.386852][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.546388][ T6611] netlink: 63 bytes leftover after parsing attributes in process `syz.3.13480'. [ 507.755302][ T6640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6640 comm=syz.1.13488 [ 508.047337][ T6665] lo speed is unknown, defaulting to 1000 [ 508.090044][ T6681] netlink: 63 bytes leftover after parsing attributes in process `syz.4.13496'. [ 508.398791][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13503'. [ 508.440084][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 508.440101][ T29] audit: type=1326 audit(1024.418:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.13504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ea5acb9 code=0x7ffc0000 [ 508.469600][ T29] audit: type=1326 audit(1024.418:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.13504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ea5acb9 code=0x7ffc0000 [ 508.492707][ T29] audit: type=1326 audit(1024.418:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.13504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ea5acb9 code=0x7ffc0000 [ 508.512033][ T6721] vlan2: entered allmulticast mode [ 508.538857][ T6721] dummy0: entered allmulticast mode [ 508.555004][ T6721] batman_adv: batadv0: Adding interface: vlan2 [ 508.561290][ T6721] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.586615][ T6721] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 508.620511][ T29] audit: type=1326 audit(1024.418:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.13504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ea5acb9 code=0x7ffc0000 [ 508.643593][ T29] audit: type=1326 audit(1024.418:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.13504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f815ea5acb9 code=0x7ffc0000 [ 508.666675][ T29] audit: type=1326 audit(1024.418:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.13504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ea5acb9 code=0x7ffc0000 [ 508.689874][ T29] audit: type=1326 audit(1024.418:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.13504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ea5acb9 code=0x7ffc0000 [ 508.712933][ T29] audit: type=1326 audit(1024.418:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.13504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815ea5acb9 code=0x7ffc0000 [ 508.736022][ T29] audit: type=1326 audit(1024.418:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.13504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f815ea5acb9 code=0x7ffc0000 [ 508.759081][ T29] audit: type=1326 audit(1024.548:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6725 comm="syz.1.13504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f815ea5acb9 code=0x7ffc0000 [ 508.796757][ T6739] loop5: detected capacity change from 0 to 1024 [ 508.803838][ T6739] EXT4-fs: Ignoring removed nobh option [ 508.809545][ T6739] EXT4-fs: inline encryption not supported [ 508.858878][ T6739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.921107][ T6739] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.13509: Allocating blocks 385-513 which overlap fs metadata [ 508.984859][ T6739] EXT4-fs (loop5): pa ffff888107a84af0: logic 16, phys. 129, len 24 [ 508.992997][ T6739] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 509.092458][ T6143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.681560][ T6837] loop1: detected capacity change from 0 to 1024 [ 509.706440][ T6837] EXT4-fs: Ignoring removed nobh option [ 509.712114][ T6837] EXT4-fs: inline encryption not supported [ 509.840199][ T6837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.950093][ T6837] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.13530: Allocating blocks 385-513 which overlap fs metadata [ 510.029062][ T6837] EXT4-fs (loop1): pa ffff888107a84af0: logic 16, phys. 129, len 24 [ 510.037175][ T6837] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 510.191608][ T4990] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.348306][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13542'. [ 510.390041][ T6898] vlan2: entered allmulticast mode [ 510.398750][ T6898] dummy0: entered allmulticast mode [ 510.404525][ T6898] batman_adv: batadv0: Adding interface: vlan2 [ 510.410794][ T6898] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.436033][ T6898] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 511.039141][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13553'. [ 511.048157][ T6953] bond0: Unable to set down delay as MII monitoring is disabled [ 511.238353][ T6967] loop5: detected capacity change from 0 to 1024 [ 511.279231][ T6967] EXT4-fs: Ignoring removed mblk_io_submit option [ 511.292414][ T6969] loop1: detected capacity change from 0 to 2048 [ 511.318716][ T6967] EXT4-fs: Ignoring removed nobh option [ 511.324406][ T6967] EXT4-fs: inline encryption not supported [ 511.393159][ T6967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.393181][ T6969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.476387][ T6978] loop0: detected capacity change from 0 to 2048 [ 511.484444][ T6143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.504533][ T6978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.612516][ T4990] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.771554][ T7067] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 511.796386][ T7067] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 511.808955][ T7067] EXT4-fs (loop0): This should not happen!! Data will be lost [ 511.808955][ T7067] [ 511.818791][ T7067] EXT4-fs (loop0): Total free blocks count 0 [ 511.825056][ T7067] EXT4-fs (loop0): Free/Dirty block details [ 511.831046][ T7067] EXT4-fs (loop0): free_blocks=4096 [ 511.836334][ T7067] EXT4-fs (loop0): dirty_blocks=160 [ 511.841783][ T7067] EXT4-fs (loop0): Block reservation details [ 511.847799][ T7067] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 511.855979][ T6192] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.091337][ T7017] loop1: detected capacity change from 0 to 512 [ 512.148014][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.163809][ T7017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.173346][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.223231][ T7017] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 512.287841][ T7017] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 512.300287][ T7017] EXT4-fs (loop1): This should not happen!! Data will be lost [ 512.300287][ T7017] [ 512.310021][ T7017] EXT4-fs (loop1): Total free blocks count 0 [ 512.316101][ T7017] EXT4-fs (loop1): Free/Dirty block details [ 512.322059][ T7017] EXT4-fs (loop1): free_blocks=65280 [ 512.327424][ T7017] EXT4-fs (loop1): dirty_blocks=16 [ 512.332628][ T7017] EXT4-fs (loop1): Block reservation details [ 512.338660][ T7017] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 512.373869][ T7027] loop3: detected capacity change from 0 to 512 [ 512.399423][ T7027] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 512.434547][ T7027] EXT4-fs (loop3): 1 truncate cleaned up [ 512.442743][ T7030] syz_tun: entered allmulticast mode [ 512.468044][ T4990] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.481659][ T7027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.495516][ T7033] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13583'. [ 512.506875][ T7029] syz_tun: left allmulticast mode [ 512.630706][ T7050] loop0: detected capacity change from 0 to 1024 [ 512.640587][ T7050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 512.662502][ T7050] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.13588: lblock 0 mapped to illegal pblock 0 (length 1) [ 512.676647][ T7050] EXT4-fs (loop0): Remounting filesystem read-only [ 512.735407][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13591'. [ 512.744652][ T7058] bond0: Unable to set down delay as MII monitoring is disabled [ 512.915668][ T7068] loop1: detected capacity change from 0 to 256 [ 513.196597][ T6192] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 513.252613][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.281443][ T7085] loop1: detected capacity change from 0 to 128 [ 513.324893][ T7085] syz.1.13604: attempt to access beyond end of device [ 513.324893][ T7085] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 513.391021][ T7085] syz.1.13604: attempt to access beyond end of device [ 513.391021][ T7085] loop1: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 513.417075][ T7092] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13617'. [ 513.426132][ T7092] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13617'. [ 513.465928][ T7094] loop3: detected capacity change from 0 to 2048 [ 513.486035][ T7096] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13617'. [ 513.495169][ T7096] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13617'. [ 513.516541][ T7094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.552778][ T393] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 513.601354][ T393] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 513.613705][ T393] EXT4-fs (loop3): This should not happen!! Data will be lost [ 513.613705][ T393] [ 513.623497][ T393] EXT4-fs (loop3): Total free blocks count 0 [ 513.629542][ T393] EXT4-fs (loop3): Free/Dirty block details [ 513.635463][ T393] EXT4-fs (loop3): free_blocks=4096 [ 513.640763][ T393] EXT4-fs (loop3): dirty_blocks=32 [ 513.645995][ T393] EXT4-fs (loop3): Block reservation details [ 513.652068][ T393] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 513.700365][ T7102] loop0: detected capacity change from 0 to 512 [ 513.731755][ T393] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 513.738611][ T7102] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 513.818875][ T7102] EXT4-fs (loop0): invalid journal inode [ 513.833622][ T7102] EXT4-fs (loop0): can't get journal size [ 513.866140][ T7102] EXT4-fs (loop0): 1 truncate cleaned up [ 513.899617][ T7102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.953895][ T7102] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1986356271 (only 1 groups) [ 513.998041][ T6192] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.423727][ T7132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.496472][ T7140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.553718][ T340] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 514.556320][ T7140] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 514.585214][ T7140] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 514.594967][ T340] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 514.597802][ T7140] EXT4-fs (loop0): This should not happen!! Data will be lost [ 514.597802][ T7140] [ 514.610266][ T340] EXT4-fs (loop5): This should not happen!! Data will be lost [ 514.610266][ T340] [ 514.619721][ T7140] EXT4-fs (loop0): Total free blocks count 0 [ 514.629373][ T340] EXT4-fs (loop5): Total free blocks count 0 [ 514.635383][ T7140] EXT4-fs (loop0): Free/Dirty block details [ 514.641408][ T340] EXT4-fs (loop5): Free/Dirty block details [ 514.647318][ T7140] EXT4-fs (loop0): free_blocks=65280 [ 514.653260][ T340] EXT4-fs (loop5): free_blocks=4096 [ 514.653282][ T340] EXT4-fs (loop5): dirty_blocks=160 [ 514.658618][ T7140] EXT4-fs (loop0): dirty_blocks=16 [ 514.663816][ T340] EXT4-fs (loop5): Block reservation details [ 514.669095][ T7140] EXT4-fs (loop0): Block reservation details [ 514.669110][ T7140] EXT4-fs (loop0): i_reserved_data_blocks=16 [ 514.692373][ T340] EXT4-fs (loop5): i_reserved_data_blocks=10 [ 514.725415][ T6143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.791205][ T6192] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.934387][ T7176] EXT4-fs: Ignoring removed i_version option [ 514.957909][ T7176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.988567][ T4990] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.018058][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13646'. [ 515.125640][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 515.125660][ T29] audit: type=1326 audit(1031.106:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.5.13651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 515.159550][ T29] audit: type=1326 audit(1031.106:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.5.13651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 515.168982][ T7197] sctp: [Deprecated]: syz.5.13651 (pid 7197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.168982][ T7197] Use struct sctp_sack_info instead [ 515.182918][ T29] audit: type=1326 audit(1031.136:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.5.13651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 515.223230][ T29] audit: type=1326 audit(1031.146:5379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.5.13651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 515.246349][ T29] audit: type=1326 audit(1031.146:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.5.13651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 515.269402][ T29] audit: type=1326 audit(1031.146:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.5.13651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 515.292330][ T29] audit: type=1326 audit(1031.146:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.5.13651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 515.315343][ T29] audit: type=1326 audit(1031.146:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.5.13651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 515.338276][ T29] audit: type=1326 audit(1031.146:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.5.13651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 515.361313][ T29] audit: type=1326 audit(1031.146:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.5.13651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 515.442362][ T7210] EXT4-fs: inline encryption not supported [ 515.469742][ T7210] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 515.478020][ T7210] EXT4-fs (loop3): orphan cleanup on readonly fs [ 515.485537][ T7210] EXT4-fs (loop3): 1 orphan inode deleted [ 515.491890][ T1782] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 515.506101][ T7210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 515.589454][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.796371][ T7243] EXT4-fs: inline encryption not supported [ 515.850098][ T7243] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 515.858395][ T7243] EXT4-fs (loop5): orphan cleanup on readonly fs [ 515.866705][ T7243] EXT4-fs (loop5): 1 orphan inode deleted [ 515.872646][ T55] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 515.886612][ T7254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.899906][ T7243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 515.919268][ T7254] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: comm syz.0.13676: inode #4: comm syz.0.13676: iget: illegal inode # [ 515.933009][ T7254] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.13676: error while reading EA inode 4 err=-117 [ 515.965332][ T6192] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.075023][ T7273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 516.090132][ T6143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.092762][ T7273] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.13684: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.113051][ T7273] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 516.125467][ T7273] EXT4-fs (loop3): This should not happen!! Data will be lost [ 516.125467][ T7273] [ 516.136889][ T7273] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.13684: lblock 0 mapped to illegal pblock 0 (length 1) [ 516.181834][ T7279] EXT4-fs: inline encryption not supported [ 516.200061][ T7279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.253990][ T6143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.265805][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 516.351397][ T7300] set_capacity_and_notify: 12 callbacks suppressed [ 516.351415][ T7300] loop5: detected capacity change from 0 to 2048 [ 516.372873][ T7300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.389491][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.403235][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.479276][ T7308] loop1: detected capacity change from 0 to 512 [ 516.490450][ T7308] EXT4-fs: inline encryption not supported [ 516.510403][ T7308] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 516.522274][ T7308] EXT4-fs (loop1): orphan cleanup on readonly fs [ 516.531577][ T7308] EXT4-fs (loop1): 1 orphan inode deleted [ 516.537446][ T393] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 516.550219][ T7308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 516.648998][ T4990] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.869720][ T7344] loop3: detected capacity change from 0 to 512 [ 516.891608][ T7344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.920119][ T7344] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 516.936176][ T7344] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 516.948629][ T7344] EXT4-fs (loop3): This should not happen!! Data will be lost [ 516.948629][ T7344] [ 516.958296][ T7344] EXT4-fs (loop3): Total free blocks count 0 [ 516.964381][ T7344] EXT4-fs (loop3): Free/Dirty block details [ 516.970341][ T7344] EXT4-fs (loop3): free_blocks=65280 [ 516.975670][ T7344] EXT4-fs (loop3): dirty_blocks=16 [ 516.980863][ T7344] EXT4-fs (loop3): Block reservation details [ 516.986933][ T7344] EXT4-fs (loop3): i_reserved_data_blocks=16 [ 517.093925][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.105328][ T7360] syzkaller1: entered promiscuous mode [ 517.111092][ T7360] syzkaller1: entered allmulticast mode [ 517.144404][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.148855][ T6143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.165288][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.176827][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.248551][ T7362] infiniband syz2: set down [ 517.253317][ T7362] infiniband syz2: added ip6_vti0 [ 517.261990][T11595] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.275115][ T7362] RDS/IB: syz2: added [ 517.279289][ T7362] smc: adding ib device syz2 with port count 1 [ 517.285554][ T7362] smc: ib device syz2 port 1 has no pnetid [ 517.291851][ T3412] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.298757][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.344538][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.462268][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.497756][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.542912][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.620216][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.659295][ T7402] atomic_op ffff888120db9d28 conn xmit_atomic 0000000000000000 [ 517.672107][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.723106][ T7410] loop5: detected capacity change from 0 to 128 [ 517.733039][ T7410] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 517.741105][ T7410] FAT-fs (loop5): Filesystem has been set read-only [ 517.748301][ T7410] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 517.758416][ T7410] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 517.790269][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.850970][ T7362] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.910570][ T7424] loop0: detected capacity change from 0 to 1024 [ 517.930056][ T7424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 517.947072][ T7424] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.13747: lblock 0 mapped to illegal pblock 0 (length 1) [ 517.960977][ T7424] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 517.973425][ T7424] EXT4-fs (loop0): This should not happen!! Data will be lost [ 517.973425][ T7424] [ 517.984825][ T7424] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.13747: lblock 0 mapped to illegal pblock 0 (length 1) [ 518.029009][ T7430] loop3: detected capacity change from 0 to 1024 [ 518.044491][ T7430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.102174][ T4351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.118420][ T6192] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 518.293622][ T7456] loop1: detected capacity change from 0 to 512 [ 518.321770][ T7456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.404412][ T7468] loop5: detected capacity change from 0 to 1024 [ 518.439429][ T7468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.467041][ T4990] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.483323][ T7468] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.13766: inode #4: comm syz.5.13766: iget: illegal inode # [ 518.499649][ T7468] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.13766: error while reading EA inode 4 err=-117 [ 518.582702][ T6143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.760483][ T7507] loop5: detected capacity change from 0 to 512 [ 518.767541][ T7507] EXT4-fs: Ignoring removed orlov option [ 518.784241][ T7507] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 518.808918][ T7507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 518.842467][ T7507] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.13783: corrupted in-inode xattr: e_value size too large [ 518.870339][ T7507] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.13783: couldn't read orphan inode 15 (err -117) [ 518.884131][ T7507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.898824][ T7515] loop3: detected capacity change from 0 to 128 [ 518.912088][ T7511] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.926272][ T6143] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.937040][ T7515] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 518.944999][ T7515] FAT-fs (loop3): Filesystem has been set read-only [ 518.951809][ T7515] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 518.961441][ T7515] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 518.997660][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.026139][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.029867][ T7520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 519.057389][ T7520] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.13789: lblock 0 mapped to illegal pblock 0 (length 1) [ 519.080043][ T7520] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 519.092471][ T7520] EXT4-fs (loop1): This should not happen!! Data will be lost [ 519.092471][ T7520] [ 519.110687][ T7520] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.13789: lblock 0 mapped to illegal pblock 0 (length 1) [ 519.216885][ T4990] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 519.262956][ T7533] Unsupported NM flag settings (240) [ 519.301399][ T4990] Unsupported NM flag settings (240) [ 519.307219][ T4990] Unsupported NM flag settings (240) [ 519.312863][ T4990] Unsupported NM flag settings (240) [ 519.318431][ T4990] Unsupported NM flag settings (240) [ 519.324095][ T4990] Unsupported NM flag settings (240) [ 519.330785][ T4990] Unsupported NM flag settings (240) [ 519.336358][ T4990] Unsupported NM flag settings (240) [ 519.342179][ T4990] Unsupported NM flag settings (240) [ 519.749189][ T7551] netlink: 8772 bytes leftover after parsing attributes in process `syz.3.13802'. [ 519.937114][ T7572] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 519.953635][ T7572] EXT4-fs error (device loop5): dx_make_map:1296: inode #2: block 63: comm syz.5.13811: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 519.975899][ T7572] EXT4-fs error (device loop5) in do_split:2027: Corrupt filesystem [ 520.014575][ T6143] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.350119][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 520.350136][ T29] audit: type=1326 audit(1036.336:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.5.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 520.379445][ T29] audit: type=1326 audit(1036.336:5473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.5.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 520.411798][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13830'. [ 520.444786][ T29] audit: type=1326 audit(1036.386:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.5.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 520.468008][ T29] audit: type=1326 audit(1036.386:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.5.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 520.491126][ T29] audit: type=1326 audit(1036.386:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.5.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 520.514600][ T29] audit: type=1326 audit(1036.386:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.5.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 520.522802][ T7630] sctp: [Deprecated]: syz.3.13833 (pid 7630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.522802][ T7630] Use struct sctp_sack_info instead [ 520.538620][ T29] audit: type=1326 audit(1036.386:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.5.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 520.577201][ T29] audit: type=1326 audit(1036.386:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.5.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 520.600226][ T29] audit: type=1326 audit(1036.386:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.5.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 520.623210][ T29] audit: type=1326 audit(1036.386:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.5.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 520.980907][ T7652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.017722][ T6192] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.098956][ T7664] EXT4-fs: Ignoring removed bh option [ 521.114931][ T7664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.144306][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13849'. [ 521.153509][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13849'. [ 521.183147][ T6192] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.369473][ T7695] set_capacity_and_notify: 8 callbacks suppressed [ 521.369486][ T7695] loop0: detected capacity change from 0 to 128 [ 521.393723][ T7695] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 63: comm syz.0.13860: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 521.413104][ T7695] EXT4-fs error (device loop0) in do_split:2027: Corrupt filesystem [ 521.445955][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13861'. [ 521.455136][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13861'. [ 521.468287][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13862'. [ 521.670546][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13870'. [ 521.795769][ T7726] loop1: detected capacity change from 0 to 164 [ 522.334136][ T7758] loop1: detected capacity change from 0 to 8192 [ 522.349133][ T7758] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 522.448431][ T7773] netlink: 'syz.4.13892': attribute type 13 has an invalid length. [ 522.456563][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13892'. [ 522.472580][T29050] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.481239][ T7773] netlink: 'syz.4.13892': attribute type 13 has an invalid length. [ 522.489355][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13892'. [ 522.499655][T29050] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.507923][T29050] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.517857][T29050] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.597345][ T7782] SELinux: syz.3.13897 (7782) set checkreqprot to 1. This is no longer supported. [ 522.927325][ T7801] loop0: detected capacity change from 0 to 128 [ 522.934408][ T7801] EXT4-fs: Ignoring removed nobh option [ 524.022231][ T7871] loop1: detected capacity change from 0 to 512 [ 524.031457][ T7873] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 524.039112][ T7871] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 524.059865][ T7871] EXT4-fs (loop1): 1 truncate cleaned up [ 524.072877][ T7873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.116494][ T7877] Falling back ldisc for ttyS3. [ 524.221495][ T7890] loop0: detected capacity change from 0 to 2048 [ 524.253717][ T55] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 524.272346][ T55] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 524.284742][ T55] EXT4-fs (loop0): This should not happen!! Data will be lost [ 524.284742][ T55] [ 524.294556][ T55] EXT4-fs (loop0): Total free blocks count 0 [ 524.300624][ T55] EXT4-fs (loop0): Free/Dirty block details [ 524.306540][ T55] EXT4-fs (loop0): free_blocks=2415919104 [ 524.312453][ T55] EXT4-fs (loop0): dirty_blocks=16 [ 524.317590][ T55] EXT4-fs (loop0): Block reservation details [ 524.323629][ T55] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 524.349526][ T7898] bridge_slave_1: left allmulticast mode [ 524.355254][ T7898] bridge_slave_1: left promiscuous mode [ 524.361044][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.374720][ T7898] bridge_slave_0: left allmulticast mode [ 524.380520][ T7898] bridge_slave_0: left promiscuous mode [ 524.386291][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.418745][ T7902] loop3: detected capacity change from 0 to 512 [ 524.429937][ T7902] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 524.441535][ T7902] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 524.451757][ T7902] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.13949: Corrupt directory, running e2fsck is recommended [ 524.491846][ T7902] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 524.500536][ T7902] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.13949: corrupted in-inode xattr: invalid ea_ino [ 524.517260][ T7902] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.13949: couldn't read orphan inode 15 (err -117) [ 524.567166][ T7912] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 524.578739][ T7912] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 524.588969][ T7912] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm iou-wrk-7902: Corrupt directory, running e2fsck is recommended [ 524.622518][ T7914] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 524.980401][ T7941] __nla_validate_parse: 2 callbacks suppressed [ 524.980493][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13965'. [ 525.079491][ T7947] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 525.091959][ T7947] syzkaller0: linktype set to 768 [ 525.136930][ T7953] netlink: 'syz.5.13971': attribute type 83 has an invalid length. [ 525.309604][ T7967] loop5: detected capacity change from 0 to 512 [ 525.480298][ T7979] loop1: detected capacity change from 0 to 1024 [ 525.571239][ T7979] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.13982: lblock 0 mapped to illegal pblock 0 (length 1) [ 525.619818][ T7979] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 525.632165][ T7979] EXT4-fs (loop1): This should not happen!! Data will be lost [ 525.632165][ T7979] [ 525.658961][ T7995] loop5: detected capacity change from 0 to 512 [ 525.684369][ T7995] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 525.695994][ T7995] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 525.706175][ T7995] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.13989: Corrupt directory, running e2fsck is recommended [ 525.708687][ T7979] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.13982: lblock 3 mapped to illegal pblock 3 (length 3) [ 525.751067][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 525.751102][ T29] audit: type=1326 audit(1041.726:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb661acb9 code=0x7ffc0000 [ 525.780446][ T29] audit: type=1326 audit(1041.736:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb661acb9 code=0x7ffc0000 [ 525.803518][ T29] audit: type=1326 audit(1041.736:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb661acb9 code=0x7ffc0000 [ 525.822099][ T8003] EXT4-fs: Ignoring removed bh option [ 525.826867][ T29] audit: type=1326 audit(1041.736:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fabb661acb9 code=0x7ffc0000 [ 525.854838][ T29] audit: type=1326 audit(1041.736:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb661acb9 code=0x7ffc0000 [ 525.877871][ T29] audit: type=1326 audit(1041.736:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb661acb9 code=0x7ffc0000 [ 525.901869][ T29] audit: type=1326 audit(1041.736:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb661acb9 code=0x7ffc0000 [ 525.925166][ T29] audit: type=1326 audit(1041.736:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb661acb9 code=0x7ffc0000 [ 525.926573][ T7995] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 525.948235][ T29] audit: type=1326 audit(1041.736:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fabb65db58e code=0x7ffc0000 [ 525.979279][ T29] audit: type=1326 audit(1041.736:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7999 comm="syz.0.13991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabb661acb9 code=0x7ffc0000 [ 525.994083][T25525] loop3: p1 < > p3 p4 < > [ 526.009354][ T7995] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.13989: corrupted in-inode xattr: invalid ea_ino [ 526.015799][T25525] loop3: p3 size 33554432 extends beyond EOD, truncated [ 526.037606][ T7995] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.13989: couldn't read orphan inode 15 (err -117) [ 526.058641][ T7979] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 526.071148][ T7979] EXT4-fs (loop1): This should not happen!! Data will be lost [ 526.071148][ T7979] [ 526.092810][ T7991] loop3: p1 < > p3 p4 < > [ 526.102003][ T7991] loop3: p3 size 33554432 extends beyond EOD, truncated [ 526.118886][ T8010] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 526.173890][ T340] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 526.187719][ T340] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 526.200177][ T340] EXT4-fs (loop1): This should not happen!! Data will be lost [ 526.200177][ T340] [ 526.212683][ T340] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:5: lblock 4 mapped to illegal pblock 4 (length 2) [ 526.227426][ T340] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 526.239816][ T340] EXT4-fs (loop1): This should not happen!! Data will be lost [ 526.239816][ T340] [ 526.304928][ T8016] netlink: 'syz.4.13995': attribute type 13 has an invalid length. [ 526.312980][ T8016] netlink: 'syz.4.13995': attribute type 17 has an invalid length. [ 526.331238][T25525] udevd[25525]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 526.346538][T25528] udevd[25528]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 526.358936][ T4885] udevd[4885]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 526.371529][ T8016] erspan0: left promiscuous mode [ 526.388150][ T4885] udevd[4885]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 526.399954][T25528] udevd[25528]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 526.400519][T25525] udevd[25525]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 526.430171][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.440446][ T8016] dummy0: left promiscuous mode [ 526.448691][ T8016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.464312][ T8025] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 526.472068][ T3491] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.478402][ T3491] syz2: Port: 1 Link ACTIVE [ 526.483962][ T3472] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.004341][ T8047] set_capacity_and_notify: 2 callbacks suppressed [ 527.004391][ T8047] loop5: detected capacity change from 0 to 512 [ 527.151890][ T8054] loop0: detected capacity change from 0 to 128 [ 527.162429][ T8054] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 527.238850][ T52] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 527.357699][ T8066] loop3: detected capacity change from 0 to 128 [ 527.730991][ T8077] loop0: detected capacity change from 0 to 1024 [ 527.760213][ T8077] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.14027: bad orphan inode 134217728 [ 527.864631][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14022'. [ 527.873749][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14022'. [ 527.977986][ T8094] loop1: detected capacity change from 0 to 2048 [ 528.184705][ T8101] netlink: 'syz.1.14028': attribute type 3 has an invalid length. [ 528.303930][ T8111] loop5: detected capacity change from 0 to 512 [ 528.390732][ T8115] loop3: detected capacity change from 0 to 1024 [ 528.449446][ T8115] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.14031: lblock 0 mapped to illegal pblock 0 (length 1) [ 528.478214][ T52] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 528.495277][ T8115] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 528.507641][ T8115] EXT4-fs (loop3): This should not happen!! Data will be lost [ 528.507641][ T8115] [ 528.536734][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14035'. [ 528.545958][ T8123] netlink: 'syz.1.14035': attribute type 7 has an invalid length. [ 528.553861][ T8123] netlink: 'syz.1.14035': attribute type 8 has an invalid length. [ 528.561129][ T52] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 528.561948][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14035'. [ 528.574392][ T52] EXT4-fs (loop5): This should not happen!! Data will be lost [ 528.574392][ T52] [ 528.593100][ T52] EXT4-fs (loop5): Total free blocks count 0 [ 528.598467][ T8124] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.14031: lblock 3 mapped to illegal pblock 3 (length 3) [ 528.599204][ T52] EXT4-fs (loop5): Free/Dirty block details [ 528.619179][ T52] EXT4-fs (loop5): free_blocks=65280 [ 528.624520][ T52] EXT4-fs (loop5): dirty_blocks=1 [ 528.629615][ T52] EXT4-fs (loop5): Block reservation details [ 528.635646][ T52] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 528.677345][ T8124] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 528.689852][ T8124] EXT4-fs (loop3): This should not happen!! Data will be lost [ 528.689852][ T8124] [ 528.754535][ T8123] erspan0: entered promiscuous mode [ 528.785331][ T52] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 528.800498][ T8123] gretap0: entered promiscuous mode [ 528.806202][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 528.818585][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 528.818585][ T52] [ 528.839859][ T8123] debugfs: 'hsr1' already exists in 'hsr' [ 528.845685][ T8123] Cannot create hsr debugfs directory [ 528.859209][ T52] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:3: lblock 4 mapped to illegal pblock 4 (length 2) [ 528.884976][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 528.897318][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 528.897318][ T52] [ 528.953028][ T8148] xt_hashlimit: size too large, truncated to 1048576 [ 529.164730][ T8163] loop3: detected capacity change from 0 to 1024 [ 529.201383][ T8163] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.14046: lblock 3 mapped to illegal pblock 3 (length 3) [ 529.216240][ T8163] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 529.228654][ T8163] EXT4-fs (loop3): This should not happen!! Data will be lost [ 529.228654][ T8163] [ 529.251212][ T8163] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.14046: bg 0: block 112: padding at end of block bitmap is not set [ 529.327494][ T8168] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.14046: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 529.366374][ T8168] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117 [ 529.378916][ T8168] EXT4-fs (loop3): This should not happen!! Data will be lost [ 529.378916][ T8168] [ 529.413586][ T52] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 5) [ 529.449742][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 529.462400][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 529.462400][ T52] [ 529.520183][ T8185] netlink: 'syz.1.14054': attribute type 4 has an invalid length. [ 529.573217][ T8185] netlink: 'syz.1.14054': attribute type 4 has an invalid length. [ 529.787202][ T8213] loop1: detected capacity change from 0 to 1024 [ 529.812214][ T8213] EXT4-fs: Ignoring removed bh option [ 529.893981][ T8213] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 530.032562][ T8227] loop5: detected capacity change from 0 to 512 [ 530.059080][ T8227] EXT4-fs: Ignoring removed bh option [ 530.064753][ T8227] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 530.090735][ T8227] EXT4-fs (loop5): 1 truncate cleaned up [ 530.233301][ T8233] netlink: 'syz.4.14073': attribute type 4 has an invalid length. [ 530.267856][ T8233] netlink: 'syz.4.14073': attribute type 4 has an invalid length. [ 530.328057][ T8238] vfat: Unknown parameter 'y߸2{RKe¯oV -iAv|CK3u E><ȻL0xffffffffffffffff' [ 530.468929][ T8250] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14081'. [ 530.512273][ T6143] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 530.520246][ T6143] FAT-fs (loop5): Filesystem has been set read-only [ 530.580089][ T8256] netlink: 'syz.5.14085': attribute type 1 has an invalid length. [ 530.587968][ T8256] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.14085'. [ 530.681224][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14091'. [ 530.690473][ T8269] netlink: 164 bytes leftover after parsing attributes in process `syz.5.14091'. [ 531.185845][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14111'. [ 531.476195][ T8330] netlink: 'syz.5.14120': attribute type 2 has an invalid length. [ 531.484124][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14120'. [ 531.595635][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 531.595655][ T29] audit: type=1326 audit(1047.576:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.5.14125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 531.661377][ T29] audit: type=1326 audit(1047.606:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.5.14125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 531.684489][ T29] audit: type=1326 audit(1047.606:5536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.5.14125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 531.707590][ T29] audit: type=1326 audit(1047.606:5537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.5.14125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 531.730772][ T29] audit: type=1326 audit(1047.606:5538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.5.14125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 531.753821][ T29] audit: type=1326 audit(1047.616:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.5.14125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 531.776848][ T29] audit: type=1326 audit(1047.616:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.5.14125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 531.799910][ T29] audit: type=1326 audit(1047.616:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.5.14125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 531.822964][ T29] audit: type=1326 audit(1047.616:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.5.14125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 531.846091][ T29] audit: type=1326 audit(1047.616:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.5.14125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f912325acb9 code=0x7ffc0000 [ 532.255030][ T8355] set_capacity_and_notify: 2 callbacks suppressed [ 532.255046][ T8355] loop5: detected capacity change from 0 to 1024 [ 532.289510][ T8355] EXT4-fs: Ignoring removed nobh option [ 532.295271][ T8355] EXT4-fs: Ignoring removed bh option [ 532.333307][ T8361] loop3: detected capacity change from 0 to 1024 [ 532.392701][ T393] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.411645][ T8361] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.14134: lblock 0 mapped to illegal pblock 0 (length 4) [ 532.482341][ T393] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.492895][ T8370] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.14134: Freeing blocks not in datazone - block = 1, count = 3 [ 532.536766][ T393] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.632435][ T393] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.671520][ T8385] loop3: detected capacity change from 0 to 1024 [ 532.685955][ T8385] EXT4-fs: inline encryption not supported [ 532.713355][ T8385] EXT4-fs: Ignoring removed nobh option [ 532.719133][ T8385] EXT4-fs: Ignoring removed bh option [ 532.787629][ T393] bridge_slave_1: left allmulticast mode [ 532.793534][ T393] bridge_slave_1: left promiscuous mode [ 532.799309][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.858813][ T393] bridge_slave_0: left allmulticast mode [ 532.864870][ T393] bridge_slave_0: left promiscuous mode [ 532.870934][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.003567][ T393] erspan0 (unregistering): left promiscuous mode [ 533.019351][ T393] gretap0 (unregistering): left promiscuous mode [ 533.043463][ T8419] netlink: 'syz.3.14150': attribute type 4 has an invalid length. [ 533.082349][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.105341][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.125520][ T393] bond0 (unregistering): Released all slaves [ 533.184979][ T8428] loop5: detected capacity change from 0 to 512 [ 533.193878][ T8428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 533.207798][ T8420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.242389][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14151'. [ 533.267511][ T8375] lo speed is unknown, defaulting to 1000 [ 533.310022][ T393] hsr_slave_0: left promiscuous mode [ 533.315900][ T393] hsr_slave_1: left promiscuous mode [ 533.323269][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.330784][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.355410][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.362942][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.375403][ T393] veth1_macvtap: left promiscuous mode [ 533.381077][ T393] veth0_macvtap: left promiscuous mode [ 533.387151][ T393] veth1_vlan: left promiscuous mode [ 533.392760][ T393] veth0_vlan: left promiscuous mode [ 533.536874][ T393] team0 (unregistering): Port device team_slave_1 removed [ 533.547113][ T393] team0 (unregistering): Port device team_slave_0 removed [ 533.614012][ T8375] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.615688][ T8449] dvmrp6: left allmulticast mode [ 533.887704][ T8375] chnl_net:caif_netlink_parms(): no params data found [ 534.006711][ T8484] syzkaller0: entered allmulticast mode [ 534.025142][ T8484] syzkaller0 (unregistering): left allmulticast mode [ 534.079741][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.086963][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.094495][ T8375] bridge_slave_0: entered allmulticast mode [ 534.101742][ T8375] bridge_slave_0: entered promiscuous mode [ 534.112291][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.119469][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.129347][ T8375] bridge_slave_1: entered allmulticast mode [ 534.136286][ T8375] bridge_slave_1: entered promiscuous mode [ 534.166899][ T8506] validate_nla: 2 callbacks suppressed [ 534.166915][ T8506] netlink: 'syz.0.14166': attribute type 1 has an invalid length. [ 534.192650][ T8508] loop5: detected capacity change from 0 to 512 [ 534.204187][ T8506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.216642][ T8375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.231145][ T8375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.244103][ T8508] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.14167: corrupted inode contents [ 534.256881][ T8508] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.14167: mark_inode_dirty error [ 534.257715][ T8506] bond1: (slave geneve2): making interface the new active one [ 534.276630][ T8508] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.14167: corrupted inode contents [ 534.285590][ T8506] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 534.290433][ T8508] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.14167: mark_inode_dirty error [ 534.324533][ T8375] team0: Port device team_slave_0 added [ 534.338151][ T8375] team0: Port device team_slave_1 added [ 534.398931][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.406072][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.432099][ T8375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.449340][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.456504][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.482553][ T8375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.512711][ T8375] hsr_slave_0: entered promiscuous mode [ 534.519423][ T8375] hsr_slave_1: entered promiscuous mode [ 534.532919][ T8375] debugfs: 'hsr0' already exists in 'hsr' [ 534.538768][ T8375] Cannot create hsr debugfs directory [ 534.585388][ T8538] netlink: 'syz.5.14171': attribute type 12 has an invalid length. [ 534.593453][ T8538] netlink: 'syz.5.14171': attribute type 29 has an invalid length. [ 534.601445][ T8538] netlink: 148 bytes leftover after parsing attributes in process `syz.5.14171'. [ 534.610640][ T8538] netlink: 'syz.5.14171': attribute type 2 has an invalid length. [ 534.618550][ T8538] netlink: 'syz.5.14171': attribute type 1 has an invalid length. [ 534.684978][ T8375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.734577][ T8375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.763828][ T3006] ================================================================== [ 534.771975][ T3006] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 534.779961][ T3006] [ 534.782316][ T3006] write to 0xffff888107917d80 of 4 bytes by task 25525 on cpu 0: [ 534.790070][ T3006] d_make_discardable+0x4f/0xa0 [ 534.794954][ T3006] simple_unlink+0x68/0x80 [ 534.799408][ T3006] shmem_unlink+0x12d/0x140 [ 534.803952][ T3006] vfs_unlink+0x28b/0x440 [ 534.808296][ T3006] do_unlinkat+0x1e2/0x4b0 [ 534.812727][ T3006] __x64_sys_unlink+0x2e/0x40 [ 534.817428][ T3006] x64_sys_call+0x2f48/0x3000 [ 534.822134][ T3006] do_syscall_64+0xc0/0x2a0 [ 534.826669][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.832592][ T3006] [ 534.834936][ T3006] read to 0xffff888107917d80 of 4 bytes by task 3006 on cpu 1: [ 534.842496][ T3006] step_into_slowpath+0xea/0x4c0 [ 534.847464][ T3006] path_lookupat+0x330/0x500 [ 534.852083][ T3006] filename_lookup+0x190/0x390 [ 534.856889][ T3006] do_readlinkat+0x7d/0x340 [ 534.861434][ T3006] __x64_sys_readlink+0x47/0x60 [ 534.866324][ T3006] x64_sys_call+0x2af1/0x3000 [ 534.871036][ T3006] do_syscall_64+0xc0/0x2a0 [ 534.875581][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.881510][ T3006] [ 534.883851][ T3006] value changed: 0x08300080 -> 0x00004080 [ 534.889582][ T3006] [ 534.891923][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 534.898094][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 534.908972][ T3006] Tainted: [W]=WARN [ 534.912788][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 534.922885][ T3006] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 534.931783][ T8551] netlink: 'syz.3.14174': attribute type 13 has an invalid length. [ 534.939840][ T8551] netlink: 'syz.3.14174': attribute type 17 has an invalid length. [ 535.007054][ T8551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.041864][ T8375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.120875][ T8375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.256326][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.347831][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.412343][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.472752][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.528997][ T55] bridge_slave_1: left allmulticast mode [ 535.534752][ T55] bridge_slave_1: left promiscuous mode [ 535.540625][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.549170][ T55] bridge_slave_0: left allmulticast mode [ 535.554853][ T55] bridge_slave_0: left promiscuous mode [ 535.560557][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.641375][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.652642][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.662484][ T55] bond0 (unregistering): Released all slaves [ 535.768752][ T55] hsr_slave_0: left promiscuous mode [ 535.774766][ T55] hsr_slave_1: left promiscuous mode [ 535.781264][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.788779][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.796584][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.804131][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.816041][ T55] veth1_macvtap: left promiscuous mode [ 535.822737][ T55] veth0_macvtap: left promiscuous mode [ 535.828282][ T55] veth1_vlan: left promiscuous mode [ 535.833713][ T55] veth0_vlan: left promiscuous mode [ 535.908748][ T55] team0 (unregistering): Port device team_slave_1 removed [ 535.918672][ T55] team0 (unregistering): Port device team_slave_0 removed [ 536.172577][ T55] IPVS: stop unused estimator thread 0... [ 536.222155][ T55] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.270739][ T55] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.320125][ T55] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.373105][ T55] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.433136][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.482210][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.542273][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.603210][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.692327][ T55] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.732339][ T55] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.783393][ T55] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.832285][ T55] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.913243][ T55] bridge_slave_1: left allmulticast mode [ 536.919039][ T55] bridge_slave_1: left promiscuous mode [ 536.924768][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.934127][ T55] bridge_slave_0: left allmulticast mode [ 536.939898][ T55] bridge_slave_0: left promiscuous mode [ 536.945736][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.954849][ T55] bridge_slave_1: left allmulticast mode [ 536.960591][ T55] bridge_slave_1: left promiscuous mode [ 536.966270][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.974704][ T55] bridge_slave_0: left allmulticast mode [ 536.980421][ T55] bridge_slave_0: left promiscuous mode [ 536.986193][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.069805][ T393] smc: removing ib device syz2 [ 537.139707][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.149575][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.159068][ T55] bond0 (unregistering): Released all slaves [ 537.166753][ T55] bond1 (unregistering): Released all slaves [ 537.177293][ T55] bond2 (unregistering): Released all slaves [ 537.187728][ T55] bond3 (unregistering): Released all slaves [ 537.198856][ T55] bond4 (unregistering): Released all slaves [ 537.236064][ T55] bond1 (unregistering): (slave geneve2): Releasing active interface [ 537.253055][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.263846][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.274572][ T55] bond0 (unregistering): Released all slaves [ 537.284282][ T55] bond1 (unregistering): Released all slaves [ 537.361449][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.371717][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.381732][ T55] bond0 (unregistering): Released all slaves [ 537.441390][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.451315][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.460937][ T55] bond0 (unregistering): Released all slaves [ 537.468430][T11595] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.474749][T11595] syz2: Port: 1 Link DOWN [ 537.651980][ T55] hsr_slave_0: left promiscuous mode [ 537.657806][ T55] hsr_slave_1: left promiscuous mode [ 537.664152][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.671793][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.683430][ T55] hsr_slave_0: left promiscuous mode [ 537.689338][ T55] hsr_slave_1: left promiscuous mode [ 537.695073][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.702579][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.710831][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.718255][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.726098][ T55] batman_adv: batadv0: Removing interface: vlan2 [ 537.735333][ T55] hsr_slave_0: left promiscuous mode [ 537.741647][ T55] hsr_slave_1: left promiscuous mode [ 537.747435][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.755033][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.763034][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.770535][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.778305][ T55] batman_adv: batadv0: Removing interface: vlan2 [ 537.787866][ T55] hsr_slave_0: left promiscuous mode [ 537.793840][ T55] hsr_slave_1: left promiscuous mode [ 537.799827][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.807354][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.826361][ T55] veth0_macvtap: left allmulticast mode [ 537.832308][ T55] veth1_macvtap: left promiscuous mode [ 537.837869][ T55] veth0_macvtap: left promiscuous mode [ 537.843539][ T55] veth1_vlan: left promiscuous mode [ 537.849082][ T55] veth0_vlan: left promiscuous mode [ 537.854948][ T55] veth1_macvtap: left promiscuous mode [ 537.860544][ T55] veth0_macvtap: left promiscuous mode [ 537.866058][ T55] veth1_vlan: left promiscuous mode [ 537.871353][ T55] veth0_vlan: left promiscuous mode [ 537.972317][ T55] pimreg3 (unregistering): left allmulticast mode [ 538.064425][ T55] team0 (unregistering): Port device team_slave_1 removed [ 538.075086][ T55] team0 (unregistering): Port device team_slave_0 removed [ 538.137943][ T55] team0 (unregistering): Port device team_slave_1 removed [ 538.148380][ T55] team0 (unregistering): Port device team_slave_0 removed [ 538.207836][ T55] team0 (unregistering): Port device team_slave_1 removed [ 538.217762][ T55] team0 (unregistering): Port device team_slave_0 removed [ 539.007946][ T55] IPVS: stop unused estimator thread 0... [ 539.014684][ T55] IPVS: stop unused estimator thread 0...