last executing test programs: 2m27.227872365s ago: executing program 32 (id=716): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m16.860491611s ago: executing program 33 (id=974): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x3}}, 0x2c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080), 0x111, 0x1}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.208794783s ago: executing program 34 (id=1027): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x5}]}}, 0x0, 0x2a}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m41.311369257s ago: executing program 5 (id=1712): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000000040)="460910bc996c301c81", 0x9) 1m41.252614379s ago: executing program 5 (id=1713): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001200)='bic', 0x3) 1m41.21296059s ago: executing program 5 (id=1714): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xf}, {0x0, 0x9}, {0xffff, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) 1m41.169474381s ago: executing program 5 (id=1715): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m41.119571102s ago: executing program 5 (id=1717): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0xcf49, 0x10000, 0x0, 0x1bf, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/216, 0xd8}], 0x1, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 1m40.85733959s ago: executing program 5 (id=1722): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, r2, 0x1, 0x70bd28, 0x25dfdc06, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x0) 1m40.85536181s ago: executing program 35 (id=1722): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, r2, 0x1, 0x70bd28, 0x25dfdc06, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x0) 1m28.467844869s ago: executing program 8 (id=1967): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f00000002c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000f0ffff2300000024000000070700000000000000000002000000000a0000000000001203000000000000000000000d0000000000005f5f612e00"], 0x0, 0x43, 0x0, 0x8000001}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m28.306498383s ago: executing program 8 (id=1971): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x80002014}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) 1m28.229061726s ago: executing program 8 (id=1973): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fbdbdf251700000068000180080003000100000014000200636169663000000000000000000000000800030000000000080003000200000014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100b2c2e3d8edfbe43827950f4047cc5c81d1b560261ee2a6fb069ef0a5b4a522b0d50e5f9a00737ebdf03223d2fff0a6d5adc9a9fa9678777cde82c10073e4d242e32b08f51a92a09ecd182401e99f06924fa7888cf306c595", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e0000000000000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="24000180", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000002c0001"], 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 1m28.024108912s ago: executing program 8 (id=1979): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4105, 0x1009}], 0x1, 0x1, 0x8, 0x8) 1m27.710618912s ago: executing program 8 (id=1985): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d00)=[{{&(0x7f0000002100)={0xa, 0x4e22, 0x17, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002140)='7', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m27.412840521s ago: executing program 8 (id=1988): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socket$tipc(0x1e, 0x5, 0x0) r1 = io_uring_setup(0x1c21, &(0x7f0000000180)={0x0, 0x644a, 0x800, 0x0, 0xd4, 0x0, r0}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m27.410018941s ago: executing program 36 (id=1988): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socket$tipc(0x1e, 0x5, 0x0) r1 = io_uring_setup(0x1c21, &(0x7f0000000180)={0x0, 0x644a, 0x800, 0x0, 0xd4, 0x0, r0}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m9.683005062s ago: executing program 6 (id=2421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1m9.578830635s ago: executing program 6 (id=2427): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f00000004c0)="e4", 0x1, 0x5, 0x0, 0x2}]) 1m9.022743042s ago: executing program 6 (id=2437): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0xfc, 0x394}]}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500002800640072cd"], 0x0) 1m8.905393755s ago: executing program 6 (id=2442): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$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") chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m8.821247388s ago: executing program 6 (id=2445): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) 1m8.373436652s ago: executing program 6 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 1m8.361858282s ago: executing program 37 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) 58.460034694s ago: executing program 7 (id=2711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 58.433035685s ago: executing program 7 (id=2713): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYRES8, @ANYRES64], 0x4, 0x1296, &(0x7f0000001b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 57.983574079s ago: executing program 7 (id=2725): r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) shmdt(r1) 57.913527561s ago: executing program 7 (id=2729): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 57.882924822s ago: executing program 7 (id=2731): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x80000000, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = shmat(r0, &(0x7f0000f62000/0x1000)=nil, 0x7000) shmdt(r1) 57.812034914s ago: executing program 7 (id=2735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 57.788531405s ago: executing program 38 (id=2735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 43.51868531s ago: executing program 4 (id=3157): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2006, @random, 'gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) 43.451303412s ago: executing program 4 (id=3158): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 43.371403635s ago: executing program 4 (id=3160): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x800, 0xaa}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 43.257329968s ago: executing program 4 (id=3161): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110d, &(0x7f0000000540)={0x0, 0xd4ba}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="3a030000b2d227a9cb0231000d00833b", 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 42.728702724s ago: executing program 4 (id=3164): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 42.666070566s ago: executing program 4 (id=3165): read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 27.615626706s ago: executing program 39 (id=3165): read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.609175719s ago: executing program 0 (id=3990): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000001d00)=ANY=[], 0x381, 0x0) 2.343674107s ago: executing program 0 (id=3993): socket$kcm(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000810}, 0x24044010) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @loopback={0xffffffffffffff8d}, 0x16}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x40) 2.115768595s ago: executing program 0 (id=4000): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x2a, r0}, 0x10) 2.066107746s ago: executing program 0 (id=4001): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='a', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0x1000000000000000, 0x4}) 1.222818272s ago: executing program 3 (id=4015): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @mcast1, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x440e0) 1.172191673s ago: executing program 9 (id=4017): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.163336214s ago: executing program 3 (id=4018): syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.037109357s ago: executing program 3 (id=4020): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.030023518s ago: executing program 9 (id=4029): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x532, &(0x7f0000000b80)="$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") 981.438799ms ago: executing program 9 (id=4021): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd206, 0x8, 0x3, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, &(0x7f0000000480)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) io_uring_enter(r2, 0x6e69, 0x0, 0xe, 0x0, 0x0) 981.144609ms ago: executing program 0 (id=4022): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000140)={[{@block_validity}, {@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a"], 0x54}}, 0x4800) 893.391692ms ago: executing program 2 (id=4023): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x4, 0x1296, &(0x7f0000001b80)="$eJzs3c9rY0UcAPBv2nQ37bpN1XV1F8RBL4qQ3fbgyUuRXRArSrULKghvbaoh6Q+aUEgRt548Cf4Zoh69CeI/0IsXz4Ig0ovHPYhP2qRr0/SX/Qny+VwyzMx35jud18ALb3gbr341X59rVuayVgwUClFcGoriwxQpBmIwOtbipXu//PrsO++9/8bk1NSd6ZTuTr47/kpKafS5Hz/49Lvnf2pduff96A+XY31sYOPPid/Wr6/f2Pj726g1U62ZFhZbKUv3Fxdb2f1GNc3WmvVKSm83qlmzmmoLzepyT/tcY3FpqZ2yhdmrI0vL1WYzZQvtVK+2U6uQWsvtlH2c1RZSpVJJV0eCk5j55mGe5xF5PhSXIs/zfDhG4ko8FldjNMoxFo/HE/FkXIun4no8Hc/Eja1eF503AAAAAAAAAAAAAAAAAAAA/L8ccv6/4Pw/AAAAAAAAAAAAAAAAAAAAnL3d5/+LEd7/DwAAAAAAAAAAAAAAAAAAAOfskPf/7zr//7Lz/wAAAAAAAAAAAAAAAAAAAHAWSp2P6ZRKEfNfrMyszHQ+O/WTc1GLRlTjdpTjr9g6/d/RKd99ferO7bRlLG7NP+jGP1iZGeyNHx8qx1hhz/jx4YhIKfXGX46RnfETUY5re88/0Zl/V3wpXnxhM/7zTnwlyvHzR7EYjZiNKHRXvxX/2XhKr701Ndwbf3Oz374Gz3hbAAAA4DRV0iP99+9r3U6d9lJve6epe3+euj0LB/w+sOv+vBg3ixe1arY126v1rNGoLh+zcGn/cS6dbOS+QiEisthZMzry+/Tm5EccZ/tyO6V8dhQGjxF1/DSGDu5zgj2N4pH/mKv10lFSPfrudJNf212TlyN21Nz68M36oeP88fWOmlKc9nbvVRh4tNKB7mWWNdaOfLHFWp6faYZ9/4zD7dX65YOi9v/OKJzxdxLn599Nv+hMAAAAAAAAAAAA+C/2fPpvOCL6ngf8pK9m+/Hw3vD+kfef/ctzWCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+hs8cA") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xff6f}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 761.681497ms ago: executing program 1 (id=4024): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) 689.939668ms ago: executing program 1 (id=4025): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000540)="eb076286956a", 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 665.404569ms ago: executing program 2 (id=4026): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) acct(&(0x7f00000001c0)='./file0\x00') 664.925019ms ago: executing program 3 (id=4027): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 643.76765ms ago: executing program 0 (id=4028): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 643.33155ms ago: executing program 1 (id=4030): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r0, 0x0) mlock2(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfdfffffc, 0x20, 0xfffffdfb, 0x71}, &(0x7f0000000080), &(0x7f0000ff4000)) syz_clone(0x80201000, 0x0, 0x0, 0x0, 0x0, 0x0) 584.097292ms ago: executing program 3 (id=4031): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x1, 0x0, 0x4, 0x0, 0x0, 0x7}, 0xe) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4b, &(0x7f0000000040)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x40000060, 0x0) 563.197602ms ago: executing program 1 (id=4032): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 530.399224ms ago: executing program 2 (id=4033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x3, 0x0}}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12c1a, 0x1a111}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004000) 514.728644ms ago: executing program 3 (id=4034): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) read$watch_queue(r0, &(0x7f0000000100)=""/96, 0x60) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 433.348956ms ago: executing program 1 (id=4035): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 432.972706ms ago: executing program 2 (id=4036): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x12080c0, &(0x7f0000000240), 0x3, 0x45c, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 366.118719ms ago: executing program 1 (id=4037): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 183.530274ms ago: executing program 2 (id=4038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 96.473257ms ago: executing program 9 (id=4039): syz_open_procfs(0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2082) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004003, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@noload}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x200000, 0x4) 37.166038ms ago: executing program 2 (id=4040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfffd], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x9c, 0x2}}]}, 0x90}}, 0x20000000) 36.925539ms ago: executing program 9 (id=4041): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) 0s ago: executing program 9 (id=4042): r0 = syz_io_uring_setup(0x3426, &(0x7f0000000400)={0x0, 0x79af, 0x3181, 0xf, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): 000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.721830][ T8905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.847431][T10034] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.066053][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2466'. [ 147.180411][T10047] ip6_vti0 speed is unknown, defaulting to 1000 [ 147.208223][ T8471] usb 15-1: enqueue for inactive port 0 [ 147.213927][ T8471] usb 15-1: enqueue for inactive port 0 [ 147.257773][ T12] bridge_slave_1: left allmulticast mode [ 147.263670][ T12] bridge_slave_1: left promiscuous mode [ 147.278229][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.295681][ T12] bridge_slave_0: left allmulticast mode [ 147.302567][ T8471] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 147.314993][ T12] bridge_slave_0: left promiscuous mode [ 147.320720][T10080] set_capacity_and_notify: 1 callbacks suppressed [ 147.320734][T10080] loop9: detected capacity change from 0 to 1024 [ 147.327580][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.376005][T10080] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.423670][T10080] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: comm syz.9.2472: inode #3237228: comm syz.9.2472: iget: illegal inode # [ 147.438358][T10080] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.2472: error while reading EA inode 3237228 err=-117 [ 147.453915][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.465470][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.486278][ T12] bond0 (unregistering): Released all slaves [ 147.494365][ T12] bond1 (unregistering): Released all slaves [ 147.514089][ T8905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.548231][ T12] tipc: Left network mode [ 147.566572][ T12] IPVS: stopping master sync thread 7388 ... [ 147.641077][T10104] xt_CT: No such helper "snmp_trap" [ 147.656754][ T12] hsr_slave_0: left promiscuous mode [ 147.662762][ T12] hsr_slave_1: left promiscuous mode [ 147.668647][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.676529][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.751180][T10115] netlink: 'syz.9.2477': attribute type 10 has an invalid length. [ 147.760013][ T12] team0 (unregistering): Port device team_slave_1 removed [ 147.770577][T10115] netlink: 'syz.9.2477': attribute type 19 has an invalid length. [ 147.786260][T10115] netlink: 14536 bytes leftover after parsing attributes in process `syz.9.2477'. [ 147.837149][T10047] chnl_net:caif_netlink_parms(): no params data found [ 147.903033][T10126] veth1_to_bond: entered allmulticast mode [ 147.912152][T10125] veth1_to_bond: left allmulticast mode [ 148.011927][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.033796][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.048239][T10047] bridge_slave_0: entered allmulticast mode [ 148.054961][T10047] bridge_slave_0: entered promiscuous mode [ 148.061948][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.069304][T10047] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.076632][T10047] bridge_slave_1: entered allmulticast mode [ 148.085662][T10047] bridge_slave_1: entered promiscuous mode [ 148.144227][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.157026][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.215939][T10047] team0: Port device team_slave_0 added [ 148.273519][T10047] team0: Port device team_slave_1 added [ 148.290832][ T12] IPVS: stop unused estimator thread 0... [ 148.347052][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.376748][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.386552][T10176] loop7: detected capacity change from 0 to 512 [ 148.442385][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.465277][T10184] gretap0: entered promiscuous mode [ 148.473233][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.478914][T10176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.483254][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.519037][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.546630][T10176] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.564199][T10047] hsr_slave_0: entered promiscuous mode [ 148.572075][T10176] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.2494: corrupted inode contents [ 148.584405][T10047] hsr_slave_1: entered promiscuous mode [ 148.591020][T10176] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.2494: mark_inode_dirty error [ 148.602565][T10176] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.2494: corrupted inode contents [ 148.614842][T10176] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2494: mark_inode_dirty error [ 148.626364][T10190] EXT4-fs (loop7): shut down requested (1) [ 148.656224][ T7764] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.675961][T10192] team0 (unregistering): Port device team_slave_0 removed [ 148.716706][T10192] team0 (unregistering): Port device team_slave_1 removed [ 148.822712][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2507'. [ 149.130460][T10047] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.137773][T10258] loop9: detected capacity change from 0 to 128 [ 149.150234][T10047] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.181463][T10047] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.192032][T10047] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.294443][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.305964][T10047] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.371670][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.378864][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.394380][T10278] syzkaller1: entered promiscuous mode [ 149.408091][T10278] syzkaller1: entered allmulticast mode [ 149.422590][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.429720][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.579829][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.758872][T10047] veth0_vlan: entered promiscuous mode [ 149.766816][T10047] veth1_vlan: entered promiscuous mode [ 149.809973][T10047] veth0_macvtap: entered promiscuous mode [ 149.836905][T10047] veth1_macvtap: entered promiscuous mode [ 149.882046][T10341] loop7: detected capacity change from 0 to 128 [ 149.905977][T10047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.967927][T10047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.016291][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.035780][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.052412][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.090909][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.298950][T10385] sctp: [Deprecated]: syz.7.2541 (pid 10385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.298950][T10385] Use struct sctp_sack_info instead [ 150.386944][T10393] loop2: detected capacity change from 0 to 256 [ 150.520739][T10407] loop9: detected capacity change from 0 to 512 [ 150.545941][T10409] loop7: detected capacity change from 0 to 1024 [ 150.593196][T10409] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 150.607817][T10409] System zones: 0-1, 3-36 [ 150.613273][T10409] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2549: bad orphan inode 134217728 [ 150.624135][T10409] loop7: lost filesystem error report for type 5 error -117 [ 150.628203][T10409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.671867][T10423] IPVS: Error connecting to the multicast addr [ 150.752876][T10433] xt_hashlimit: size too large, truncated to 1048576 [ 150.774315][ T7764] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.907806][T10449] loop7: detected capacity change from 0 to 8192 [ 151.004900][T10464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2563'. [ 151.107535][ T28] kauditd_printk_skb: 428 callbacks suppressed [ 151.107554][ T28] audit: type=1400 audit(1774660902.782:2551): avc: denied { setopt } for pid=10469 comm="syz.0.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.150448][ T28] audit: type=1400 audit(1774660902.782:2552): avc: denied { bind } for pid=10469 comm="syz.0.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.187165][ T28] audit: type=1400 audit(1774660902.792:2553): avc: denied { read } for pid=10469 comm="syz.0.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.219791][T10477] netlink: 'syz.3.2565': attribute type 1 has an invalid length. [ 151.244436][ T28] audit: type=1400 audit(1774660902.862:2554): avc: denied { write } for pid=10469 comm="syz.0.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.433707][ T28] audit: type=1400 audit(1774660903.112:2555): avc: denied { watch watch_reads } for pid=10494 comm="syz.0.2570" path="/9/file1" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.936931][ T28] audit: type=1400 audit(1774660903.612:2556): avc: denied { name_bind } for pid=10550 comm="syz.3.2584" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 152.148564][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2592'. [ 152.176627][T10581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2592'. [ 152.218072][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2592'. [ 152.238254][T10581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2592'. [ 152.301438][ T28] audit: type=1400 audit(1774660903.982:2557): avc: denied { mounton } for pid=10595 comm="syz.9.2594" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 152.372236][ T28] audit: type=1400 audit(1774660904.032:2558): avc: denied { unmount } for pid=8905 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 152.391299][T10605] loop9: detected capacity change from 0 to 256 [ 152.412010][T10605] msdos: Bad value for 'uid' [ 152.418416][T10605] msdos: Bad value for 'uid' [ 152.425772][ T28] audit: type=1400 audit(1774660904.092:2559): avc: denied { execute } for pid=10607 comm="syz.0.2597" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 152.524682][T10616] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2601'. [ 152.621244][ T28] audit: type=1400 audit(1774660904.302:2560): avc: denied { getopt } for pid=10628 comm="syz.3.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.393442][ T70] tipc: Subscription rejected, illegal request [ 153.449984][ T4378] Bluetooth: hci0: command 0x1003 tx timeout [ 153.457130][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.583112][T10699] loop2: detected capacity change from 0 to 1024 [ 153.603691][T10699] EXT4-fs: inline encryption not supported [ 153.620344][T10699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.642199][T10699] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.2635: Allocating blocks 449-513 which overlap fs metadata [ 153.658746][T10699] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.2635: Allocating blocks 497-513 which overlap fs metadata [ 153.676033][T10699] EXT4-fs (loop2): pa ffff8881079adf50: logic 288, phys. 401, len 7 [ 153.684190][T10699] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 153.718597][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.768837][T10715] loop7: detected capacity change from 0 to 512 [ 153.790044][T10715] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 153.808389][T10715] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 153.828039][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 153.834489][ C0] EXT4-fs (loop7): initial error at time 1774660905: mb_free_blocks:2047: inode 11: block 64 [ 153.844725][ C0] EXT4-fs (loop7): last error at time 1774660905: mb_free_blocks:2047: inode 11: block 64 [ 153.868398][T10715] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #11: comm syz.7.2641: corrupted inode contents [ 153.881014][T10715] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.881276][T10715] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #11: comm syz.7.2641: mark_inode_dirty error [ 153.903704][T10715] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.903944][T10715] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2641: invalid indirect mapped block 1 (level 1) [ 153.950716][T10715] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.950934][T10715] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #11: comm syz.7.2641: corrupted inode contents [ 153.973912][T10715] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.974116][T10715] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 153.993045][T10715] loop7: lost filesystem error report for type 5 error -117 [ 153.993216][T10715] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #11: comm syz.7.2641: corrupted inode contents [ 154.025297][T10715] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 154.032451][T10715] EXT4-fs error (device loop7): ext4_truncate:4587: inode #11: comm syz.7.2641: mark_inode_dirty error [ 154.053084][T10715] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 154.053315][T10715] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 154.073917][T10715] loop7: lost filesystem error report for type 5 error -117 [ 154.074219][T10715] EXT4-fs (loop7): 1 truncate cleaned up [ 154.104428][T10715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.143231][T10729] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 154.153022][ T7764] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.258680][ T8474] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 154.266476][ T8474] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.324414][T10745] loop9: detected capacity change from 0 to 1024 [ 154.401117][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2656'. [ 154.419531][T10745] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.479255][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2655'. [ 154.760396][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2655'. [ 154.957403][T10780] loop0: detected capacity change from 0 to 1024 [ 154.984545][ T8905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.991437][T10780] EXT4-fs: Ignoring removed bh option [ 155.019286][T10780] EXT4-fs: Ignoring removed oldalloc option [ 155.038425][T10780] EXT4-fs: Ignoring removed nobh option [ 155.069704][T10780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.124466][T10780] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.2666: Allocating blocks 497-513 which overlap fs metadata [ 155.202571][T10790] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.2666: Allocating blocks 497-513 which overlap fs metadata [ 155.327102][T10790] EXT4-fs (loop0): pa ffff8881079ade70: logic 16, phys. 129, len 24 [ 155.335225][T10790] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 155.370352][T10047] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.474660][T10800] loop9: detected capacity change from 0 to 128 [ 155.551502][T10805] syz.9.2676: attempt to access beyond end of device [ 155.551502][T10805] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 155.601511][T10805] syz.9.2676: attempt to access beyond end of device [ 155.601511][T10805] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 155.642501][T10805] syz.9.2676: attempt to access beyond end of device [ 155.642501][T10805] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 155.678924][T10805] syz.9.2676: attempt to access beyond end of device [ 155.678924][T10805] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 155.705841][T10805] syz.9.2676: attempt to access beyond end of device [ 155.705841][T10805] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 155.735460][T10805] syz.9.2676: attempt to access beyond end of device [ 155.735460][T10805] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 155.767451][T10805] syz.9.2676: attempt to access beyond end of device [ 155.767451][T10805] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 155.806140][T10805] syz.9.2676: attempt to access beyond end of device [ 155.806140][T10805] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 155.839831][T10805] syz.9.2676: attempt to access beyond end of device [ 155.839831][T10805] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 155.854212][T10813] ip6_vti0 speed is unknown, defaulting to 1000 [ 155.883811][T10805] syz.9.2676: attempt to access beyond end of device [ 155.883811][T10805] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 156.132062][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 156.132079][ T28] audit: type=1400 audit(1774660907.812:2584): avc: denied { connect } for pid=10835 comm="syz.9.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.287125][ T28] audit: type=1400 audit(1774660907.962:2585): avc: denied { read } for pid=10849 comm="syz.0.2695" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.329271][T10852] ip6_vti0 speed is unknown, defaulting to 1000 [ 156.331324][ T28] audit: type=1400 audit(1774660907.962:2586): avc: denied { open } for pid=10849 comm="syz.0.2695" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.398061][ T28] audit: type=1400 audit(1774660907.992:2587): avc: denied { ioctl } for pid=10849 comm="syz.0.2695" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 156.436812][ T28] audit: type=1400 audit(1774660908.002:2588): avc: denied { ioctl } for pid=10812 comm="syz.7.2680" path="socket:[31896]" dev="sockfs" ino=31896 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.591281][T10865] loop0: detected capacity change from 0 to 764 [ 156.652713][T10868] netlink: 'syz.7.2705': attribute type 1 has an invalid length. [ 156.859915][T10887] loop7: detected capacity change from 0 to 8192 [ 157.040340][T10899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2715'. [ 157.145625][T10887] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 157.165412][T10887] FAT-fs (loop7): Filesystem has been set read-only [ 157.577039][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2742'. [ 157.637933][T10941] ip6_vti0 speed is unknown, defaulting to 1000 [ 157.719836][T10963] loop0: detected capacity change from 0 to 8192 [ 157.821068][T10974] loop9: detected capacity change from 0 to 1024 [ 157.829800][T10974] EXT4-fs: Ignoring removed bh option [ 157.838424][T10974] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 157.862400][T10974] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.872865][T10980] loop0: detected capacity change from 0 to 1024 [ 157.891447][T10974] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.2750: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 157.892356][T10980] EXT4-fs: inline encryption not supported [ 157.920629][T10974] EXT4-fs (loop9): Remounting filesystem read-only [ 157.936810][ T28] audit: type=1326 audit(1774660909.612:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.2.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca1f2c799 code=0x7fc00000 [ 157.970069][ T70] bridge_slave_1: left allmulticast mode [ 157.971367][ T28] audit: type=1326 audit(1774660909.612:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.2.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ca1f2c799 code=0x7fc00000 [ 157.976171][ T70] bridge_slave_1: left promiscuous mode [ 158.000890][ T28] audit: type=1326 audit(1774660909.612:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.2.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca1f2c799 code=0x7fc00000 [ 158.007608][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.030909][T10980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.048069][ T28] audit: type=1326 audit(1774660909.612:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.2.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca1f2c799 code=0x7fc00000 [ 158.049224][ T8905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.071927][ T28] audit: type=1326 audit(1774660909.612:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10903 comm="syz.2.2720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca1f2c799 code=0x7fc00000 [ 158.111450][ T70] bridge_slave_0: left allmulticast mode [ 158.117105][ T70] bridge_slave_0: left promiscuous mode [ 158.122936][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.163627][T10047] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.212476][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.222322][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.232352][ T70] bond0 (unregistering): Released all slaves [ 158.240402][ T70] bond1 (unregistering): Released all slaves [ 158.257907][T10993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.268815][T10941] chnl_net:caif_netlink_parms(): no params data found [ 158.300436][T10999] io-wq is not configured for unbound workers [ 158.389129][ T70] hsr_slave_0: left promiscuous mode [ 158.407711][ T70] hsr_slave_1: left promiscuous mode [ 158.432114][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.440163][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.504892][ T70] team0 (unregistering): Port device team_slave_1 removed [ 158.602002][T10941] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.615668][T10941] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.635539][T10941] bridge_slave_0: entered allmulticast mode [ 158.648756][T10941] bridge_slave_0: entered promiscuous mode [ 158.664633][T10941] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.678110][T10941] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.685444][T10941] bridge_slave_1: entered allmulticast mode [ 158.692091][T10941] bridge_slave_1: entered promiscuous mode [ 158.711241][T10941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.722412][T10941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.748272][T10941] team0: Port device team_slave_0 added [ 158.749682][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2766'. [ 158.756256][T10941] team0: Port device team_slave_1 added [ 158.780974][T10941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.788486][T10941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.815373][T10941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.828930][T10941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.836023][T10941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.857661][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2766'. [ 158.863960][T10941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.933382][T10941] hsr_slave_0: entered promiscuous mode [ 158.939887][T10941] hsr_slave_1: entered promiscuous mode [ 158.945888][T10941] debugfs: 'hsr0' already exists in 'hsr' [ 158.951956][T10941] Cannot create hsr debugfs directory [ 159.254077][T10941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.263376][T10941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.273030][T10941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.287336][T10941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.330326][T10941] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.337498][T10941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.344897][T10941] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.352051][T10941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.385205][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.393417][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.501831][T10941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.509705][T11111] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=279 sclass=netlink_tcpdiag_socket pid=11111 comm=syz.0.2779 [ 159.525337][T10941] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.554237][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.561486][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.593722][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.600859][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.793060][T10941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.843415][T11154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11154 comm=syz.3.2790 [ 159.907763][T11154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11154 comm=syz.3.2790 [ 159.933236][T11167] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.956825][T11154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11154 comm=syz.3.2790 [ 160.001631][T11154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11154 comm=syz.3.2790 [ 160.032110][T11167] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.045291][T11154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11154 comm=syz.3.2790 [ 160.062082][T11154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11154 comm=syz.3.2790 [ 160.084045][T11154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11154 comm=syz.3.2790 [ 160.100599][T11167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.128115][T11154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11154 comm=syz.3.2790 [ 160.147320][T10941] veth0_vlan: entered promiscuous mode [ 160.153611][T11154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11154 comm=syz.3.2790 [ 160.171386][T11167] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.201755][T10941] veth1_vlan: entered promiscuous mode [ 160.248697][ T311] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.257084][ T311] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.269913][T10941] veth0_macvtap: entered promiscuous mode [ 160.304100][ T311] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.325799][T10941] veth1_macvtap: entered promiscuous mode [ 160.335840][T11205] syzkaller1: entered promiscuous mode [ 160.344641][T11205] syzkaller1: entered allmulticast mode [ 160.374223][ T2469] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.399314][T10941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.441137][T10941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.468896][ T311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.488976][T11223] loop2: detected capacity change from 0 to 4096 [ 160.497801][ T311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.517860][T11223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.538298][ T311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.551637][ T311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.598758][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2808'. [ 160.618755][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.775279][T11260] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2816'. [ 160.881020][T11258] ip6_vti0 speed is unknown, defaulting to 1000 [ 161.260029][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 161.260046][ T28] audit: type=1326 audit(1774660912.942:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.9.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 161.318764][ T28] audit: type=1326 audit(1774660912.982:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.9.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 161.411411][ T28] audit: type=1326 audit(1774660912.992:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.9.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 161.457237][ T28] audit: type=1326 audit(1774660912.992:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.9.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 161.532165][ T28] audit: type=1326 audit(1774660912.992:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.9.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 161.570881][ T28] audit: type=1326 audit(1774660912.992:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.9.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 161.597302][ T28] audit: type=1326 audit(1774660912.992:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.9.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 161.631820][ T28] audit: type=1326 audit(1774660912.992:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.9.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 161.656028][ T28] audit: type=1326 audit(1774660912.992:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.9.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 161.679823][ T28] audit: type=1326 audit(1774660912.992:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.9.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 161.746887][T11356] loop4: detected capacity change from 0 to 4096 [ 161.778678][T11356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.832418][T11356] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2838: corrupted inode contents [ 161.844671][T11356] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.2838: mark_inode_dirty error [ 161.856538][T11356] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2838: corrupted inode contents [ 161.868667][T11356] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.2838: mark_inode_dirty error [ 161.881436][T11356] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2838: corrupted inode contents [ 161.896472][T11356] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.2838: mark_inode_dirty error [ 161.908107][T11356] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2838: corrupted inode contents [ 161.924422][T11356] EXT4-fs error (device loop4): ext4_truncate:4587: inode #15: comm syz.4.2838: mark_inode_dirty error [ 161.942834][T11356] EXT4-fs error (device loop4) in ext4_setattr:5983: Corrupt filesystem [ 161.957763][T11371] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.2838: corrupted inode contents [ 162.054541][T10941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.125220][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2842'. [ 162.570899][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 162.587202][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 162.672195][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2866'. [ 162.701189][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2866'. [ 162.742000][T11477] loop2: detected capacity change from 0 to 512 [ 162.787266][T11477] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2868: invalid indirect mapped block 256 (level 2) [ 162.829929][T11477] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.830497][T11477] EXT4-fs (loop2): 2 truncates cleaned up [ 162.839676][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 162.839701][ C1] EXT4-fs (loop2): initial error at time 1774660914: ext4_free_branches:1023: inode 11 [ 162.839735][ C1] EXT4-fs (loop2): last error at time 1774660914: ext4_free_branches:1023: inode 11 [ 162.846672][T11492] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2872'. [ 162.854581][T11477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.914868][ T70] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 162.953191][T11500] ip6_vti0 speed is unknown, defaulting to 1000 [ 162.960487][ T70] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 162.977572][ T70] EXT4-fs (loop2): This should not happen!! Data will be lost [ 162.977572][ T70] [ 162.998148][ T70] EXT4-fs (loop2): Total free blocks count 0 [ 163.026678][ T70] EXT4-fs (loop2): Free/Dirty block details [ 163.042182][ T70] EXT4-fs (loop2): free_blocks=0 [ 163.055376][ T70] EXT4-fs (loop2): dirty_blocks=4 [ 163.063880][ T70] EXT4-fs (loop2): Block reservation details [ 163.078389][ T70] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 163.093926][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.186034][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2881'. [ 163.273875][T11543] loop9: detected capacity change from 0 to 512 [ 163.307955][T11543] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2887: bg 0: block 393: padding at end of block bitmap is not set [ 163.323258][T11543] loop9: lost filesystem error report for type 5 error -117 [ 163.328030][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 163.341796][ C1] EXT4-fs (loop9): initial error at time 1774660915: ext4_validate_block_bitmap:441 [ 163.351221][ C1] EXT4-fs (loop9): last error at time 1774660915: ext4_validate_block_bitmap:441 [ 163.360442][T11543] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 163.369387][T11543] loop9: lost filesystem error report for type 5 error -117 [ 163.370214][T11543] EXT4-fs (loop9): 2 truncates cleaned up [ 163.383833][T11543] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.416868][ T8905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.479243][ T3422] IPVS: starting estimator thread 0... [ 163.504865][T11563] loop4: detected capacity change from 0 to 512 [ 163.545329][T11570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2894'. [ 163.559893][T11563] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.2892: invalid indirect mapped block 4294967295 (level 0) [ 163.578425][T11561] IPVS: using max 2448 ests per chain, 122400 per kthread [ 163.594718][T11570] loop0: detected capacity change from 0 to 512 [ 163.601693][T11570] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.609042][T11570] EXT4-fs: inline encryption not supported [ 163.614924][T11570] EXT4-fs: test_dummy_encryption option not supported [ 163.622116][T11563] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.624358][T11563] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.2892: invalid indirect mapped block 4294967295 (level 1) [ 163.633590][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 163.633615][ C0] EXT4-fs (loop4): initial error at time 1774660915: ext4_free_branches:1023: inode 16 [ 163.633652][ C0] EXT4-fs (loop4): last error at time 1774660915: ext4_free_branches:1023: inode 16 [ 163.673780][T11563] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.674308][T11563] EXT4-fs (loop4): 1 orphan inode deleted [ 163.689384][T11563] EXT4-fs (loop4): 1 truncate cleaned up [ 163.726038][T11563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.750274][T11563] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.2892: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 163.780760][T11581] ip6erspan0: entered allmulticast mode [ 163.786294][T11563] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.2892: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 163.855587][T10941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.865487][T11589] bridge0: port 3(syz_tun) entered blocking state [ 163.872467][T11589] bridge0: port 3(syz_tun) entered disabled state [ 163.892163][T11589] syz_tun: entered allmulticast mode [ 163.903760][T11589] syz_tun: entered promiscuous mode [ 163.915769][T11589] bridge0: port 3(syz_tun) entered blocking state [ 163.922331][T11589] bridge0: port 3(syz_tun) entered forwarding state [ 164.127483][T11617] loop4: detected capacity change from 0 to 512 [ 164.179225][T11623] bridge0: entered promiscuous mode [ 164.186588][T11623] macvlan2: entered promiscuous mode [ 164.224055][ T36] tipc: Subscription rejected, illegal request [ 164.250129][T11629] loop0: detected capacity change from 0 to 512 [ 164.291077][T11629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.306179][T11629] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.337168][ T8474] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 164.354128][ T8474] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.560181][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.650703][T10047] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.783028][T11673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.822275][T11673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.941415][T11679] program syz.3.2935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.609961][T11727] __nla_validate_parse: 4 callbacks suppressed [ 165.609975][T11727] netlink: 49 bytes leftover after parsing attributes in process `syz.4.2947'. [ 165.627712][T11727] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2947'. [ 165.636868][T11727] netlink: 49 bytes leftover after parsing attributes in process `syz.4.2947'. [ 165.680998][T11734] loop4: detected capacity change from 0 to 2048 [ 165.717312][T11734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.759281][T10941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.004036][T11779] netlink: 'syz.0.2968': attribute type 2 has an invalid length. [ 166.051162][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 166.076043][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 166.545231][T11841] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.568088][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.568284][ T4378] Bluetooth: hci0: command 0x1003 tx timeout [ 166.589849][T11841] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.630372][T11841] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.668799][T11850] ref_ctr_offset mismatch. inode: 0x51a offset: 0x0 ref_ctr_offset(old): 0x44 ref_ctr_offset(new): 0x0 [ 166.681549][T11841] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.736297][ T2469] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.748284][ T2469] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.764268][ T2469] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.772997][ T2469] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.864360][T11861] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.142543][T11892] loop9: detected capacity change from 0 to 512 [ 167.160103][T11892] EXT4-fs: Ignoring removed bh option [ 167.178425][T11892] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.218643][T11892] EXT4-fs (loop9): can't mount with commit=, fs mounted w/o journal [ 167.397859][T11909] loop7: detected capacity change from 0 to 7 [ 167.445225][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 167.445242][ T28] audit: type=1400 audit(1774660919.122:2698): avc: denied { append } for pid=11910 comm="syz.9.3016" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.483360][T11913] macvlan0: entered allmulticast mode [ 167.490316][T11913] macvlan0 (unregistering): left allmulticast mode [ 167.911231][T11919] loop4: detected capacity change from 0 to 512 [ 167.931950][T11919] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3020: bg 0: block 5: invalid block bitmap [ 167.947965][T11919] loop4: lost filesystem error report for type 5 error -117 [ 167.948032][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 167.961820][ C0] EXT4-fs (loop4): initial error at time 1774660919: ext4_validate_block_bitmap:432 [ 167.971266][ C0] EXT4-fs (loop4): last error at time 1774660919: ext4_validate_block_bitmap:432 [ 167.981650][T11919] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 167.990135][T11922] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.991697][T11919] loop4: lost filesystem error report for type 5 error -117 [ 167.997486][T11919] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3020: invalid indirect mapped block 3 (level 2) [ 168.029051][T11919] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.029278][T11919] EXT4-fs (loop4): 1 orphan inode deleted [ 168.051956][T11919] EXT4-fs (loop4): 1 truncate cleaned up [ 168.065465][T11919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.127065][T10941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.209822][ T1034] IPVS: starting estimator thread 0... [ 168.308166][T11936] IPVS: using max 2304 ests per chain, 115200 per kthread [ 168.463293][ T28] audit: type=1326 audit(1774660920.142:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69c62c799 code=0x7ffc0000 [ 168.497739][ T28] audit: type=1326 audit(1774660920.142:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69c62c799 code=0x7ffc0000 [ 168.535544][ T28] audit: type=1326 audit(1774660920.142:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff69c62c799 code=0x7ffc0000 [ 168.565382][ T28] audit: type=1326 audit(1774660920.142:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69c62c799 code=0x7ffc0000 [ 168.599722][ T28] audit: type=1326 audit(1774660920.142:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.4.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69c62c799 code=0x7ffc0000 [ 168.722510][T11980] loop4: detected capacity change from 0 to 512 [ 168.741717][T11980] EXT4-fs: Ignoring removed nobh option [ 168.755572][T11980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.776752][T11980] EXT4-fs (loop4): 1 truncate cleaned up [ 168.783197][T11980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.802186][ T28] audit: type=1400 audit(1774660920.482:2704): avc: denied { create } for pid=11979 comm="syz.4.3047" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 168.859578][ T28] audit: type=1400 audit(1774660920.542:2705): avc: denied { unlink } for pid=3317 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=3446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.896194][T10941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.902732][T11993] selinux_netlink_send: 7 callbacks suppressed [ 168.902747][T11993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11993 comm=syz.3.3050 [ 168.975644][T11999] loop5: detected capacity change from 0 to 7 [ 169.020522][T12003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3055'. [ 169.234629][T12032] SELinux: failed to load policy [ 169.240167][ T28] audit: type=1400 audit(1774660920.912:2706): avc: denied { load_policy } for pid=12031 comm="syz.2.3068" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 169.645864][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3079'. [ 169.661339][T12062] netlink: 'syz.3.3079': attribute type 18 has an invalid length. [ 169.669548][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 169.709203][ T28] audit: type=1400 audit(1774660921.392:2707): avc: denied { create } for pid=12064 comm="syz.3.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 169.748218][ T8480] kernel write not supported for file bpf-prog (pid: 8480 comm: kworker/0:13) [ 169.845636][T12076] loop2: detected capacity change from 0 to 1024 [ 169.885536][T12076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.964670][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.162721][T12106] xt_l2tp: unknown flags: 10 [ 170.285981][T12119] loop4: detected capacity change from 0 to 8192 [ 170.430482][T12119] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 170.438359][T12119] FAT-fs (loop4): Filesystem has been set read-only [ 170.506844][T12136] loop7: detected capacity change from 0 to 7 [ 170.592666][T12145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12145 comm=syz.3.3110 [ 170.766920][T12162] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 170.871773][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3121'. [ 170.930029][T12176] loop4: detected capacity change from 0 to 512 [ 170.953472][T12176] EXT4-fs: Ignoring removed orlov option [ 170.959675][T12176] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.966190][T12176] EXT4-fs: inline encryption not supported [ 170.973814][T12176] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.3124: corrupted in-inode xattr: e_value size too large [ 170.988521][T12176] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 170.988713][T12176] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3124: couldn't read orphan inode 15 (err -117) [ 171.009725][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 171.009745][ C0] EXT4-fs (loop4): initial error at time 1774660922: ext4_iget_extra_inode:5025: inode 15 [ 171.009792][ C0] EXT4-fs (loop4): last error at time 1774660922: ext4_iget_extra_inode:5025: inode 15 [ 171.036035][T12176] loop4: lost filesystem error report for type 5 error -117 [ 171.036843][T12176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.085148][T12180] loop9: detected capacity change from 0 to 8192 [ 171.149298][T10941] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.199898][T12193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.287750][T12201] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 171.341576][T12209] loop0: detected capacity change from 0 to 512 [ 171.354195][T12209] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.493706][T12219] loop0: detected capacity change from 0 to 1024 [ 171.518910][T12219] EXT4-fs: Ignoring removed orlov option [ 171.546370][T12219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.638285][T10047] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.709417][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3156'. [ 171.728869][T12225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.731586][T12246] bond2: Invalid ad_actor_system MAC address. [ 171.743787][T12246] bond2: option ad_actor_system: invalid value (4294967295) [ 171.752369][T12246] bond2 (unregistering): Released all slaves [ 171.758339][T12225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.424476][T12261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3162'. [ 172.449763][T12262] syzkaller1: entered promiscuous mode [ 172.468162][T12261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3162'. [ 172.485336][T12262] syzkaller1: entered allmulticast mode [ 172.519233][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 172.519246][ T28] audit: type=1400 audit(1774660924.202:2807): avc: denied { mounton } for pid=12263 comm="syz.4.3164" path="/96/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 172.575810][ T28] audit: type=1400 audit(1774660924.242:2808): avc: denied { unmount } for pid=10941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 173.330912][T12274] Process accounting resumed [ 173.347897][ T28] audit: type=1400 audit(1774660925.022:2809): avc: denied { mount } for pid=12276 comm="syz.2.3171" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 174.450120][T12338] netlink: 'syz.0.3192': attribute type 12 has an invalid length. [ 174.463867][T12301] syz.2.3178 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 174.498133][T12338] netlink: 'syz.0.3192': attribute type 29 has an invalid length. [ 174.505994][T12338] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3192'. [ 174.548342][T12338] netlink: 'syz.0.3192': attribute type 2 has an invalid length. [ 174.566260][T12301] CPU: 1 UID: 0 PID: 12301 Comm: syz.2.3178 Not tainted syzkaller #0 PREEMPT(full) [ 174.566288][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.566305][T12301] Call Trace: [ 174.566314][T12301] [ 174.566325][T12301] __dump_stack+0x1d/0x30 [ 174.566370][T12301] dump_stack_lvl+0x95/0xd0 [ 174.566400][T12301] dump_stack+0x15/0x1b [ 174.566427][T12301] dump_header+0x80/0x240 [ 174.566513][T12301] oom_kill_process+0x295/0x350 [ 174.566538][T12301] out_of_memory+0x97d/0xb80 [ 174.566567][T12301] try_charge_memcg+0x62e/0xa10 [ 174.566618][T12301] obj_cgroup_charge_pages+0x23/0xc0 [ 174.566746][T12301] __memcg_kmem_charge_page+0x9e/0x170 [ 174.566782][T12301] __alloc_frozen_pages_noprof+0x18a/0x360 [ 174.566884][T12301] alloc_pages_mpol+0xb3/0x260 [ 174.566923][T12301] alloc_pages_noprof+0x8f/0x130 [ 174.566987][T12301] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 174.567027][T12301] __kvmalloc_node_noprof+0x3d4/0x650 [ 174.567156][T12301] ? futex_hash_allocate+0x190/0x9d0 [ 174.567249][T12301] ? futex_hash_allocate+0x190/0x9d0 [ 174.567288][T12301] futex_hash_allocate+0x190/0x9d0 [ 174.567326][T12301] ? cap_task_prctl+0x13f/0x6e0 [ 174.567360][T12301] futex_hash_prctl+0xd8/0xf0 [ 174.567440][T12301] __se_sys_prctl+0xa3d/0x13f0 [ 174.567525][T12301] __x64_sys_prctl+0x67/0x80 [ 174.567552][T12301] x64_sys_call+0x2533/0x3020 [ 174.567667][T12301] do_syscall_64+0x12c/0x370 [ 174.567693][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.567716][T12301] RIP: 0033:0x7f8ca1f2c799 [ 174.567733][T12301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.567799][T12301] RSP: 002b:00007f8ca095e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 174.567817][T12301] RAX: ffffffffffffffda RBX: 00007f8ca21a6090 RCX: 00007f8ca1f2c799 [ 174.567831][T12301] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 174.567845][T12301] RBP: 00007f8ca1fc2c99 R08: 0000000000000000 R09: 0000000000000000 [ 174.567869][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.567880][T12301] R13: 00007f8ca21a6128 R14: 00007f8ca21a6090 R15: 00007fffdc2a5408 [ 174.567903][T12301] [ 174.567911][T12301] memory: usage 307200kB, limit 307200kB, failcnt 416 [ 174.663916][T12338] netlink: 23 bytes leftover after parsing attributes in process `syz.0.3192'. [ 174.755330][T12301] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 174.848270][T12301] kmem: usage 299004kB, limit 9007199254740988kB, failcnt 0 [ 174.874064][T12301] Memory cgroup stats for /syz2: [ 174.874323][T12301] cache 0 [ 174.898302][T12301] rss 8388608 [ 174.907247][T12301] shmem 0 [ 174.915603][T12301] mapped_file 0 [ 174.948151][T12301] dirty 0 [ 174.951127][T12301] writeback 0 [ 174.954427][T12301] workingset_refault_anon 46 [ 175.007721][T12301] workingset_refault_file 265 [ 175.017803][T12301] swap 712704 [ 175.041359][T12301] swapcached 741376 [ 175.045443][T12301] pgpgin 104442 [ 175.051320][T12355] SELinux: failed to load policy [ 175.056399][T12301] pgpgout 102393 [ 175.073689][T12301] pgfault 123120 [ 175.082471][T12301] pgmajfault 26 [ 175.096982][T12301] inactive_anon 0 [ 175.114199][T12301] active_anon 0 [ 175.131877][T12301] inactive_file 0 [ 175.152040][T12301] active_file 4096 [ 175.155810][T12301] unevictable 8388608 [ 175.186404][T12301] hierarchical_memory_limit 314572800 [ 175.204362][T12301] hierarchical_memsw_limit 9223372036854771712 [ 175.220478][T12367] syzkaller0: entered promiscuous mode [ 175.226340][T12367] syzkaller0: entered allmulticast mode [ 175.238052][T12301] total_cache 0 [ 175.241533][T12301] total_rss 8388608 [ 175.255704][T12301] total_shmem 0 [ 175.259309][T12301] total_mapped_file 0 [ 175.263328][T12301] total_dirty 0 [ 175.277679][T12301] total_writeback 0 [ 175.281601][T12301] total_workingset_refault_anon 46 [ 175.287151][T12301] total_workingset_refault_file 265 [ 175.308376][T12301] total_swap 712704 [ 175.312551][T12301] total_swapcached 741376 [ 175.316901][T12301] total_pgpgin 104442 [ 175.338055][T12301] total_pgpgout 102393 [ 175.342200][T12301] total_pgfault 123120 [ 175.346306][T12301] total_pgmajfault 26 [ 175.371494][T12301] total_inactive_anon 0 [ 175.375706][T12301] total_active_anon 0 [ 175.387106][T12301] total_inactive_file 0 [ 175.391528][T12301] total_active_file 4096 [ 175.396906][T12301] total_unevictable 8388608 [ 175.401942][T12301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3178,pid=12297,uid=0 [ 175.434299][T12301] Memory cgroup out of memory: Killed process 12297 (syz.2.3178) total-vm:96212kB, anon-rss:9416kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 175.704988][T12387] Invalid ELF header magic: != ELF [ 175.708205][ T28] audit: type=1400 audit(1774660927.382:2810): avc: denied { module_load } for pid=12385 comm="syz.0.3199" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=40589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 175.972135][T12329] kexec: Could not allocate control_code_buffer [ 176.053247][T12396] loop2: detected capacity change from 0 to 4096 [ 176.164171][T12396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.367321][ T28] audit: type=1326 audit(1774660928.042:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd62c799 code=0x7ffc0000 [ 176.418928][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.420883][ T28] audit: type=1326 audit(1774660928.042:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd62c799 code=0x7ffc0000 [ 176.451867][ T28] audit: type=1326 audit(1774660928.042:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd62c799 code=0x7ffc0000 [ 176.487578][T12407] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 176.495530][T12407] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.553405][ T28] audit: type=1326 audit(1774660928.042:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd62c799 code=0x7ffc0000 [ 176.620255][ T28] audit: type=1326 audit(1774660928.082:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f28cd62c799 code=0x7ffc0000 [ 176.647371][ T28] audit: type=1326 audit(1774660928.082:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.0.3205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd62c799 code=0x7ffc0000 [ 176.715746][T12421] SET target dimension over the limit! [ 176.941550][T12436] netlink: 25 bytes leftover after parsing attributes in process `syz.9.3220'. [ 176.962720][T12436] netlink: 'syz.9.3220': attribute type 4 has an invalid length. [ 177.156819][T12452] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3229'. [ 177.218454][T12458] loop2: detected capacity change from 0 to 128 [ 177.613815][T12481] loop9: detected capacity change from 0 to 512 [ 177.624994][T12481] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3240: inode has both inline data and extents flags [ 177.649711][T12481] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.649883][T12481] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3240: couldn't read orphan inode 15 (err -117) [ 177.659085][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 177.659121][ C0] EXT4-fs (loop9): initial error at time 1774660929: ext4_orphan_get:1391: inode 15 [ 177.659146][ C0] EXT4-fs (loop9): last error at time 1774660929: ext4_orphan_get:1391: inode 15 [ 177.698099][T12481] loop9: lost filesystem error report for type 5 error -117 [ 177.699842][T12481] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.728193][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 177.728205][ T28] audit: type=1400 audit(1774660929.412:2843): avc: denied { watch_reads } for pid=12480 comm="syz.9.3240" path="/300/file0" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.772793][ T28] audit: type=1400 audit(1774660929.452:2844): avc: denied { bind } for pid=12483 comm="syz.0.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.793054][ T8905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.998186][T12498] loop9: detected capacity change from 0 to 512 [ 178.025200][T12498] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.037301][T12498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.062112][T12498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.075009][T12498] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.108192][ T28] audit: type=1400 audit(1774660929.782:2845): avc: denied { append } for pid=12497 comm="syz.9.3247" name="file2" dev="loop9" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.172492][ T8905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.193619][T12512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.233687][T12512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.718828][T12545] netlink: 'syz.9.3263': attribute type 7 has an invalid length. [ 178.738894][T12545] netlink: 'syz.9.3263': attribute type 7 has an invalid length. [ 178.924977][ T28] audit: type=1326 audit(1774660930.602:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53580c799 code=0x7ffc0000 [ 178.976524][ T28] audit: type=1326 audit(1774660930.602:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53580c799 code=0x7ffc0000 [ 179.038075][ T28] audit: type=1326 audit(1774660930.602:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53580c799 code=0x7ffc0000 [ 179.101729][T12567] : renamed from vlan0 [ 179.120663][ T28] audit: type=1326 audit(1774660930.602:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53580c799 code=0x7ffc0000 [ 179.155840][ T28] audit: type=1326 audit(1774660930.602:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc53580c799 code=0x7ffc0000 [ 179.181549][ T28] audit: type=1326 audit(1774660930.602:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53580c799 code=0x7ffc0000 [ 179.205348][ T28] audit: type=1326 audit(1774660930.602:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.3.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53580c799 code=0x7ffc0000 [ 179.565722][T12587] loop9: detected capacity change from 0 to 764 [ 179.610310][ T4378] Bluetooth: hci0: command 0x1003 tx timeout [ 179.616423][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 179.662083][T12594] loop9: detected capacity change from 0 to 1024 [ 179.675565][T12594] EXT4-fs: Ignoring removed oldalloc option [ 179.695841][T12594] EXT4-fs: Ignoring removed bh option [ 179.760876][T12594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.855059][ T8905] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.908131][ T8474] Process accounting resumed [ 180.105419][T12648] netlink: 'syz.9.3295': attribute type 10 has an invalid length. [ 180.723658][T12729] netlink: 25 bytes leftover after parsing attributes in process `syz.9.3305'. [ 180.744954][T12729] netlink: 140 bytes leftover after parsing attributes in process `syz.9.3305'. [ 180.764629][T12729] netlink: 25 bytes leftover after parsing attributes in process `syz.9.3305'. [ 181.662332][T12771] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3323'. [ 181.898937][T12782] loop2: detected capacity change from 0 to 512 [ 181.913364][T12782] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.927795][T12782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.950648][T12782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.976734][T12782] ext4 filesystem being mounted at /561/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.093493][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.209169][T12789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.321777][T12794] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3332'. [ 182.571119][T12819] ip6_vti0 speed is unknown, defaulting to 1000 [ 182.723380][T12835] netlink: 'syz.3.3350': attribute type 7 has an invalid length. [ 182.761901][ T2469] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.835242][ T2469] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.942910][ T2469] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.999246][ T2469] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.114262][ T2469] bridge_slave_1: left allmulticast mode [ 183.120495][ T2469] bridge_slave_1: left promiscuous mode [ 183.134636][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.153827][ T2469] bridge_slave_0: left allmulticast mode [ 183.159747][ T2469] bridge_slave_0: left promiscuous mode [ 183.170930][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.414433][ T2469] hsr_slave_0: left promiscuous mode [ 183.430885][ T2469] hsr_slave_1: left promiscuous mode [ 183.436642][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.479745][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 183.479764][ T28] audit: type=1326 audit(1774660935.162:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.9.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 183.493732][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.519200][T12883] loop2: detected capacity change from 0 to 128 [ 183.564466][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.579952][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.605996][ T28] audit: type=1326 audit(1774660935.162:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.9.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 183.649517][ T2469] veth1_macvtap: left promiscuous mode [ 183.655153][ T2469] veth0_macvtap: left promiscuous mode [ 183.675277][ T28] audit: type=1326 audit(1774660935.162:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.9.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 183.679109][ T2469] veth1_vlan: left promiscuous mode [ 183.738068][ T28] audit: type=1326 audit(1774660935.162:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.9.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 183.751095][ T2469] veth0_vlan: left promiscuous mode [ 183.789611][T12904] netlink: 'syz.3.3369': attribute type 1 has an invalid length. [ 183.798846][ T28] audit: type=1326 audit(1774660935.202:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.9.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c379e6517 code=0x7ffc0000 [ 183.823336][ T28] audit: type=1326 audit(1774660935.202:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.9.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3798db19 code=0x7ffc0000 [ 183.859630][ T28] audit: type=1326 audit(1774660935.202:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.9.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 183.883585][ T28] audit: type=1326 audit(1774660935.202:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.9.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 183.921637][ T28] audit: type=1326 audit(1774660935.202:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.9.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 183.952808][ T28] audit: type=1326 audit(1774660935.202:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.9.3361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 184.071677][ T2469] team0 (unregistering): Port device team_slave_1 removed [ 184.092931][ T2469] team0 (unregistering): Port device team_slave_0 removed [ 184.192802][T12904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.212090][T12909] bond1: (slave geneve2): making interface the new active one [ 184.222383][T12909] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 184.274296][T12708] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.295307][T12708] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.363538][T12708] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.410361][T12708] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.085759][T12989] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.3389'. [ 185.120321][T12989] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.3389'. [ 185.174384][T12995] loop2: detected capacity change from 0 to 1024 [ 185.219807][T12995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.275634][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.323600][T13013] netlink: 'syz.3.3396': attribute type 1 has an invalid length. [ 185.364526][T13013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.404524][T13013] bond2: (slave gretap1): making interface the new active one [ 185.418965][T13013] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 185.642855][T13016] loop2: detected capacity change from 0 to 32768 [ 185.698404][ T3306] loop2: p1 p3 < > [ 185.713215][T13016] loop2: p1 p3 < > [ 185.867050][ T7445] udevd[7445]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 185.879283][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 185.920104][ T7445] udevd[7445]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 185.934064][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 186.815900][T13075] netlink: 'syz.3.3414': attribute type 4 has an invalid length. [ 186.847282][T13075] netlink: 'syz.3.3414': attribute type 4 has an invalid length. [ 187.327948][T13096] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.3424'. [ 187.558687][T13112] netlink: 'syz.2.3431': attribute type 34 has an invalid length. [ 187.789893][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.815910][T13125] loop2: detected capacity change from 0 to 1764 [ 187.846872][T13116] ip6_vti0 speed is unknown, defaulting to 1000 [ 187.856150][T13125] ISOFS: Unable to identify CD-ROM format. [ 187.857801][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.939298][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.995942][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.127213][T13116] chnl_net:caif_netlink_parms(): no params data found [ 188.202381][ T70] bridge_slave_1: left allmulticast mode [ 188.216088][ T70] bridge_slave_1: left promiscuous mode [ 188.222527][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.230810][ T70] bridge_slave_0: left allmulticast mode [ 188.236673][ T70] bridge_slave_0: left promiscuous mode [ 188.243118][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.350952][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.370697][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.390341][ T70] bond0 (unregistering): Released all slaves [ 188.399250][ T70] bond1 (unregistering): Released all slaves [ 188.500054][T13116] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.507277][T13116] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.537950][T13116] bridge_slave_0: entered allmulticast mode [ 188.550705][T13116] bridge_slave_0: entered promiscuous mode [ 188.559771][T13116] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.566909][T13116] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.574569][T13116] bridge_slave_1: entered allmulticast mode [ 188.581453][T13116] bridge_slave_1: entered promiscuous mode [ 188.607170][ T70] hsr_slave_0: left promiscuous mode [ 188.623154][ T70] hsr_slave_1: left promiscuous mode [ 188.638535][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.645987][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.654070][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.661573][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.681725][ T70] veth1_macvtap: left promiscuous mode [ 188.693983][ T70] veth0_macvtap: left promiscuous mode [ 188.705500][ T70] veth1_vlan: left promiscuous mode [ 188.718074][ T70] veth0_vlan: left promiscuous mode [ 188.865495][ T70] team0 (unregistering): Port device team_slave_1 removed [ 188.875795][ T70] team0 (unregistering): Port device team_slave_0 removed [ 188.934355][T13116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.952977][T13116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.015657][T13116] team0: Port device team_slave_0 added [ 189.032287][T13116] team0: Port device team_slave_1 added [ 189.069100][T13116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.083718][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.090033][T13204] netlink: 'syz.2.3456': attribute type 10 has an invalid length. [ 189.132068][T13116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.132874][T13116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.132889][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.132950][T13116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.156066][T13116] hsr_slave_0: entered promiscuous mode [ 189.156583][T13116] hsr_slave_1: entered promiscuous mode [ 189.156940][T13116] debugfs: 'hsr0' already exists in 'hsr' [ 189.156958][T13116] Cannot create hsr debugfs directory [ 189.343167][T13204] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3456'. [ 189.353602][T13204] bond0: entered promiscuous mode [ 189.369901][T13204] bond_slave_0: entered promiscuous mode [ 189.376679][T13204] bond_slave_1: entered promiscuous mode [ 189.394115][T13204] bridge0: port 3(bond0) entered blocking state [ 189.402524][T13204] bridge0: port 3(bond0) entered disabled state [ 189.428619][T13204] bond0: entered allmulticast mode [ 189.434799][T13204] bond_slave_0: entered allmulticast mode [ 189.443310][T13204] bond_slave_1: entered allmulticast mode [ 189.476077][T13224] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3468'. [ 189.514263][ T70] IPVS: stop unused estimator thread 0... [ 189.704655][T13116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.725813][T13251] loop2: detected capacity change from 0 to 1024 [ 189.729616][T13116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.745173][T13251] EXT4-fs: Ignoring removed bh option [ 189.757393][T13116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.772860][T13116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.791365][T13251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.814693][ T28] kauditd_printk_skb: 340 callbacks suppressed [ 189.814729][ T28] audit: type=1400 audit(1774660941.492:3244): avc: denied { rename } for pid=13248 comm="syz.2.3465" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 189.872679][T13116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.886707][T13116] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.922817][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.957282][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.964496][T12708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.968473][ T28] audit: type=1400 audit(1774660941.632:3245): avc: denied { mount } for pid=13277 comm="syz.3.3474" name="/" dev="hugetlbfs" ino=49364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 190.041078][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.048292][T12708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.210747][T13116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.360981][T13116] veth0_vlan: entered promiscuous mode [ 190.381189][T13116] veth1_vlan: entered promiscuous mode [ 190.443340][T13116] veth0_macvtap: entered promiscuous mode [ 190.455087][T13116] veth1_macvtap: entered promiscuous mode [ 190.472689][T13116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.512875][T13116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.525600][T12706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.538958][T12706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.561391][T12706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.577409][ T28] audit: type=1326 audit(1774660942.262:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13342 comm="syz.9.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 190.605743][T12706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.614801][ T28] audit: type=1326 audit(1774660942.262:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13342 comm="syz.9.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 190.639873][ T28] audit: type=1326 audit(1774660942.262:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13342 comm="syz.9.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 190.683337][ T28] audit: type=1326 audit(1774660942.262:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13342 comm="syz.9.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 190.709904][ T28] audit: type=1326 audit(1774660942.262:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13342 comm="syz.9.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f1c379ec799 code=0x7ffc0000 [ 190.753747][ T28] audit: type=1326 audit(1774660942.322:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13342 comm="syz.9.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c379acfce code=0x7ffc0000 [ 190.787679][ T28] audit: type=1326 audit(1774660942.342:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13342 comm="syz.9.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c379acfce code=0x7ffc0000 [ 190.818152][ T28] audit: type=1326 audit(1774660942.342:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13342 comm="syz.9.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c379acfce code=0x7ffc0000 [ 191.198578][T13408] loop2: detected capacity change from 0 to 256 [ 191.212290][T13408] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.321273][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3531'. [ 192.701891][T13626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3542'. [ 193.125178][T13663] --map-set only usable from mangle table [ 193.249316][T13674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3562'. [ 193.590382][T13694] netlink: 'syz.0.3571': attribute type 10 has an invalid length. [ 193.606895][T13694] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3571'. [ 193.622072][T13694] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 195.054446][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3611'. [ 195.168494][T13802] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 195.239517][T13808] loop2: detected capacity change from 0 to 128 [ 195.268126][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3617'. [ 195.421860][T13820] loop2: detected capacity change from 0 to 128 [ 195.449605][T13820] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 195.578763][ T2469] bio_check_eod: 101 callbacks suppressed [ 195.578844][ T2469] kworker/u8:7: attempt to access beyond end of device [ 195.578844][ T2469] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 195.598686][ T2469] kworker/u8:7: attempt to access beyond end of device [ 195.598686][ T2469] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 195.607653][ T28] kauditd_printk_skb: 529 callbacks suppressed [ 195.607689][ T28] audit: type=1400 audit(1774660947.282:3783): avc: denied { ioctl } for pid=13831 comm="syz.0.3628" path="socket:[48974]" dev="sockfs" ino=48974 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.617583][ T2469] kworker/u8:7: attempt to access beyond end of device [ 195.617583][ T2469] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 195.657375][ T2469] kworker/u8:7: attempt to access beyond end of device [ 195.657375][ T2469] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 195.671482][ T2469] kworker/u8:7: attempt to access beyond end of device [ 195.671482][ T2469] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 195.686303][ T2469] kworker/u8:7: attempt to access beyond end of device [ 195.686303][ T2469] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 195.703582][ T2469] kworker/u8:7: attempt to access beyond end of device [ 195.703582][ T2469] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 195.722787][ T2469] kworker/u8:7: attempt to access beyond end of device [ 195.722787][ T2469] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 195.736445][ T2469] kworker/u8:7: attempt to access beyond end of device [ 195.736445][ T2469] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 195.758138][ T28] audit: type=1400 audit(1774660947.422:3784): avc: denied { getopt } for pid=13833 comm="syz.0.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.768181][ T2469] kworker/u8:7: attempt to access beyond end of device [ 195.768181][ T2469] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 195.795437][ T2469] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 195.805984][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3631'. [ 195.834990][ T28] audit: type=1400 audit(1774660947.512:3785): avc: denied { read } for pid=13839 comm="syz.2.3627" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 195.893770][ T28] audit: type=1400 audit(1774660947.512:3786): avc: denied { open } for pid=13839 comm="syz.2.3627" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 196.638660][ T28] audit: type=1400 audit(1774660948.322:3787): avc: denied { getopt } for pid=13860 comm="syz.1.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.813505][T13876] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 196.892551][T13886] netlink: 'syz.2.3644': attribute type 2 has an invalid length. [ 196.941817][T13886] netlink: 'syz.2.3644': attribute type 1 has an invalid length. [ 196.973962][ T28] audit: type=1400 audit(1774660948.652:3788): avc: denied { name_connect } for pid=13897 comm="syz.3.3648" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 197.040999][T13903] netlink: 'syz.9.3649': attribute type 1 has an invalid length. [ 197.329896][T13935] ip6gre2: entered promiscuous mode [ 197.338239][T13941] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 197.358194][T13935] ip6gre2: entered allmulticast mode [ 197.443372][T13954] ip6gre3: entered allmulticast mode [ 197.585556][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a89a400: rx timeout, send abort [ 197.608230][ T28] audit: type=1400 audit(1774660949.272:3789): avc: denied { mounton } for pid=13970 comm="syz.2.3668" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 197.674224][T13978] batadv_slave_0: entered promiscuous mode [ 197.681369][T13977] batadv_slave_0: left promiscuous mode [ 197.692781][ T28] audit: type=1400 audit(1774660949.372:3790): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 197.796575][T13986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.827740][T13992] loop1: detected capacity change from 0 to 128 [ 197.847373][ T28] audit: type=1400 audit(1774660949.522:3791): avc: denied { append } for pid=13991 comm="syz.1.3675" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 197.905322][ T28] audit: type=1400 audit(1774660949.582:3792): avc: denied { unmount } for pid=13116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 197.950704][T13996] netlink: 'syz.1.3676': attribute type 2 has an invalid length. [ 197.977864][T13996] netlink: 'syz.1.3676': attribute type 1 has an invalid length. [ 197.986632][T13996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.085545][ C1] vcan0: j1939_tp_rxtimer: 0xffff888115adc400: rx timeout, send abort [ 198.094384][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a89a400: abort rx timeout. Force session deactivation [ 198.110372][T13998] ip6_vti0 speed is unknown, defaulting to 1000 [ 198.246934][T13951] 9pnet_fd: p9_fd_create_tcp (13951): problem connecting socket to 127.0.0.1 [ 198.280840][T13998] chnl_net:caif_netlink_parms(): no params data found [ 198.349913][T13998] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.357167][T13998] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.364490][T13998] bridge_slave_0: entered allmulticast mode [ 198.371084][T13998] bridge_slave_0: entered promiscuous mode [ 198.377966][T13998] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.385355][T13998] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.392664][T13998] bridge_slave_1: entered allmulticast mode [ 198.399379][T13998] bridge_slave_1: entered promiscuous mode [ 198.418571][T13998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.429306][T13998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.449862][T13998] team0: Port device team_slave_0 added [ 198.456445][T13998] team0: Port device team_slave_1 added [ 198.474317][T13998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.481326][T13998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.507389][T13998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.519052][T13998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.526007][T13998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.552130][T13998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.582518][T13998] hsr_slave_0: entered promiscuous mode [ 198.588804][T13998] hsr_slave_1: entered promiscuous mode [ 198.594432][ C1] vcan0: j1939_tp_rxtimer: 0xffff888115adc400: abort rx timeout. Force session deactivation [ 198.605066][T13998] debugfs: 'hsr0' already exists in 'hsr' [ 198.612987][T13998] Cannot create hsr debugfs directory [ 198.918973][T13998] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.938709][T13998] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.959207][T13998] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.971757][T13998] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.049744][T13998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.072791][T13998] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.086171][T12710] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.093272][T12710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.105691][T12706] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.112823][T12706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.219534][T13998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.266740][T14055] netlink: 'syz.0.3688': attribute type 2 has an invalid length. [ 199.276455][T14055] netlink: 'syz.0.3688': attribute type 1 has an invalid length. [ 199.287207][T14055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.399877][T13998] veth0_vlan: entered promiscuous mode [ 199.410910][T13998] veth1_vlan: entered promiscuous mode [ 199.433685][T13998] veth0_macvtap: entered promiscuous mode [ 199.444592][T13998] veth1_macvtap: entered promiscuous mode [ 199.459474][T13998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.503607][T13998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.520332][T12710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.530428][T12710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.541368][T12710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.581991][T12710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.729311][T14096] loop2: detected capacity change from 0 to 2048 [ 199.738473][T14099] loop1: detected capacity change from 0 to 2048 [ 199.761825][T14096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.796687][T14099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.825606][T13998] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.866219][T13116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.914913][T14121] loop1: detected capacity change from 0 to 128 [ 199.926836][T14121] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.961708][T14121] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 200.000919][T14127] veth0: entered promiscuous mode [ 200.006856][T14127] veth0: left promiscuous mode [ 200.015701][T14121] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 20: comm syz.1.3710: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 200.044225][T14121] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem [ 200.067876][T13116] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.103633][T14131] loop2: detected capacity change from 0 to 1764 [ 200.119760][T14131] ISOFS: Unable to identify CD-ROM format. [ 200.171525][T14136] netlink: 'syz.1.3717': attribute type 1 has an invalid length. [ 200.194407][T14136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.229808][T14136] bond1: (slave gretap1): making interface the new active one [ 200.229810][T14141] loop2: detected capacity change from 0 to 256 [ 200.238336][T14136] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 200.442542][T14155] veth0: entered promiscuous mode [ 200.491302][T14155] veth0: left promiscuous mode [ 200.599942][T14169] netlink: 'syz.2.3731': attribute type 1 has an invalid length. [ 200.877387][T14198] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 200.923734][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3747'. [ 201.127310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88815ff00600: rx timeout, send abort [ 201.312379][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 201.622873][T14212] netlink: 'syz.9.3750': attribute type 2 has an invalid length. [ 201.627331][ C0] vcan0: j1939_tp_rxtimer: 0xffff88815ff00400: rx timeout, send abort [ 201.638083][T14212] netlink: 'syz.9.3750': attribute type 1 has an invalid length. [ 201.640171][ C0] vcan0: j1939_tp_rxtimer: 0xffff88815ff00600: abort rx timeout. Force session deactivation [ 201.855487][T14235] netlink: 'syz.2.3759': attribute type 15 has an invalid length. [ 201.864555][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3759'. [ 201.959328][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3760'. [ 202.139060][ C0] vcan0: j1939_tp_rxtimer: 0xffff88815ff00400: abort rx timeout. Force session deactivation [ 202.230545][T12706] bond0: left allmulticast mode [ 202.237757][T14235] netlink: 'syz.2.3759': attribute type 15 has an invalid length. [ 202.251946][T12706] bond_slave_0: left allmulticast mode [ 202.261987][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3759'. [ 202.267816][T12706] bond_slave_1: left allmulticast mode [ 202.279447][T12706] bridge0: port 3(bond0) entered disabled state [ 202.298228][T12706] bridge_slave_1: left allmulticast mode [ 202.314084][T12706] bridge_slave_1: left promiscuous mode [ 202.334368][T12706] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.363605][T12706] bridge_slave_0: left allmulticast mode [ 202.372942][T12706] bridge_slave_0: left promiscuous mode [ 202.379534][T12706] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.363193][T14275] loop1: detected capacity change from 0 to 1024 [ 203.375458][T14275] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.385322][T12706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.394367][T12706] bond_slave_0: left promiscuous mode [ 203.410019][T12706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.419251][T12706] bond_slave_1: left promiscuous mode [ 203.420134][T14275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.425447][T12706] bond0 (unregistering): Released all slaves [ 203.449281][T12710] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 203.459762][T12710] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 203.477287][T12710] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 203.486587][T12710] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 203.543983][T12706] hsr_slave_0: left promiscuous mode [ 203.553032][T13116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.562241][T12706] hsr_slave_1: left promiscuous mode [ 203.591551][T12706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.901447][T14317] loop1: detected capacity change from 0 to 128 [ 204.016612][T14324] loop2: detected capacity change from 0 to 1024 [ 204.074753][T14324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.110676][T14324] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.162096][T12706] IPVS: stop unused estimator thread 0... [ 204.169792][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 204.169809][ T28] audit: type=1400 audit(1774660955.852:3823): avc: denied { map } for pid=14323 comm="syz.2.3790" path="/15/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 204.220482][T14324] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.3790: lblock 0 mapped to illegal pblock 0 (length 1) [ 204.278897][T14324] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 204.303776][T14324] EXT4-fs (loop2): This should not happen!! Data will be lost [ 204.303776][T14324] [ 204.385513][T12706] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 204.416424][T12706] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 204.448979][T12706] EXT4-fs (loop2): This should not happen!! Data will be lost [ 204.448979][T12706] [ 204.481020][T12708] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 204.534041][T12708] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 204.559134][ T28] audit: type=1400 audit(1774660956.232:3824): avc: denied { getopt } for pid=14331 comm="syz.0.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.588853][T12708] EXT4-fs (loop2): This should not happen!! Data will be lost [ 204.588853][T12708] [ 204.616019][T13998] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 204.961073][T14397] loop1: detected capacity change from 0 to 512 [ 205.019054][T14397] EXT4-fs: Mount option(s) incompatible with ext2 [ 205.182888][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 205.602817][T14461] netlink: 'syz.0.3831': attribute type 4 has an invalid length. [ 205.629924][ T28] audit: type=1400 audit(1774660957.302:3825): avc: denied { bind } for pid=14462 comm="syz.3.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 205.669612][T14467] netlink: 'syz.0.3831': attribute type 4 has an invalid length. [ 205.993978][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 206.586226][T14527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.613701][T14527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.651634][T14533] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3861'. [ 206.671143][T14533] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.678444][T14533] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.704249][T14535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3861'. [ 206.959502][T14551] netlink: 'syz.1.3869': attribute type 29 has an invalid length. [ 206.969156][T14551] netlink: 'syz.1.3869': attribute type 29 has an invalid length. [ 206.978886][T14551] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3869'. [ 207.014966][ T28] audit: type=1400 audit(1774660958.692:3826): avc: denied { listen } for pid=14553 comm="syz.1.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.035413][ T28] audit: type=1400 audit(1774660958.712:3827): avc: denied { accept } for pid=14553 comm="syz.1.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.266861][T14572] netlink: 'syz.3.3879': attribute type 10 has an invalid length. [ 207.276789][T14572] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3879'. [ 207.292302][T14572] bond0: entered promiscuous mode [ 207.302360][T14572] bond_slave_0: entered promiscuous mode [ 207.311579][T14572] bond_slave_1: entered promiscuous mode [ 207.320591][T14572] bridge0: port 4(bond0) entered blocking state [ 207.327586][T14572] bridge0: port 4(bond0) entered disabled state [ 207.336787][T14572] bond0: entered allmulticast mode [ 207.343177][T14572] bond_slave_0: entered allmulticast mode [ 207.350148][T14572] bond_slave_1: entered allmulticast mode [ 207.394432][T14572] bridge0: port 4(bond0) entered blocking state [ 207.401652][T14572] bridge0: port 4(bond0) entered forwarding state [ 207.485646][T14580] netlink: 'syz.3.3883': attribute type 21 has an invalid length. [ 207.493691][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3883'. [ 207.503093][T14580] netlink: 'syz.3.3883': attribute type 21 has an invalid length. [ 207.511415][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3883'. [ 207.540002][ T28] audit: type=1400 audit(1774660959.222:3828): avc: denied { bind } for pid=14583 comm="syz.3.3885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.593659][ T28] audit: type=1400 audit(1774660959.222:3829): avc: denied { name_bind } for pid=14583 comm="syz.3.3885" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 207.644810][ T28] audit: type=1400 audit(1774660959.222:3830): avc: denied { node_bind } for pid=14583 comm="syz.3.3885" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 207.697230][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 207.800340][T14593] netlink: 1692 bytes leftover after parsing attributes in process `syz.9.3889'. [ 208.257087][T14604] ip6_vti0 speed is unknown, defaulting to 1000 [ 208.335571][T14611] loop2: detected capacity change from 0 to 128 [ 208.344109][T14609] netlink: 'syz.3.3896': attribute type 14 has an invalid length. [ 208.369237][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 208.399946][T14609] netlink: 'syz.3.3896': attribute type 14 has an invalid length. [ 208.415604][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 208.443670][T14611] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.464311][T14611] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.555229][ T2469] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.658238][T14625] xt_hashlimit: size too large, truncated to 1048576 [ 208.897922][T14635] loop1: detected capacity change from 0 to 128 [ 209.021479][T14641] netlink: 'syz.3.3908': attribute type 1 has an invalid length. [ 209.036885][T14641] bond3: entered promiscuous mode [ 209.045014][T14641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.065609][T14641] bond3: (slave bridge2): making interface the new active one [ 209.073381][T14641] bridge2: entered promiscuous mode [ 209.079683][T14641] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 209.278156][ T8474] IPVS: starting estimator thread 0... [ 209.379418][T14672] loop1: detected capacity change from 0 to 4096 [ 209.388298][T14661] IPVS: using max 2112 ests per chain, 105600 per kthread [ 209.398370][ T28] audit: type=1400 audit(1774660961.072:3831): avc: denied { connect } for pid=14670 comm="syz.9.3922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.438671][T14672] EXT4-fs: Ignoring removed bh option [ 209.464351][T14672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.570402][ T8471] IPVS: starting estimator thread 0... [ 209.688100][T14687] IPVS: using max 1872 ests per chain, 93600 per kthread [ 209.741180][T14700] syz.2.3932: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 209.790024][T14700] CPU: 1 UID: 0 PID: 14700 Comm: syz.2.3932 Not tainted syzkaller #0 PREEMPT(full) [ 209.790057][T14700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.790145][T14700] Call Trace: [ 209.790154][T14700] [ 209.790193][T14700] __dump_stack+0x1d/0x30 [ 209.790301][T14700] dump_stack_lvl+0x95/0xd0 [ 209.790371][T14700] dump_stack+0x15/0x1b [ 209.790402][T14700] warn_alloc+0x145/0x1c0 [ 209.790437][T14700] ? __schedule+0x93c/0xd40 [ 209.790489][T14700] ? __rcu_read_unlock+0x4e/0x70 [ 209.790512][T14700] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 209.790658][T14700] ? __futex_wait+0x1fd/0x260 [ 209.790683][T14700] ? __pfx_futex_wake_mark+0x10/0x10 [ 209.790745][T14700] ? __rcu_read_unlock+0x4e/0x70 [ 209.790799][T14700] ? avc_has_perm_noaudit+0xab/0x130 [ 209.790865][T14700] ? should_fail_ex+0x30/0x280 [ 209.790900][T14700] ? xskq_create+0x36/0xe0 [ 209.790985][T14700] vmalloc_user_noprof+0x7d/0xb0 [ 209.791017][T14700] ? xskq_create+0x80/0xe0 [ 209.791042][T14700] xskq_create+0x80/0xe0 [ 209.791074][T14700] xsk_init_queue+0x70/0xb0 [ 209.791142][T14700] xsk_setsockopt+0x477/0x640 [ 209.791182][T14700] ? __pfx_xsk_setsockopt+0x10/0x10 [ 209.791214][T14700] __sys_setsockopt+0x184/0x200 [ 209.791259][T14700] __x64_sys_setsockopt+0x64/0x80 [ 209.791349][T14700] x64_sys_call+0x2327/0x3020 [ 209.791385][T14700] do_syscall_64+0x12c/0x370 [ 209.791428][T14700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.791449][T14700] RIP: 0033:0x7f460a33c799 [ 209.791488][T14700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.791511][T14700] RSP: 002b:00007f4608d97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 209.791611][T14700] RAX: ffffffffffffffda RBX: 00007f460a5b5fa0 RCX: 00007f460a33c799 [ 209.791624][T14700] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 209.791711][T14700] RBP: 00007f460a3d2c99 R08: 0000000000000004 R09: 0000000000000000 [ 209.791781][T14700] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 209.791797][T14700] R13: 00007f460a5b6038 R14: 00007f460a5b5fa0 R15: 00007ffe092eb448 [ 209.791817][T14700] [ 209.794032][T14700] Mem-Info: [ 210.039026][T14700] active_anon:32683 inactive_anon:1 isolated_anon:2987 [ 210.039026][T14700] active_file:14279 inactive_file:13197 isolated_file:0 [ 210.039026][T14700] unevictable:1026 dirty:159 writeback:0 [ 210.039026][T14700] slab_reclaimable:4142 slab_unreclaimable:25213 [ 210.039026][T14700] mapped:34034 shmem:23384 pagetables:3912 [ 210.039026][T14700] sec_pagetables:0 bounce:0 [ 210.039026][T14700] kernel_misc_reclaimable:0 [ 210.039026][T14700] free:1783705 free_pcp:12390 free_cma:0 [ 210.098451][T14700] Node 0 active_anon:130152kB inactive_anon:4kB active_file:57116kB inactive_file:52788kB unevictable:5728kB isolated(anon):10324kB isolated(file):0kB mapped:136136kB dirty:636kB writeback:0kB shmem:93072kB kernel_stack:5040kB pagetables:15648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.138248][T14700] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.152860][T14707] bond0: entered promiscuous mode [ 210.168301][T14700] lowmem_reserve[]: 0 2879 7857 7857 [ 210.168345][T14700] Node 0 DMA32 free:2944624kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948148kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 210.168477][T14700] lowmem_reserve[]: 0 0 4978 4978 [ 210.168511][T14700] Node 0 Normal free:4179244kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128412kB inactive_anon:4kB active_file:57116kB inactive_file:52788kB unevictable:8048kB writepending:744kB zspages:0kB present:5242880kB managed:5098240kB mlocked:15820kB bounce:0kB free_pcp:43788kB local_pcp:39264kB free_cma:0kB [ 210.168641][T14700] lowmem_reserve[]: 0 0 0 0 [ 210.168687][T14700] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 210.169033][T14700] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 1*16kB (M) 4*32kB (M) 5*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944624kB [ 210.169455][T14700] Node 0 Normal: 1593*4kB (UME) 2294*8kB (UME) 1024*16kB (UME) 211*32kB (UME) 230*64kB (UME) 349*128kB (UME) 268*256kB (UME) 169*512kB (UME) 139*1024kB (UME) 95*2048kB (UME) 874*4096kB (UM) = 4179188kB [ 210.169868][T14700] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 210.169891][T14700] 50298 total pagecache pages [ 210.169901][T14700] 1 pages in swap cache [ 210.169909][T14700] Free swap = 124992kB [ 210.169919][T14700] Total swap = 124996kB [ 210.169928][T14700] 2097051 pages RAM [ 210.169954][T14700] 0 pages HighMem/MovableOnly [ 210.169963][T14700] 81614 pages reserved [ 210.379093][T13116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.389879][T14707] bond_slave_0: entered promiscuous mode [ 210.429199][T14707] bond_slave_1: entered promiscuous mode [ 210.448859][T14711] loop1: detected capacity change from 0 to 128 [ 210.460881][T14707] bridge0: port 3(bond0) entered blocking state [ 210.472058][T14707] bridge0: port 3(bond0) entered disabled state [ 210.490114][T14707] bond0: entered allmulticast mode [ 210.507843][T14707] bond_slave_0: entered allmulticast mode [ 210.534507][T14707] bond_slave_1: entered allmulticast mode [ 210.574738][T14707] bridge0: port 3(bond0) entered blocking state [ 210.581597][T14707] bridge0: port 3(bond0) entered forwarding state [ 210.679619][T14720] loop1: detected capacity change from 0 to 4096 [ 210.692945][T14720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.737177][T13116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.469435][T14774] ip6_vti0 speed is unknown, defaulting to 1000 [ 211.642615][T14791] validate_nla: 2 callbacks suppressed [ 211.642633][T14791] netlink: 'syz.0.3968': attribute type 14 has an invalid length. [ 211.662100][T14791] __nla_validate_parse: 2 callbacks suppressed [ 211.662112][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3968'. [ 211.682935][T14791] netlink: 'syz.0.3968': attribute type 14 has an invalid length. [ 211.690993][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3968'. [ 211.719462][T12706] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.735760][T12706] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.752599][T12706] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.780956][T12706] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.176750][T14819] ip6_vti0 speed is unknown, defaulting to 1000 [ 212.633194][ T28] audit: type=1326 audit(1774660964.312:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd62c799 code=0x7ffc0000 [ 212.687753][ T28] audit: type=1326 audit(1774660964.352:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd62c799 code=0x7ffc0000 [ 212.715736][ T28] audit: type=1326 audit(1774660964.352:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f28cd62c799 code=0x7ffc0000 [ 212.757148][ T28] audit: type=1326 audit(1774660964.352:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28cd62c502 code=0x7ffc0000 [ 212.785581][ T28] audit: type=1326 audit(1774660964.352:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f28cd5ecfce code=0x7ffc0000 [ 212.814047][ T28] audit: type=1326 audit(1774660964.352:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f28cd62c5c7 code=0x7ffc0000 [ 212.841367][ T28] audit: type=1326 audit(1774660964.352:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28cd5ecfce code=0x7ffc0000 [ 212.960027][ T28] audit: type=1326 audit(1774660964.352:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f28cd5ecfce code=0x7ffc0000 [ 213.002208][ T28] audit: type=1326 audit(1774660964.362:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cd62c799 code=0x7ffc0000 [ 213.147250][T14862] ip6_vti0 speed is unknown, defaulting to 1000 [ 213.232712][T14877] netlink: 'syz.3.4003': attribute type 1 has an invalid length. [ 213.274002][T14877] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.309933][T14877] bond4: (slave bridge3): making interface the new active one [ 213.359010][T14877] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 213.629869][ T311] bridge_slave_1: left allmulticast mode [ 213.647627][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.674715][ T311] bridge_slave_0: left allmulticast mode [ 213.680976][ T311] bridge_slave_0: left promiscuous mode [ 213.692233][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.893939][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.908617][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4012'. [ 213.919344][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.936760][ T311] bond0 (unregistering): Released all slaves [ 213.938456][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4012'. [ 214.063880][ T311] hsr_slave_0: left promiscuous mode [ 214.091297][ T311] hsr_slave_1: left promiscuous mode [ 214.099701][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.117219][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.136713][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.148110][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.171041][ T311] veth1_macvtap: left promiscuous mode [ 214.176543][ T311] veth0_macvtap: left promiscuous mode [ 214.188278][ T311] veth1_vlan: left promiscuous mode [ 214.193621][ T311] veth0_vlan: left promiscuous mode [ 214.375728][ T311] team0 (unregistering): Port device team_slave_1 removed [ 214.396759][ T311] team0 (unregistering): Port device team_slave_0 removed [ 214.420423][T14925] loop2: detected capacity change from 0 to 8192 [ 214.524607][T14929] tipc: Started in network mode [ 214.537833][T14929] tipc: Node identity ac1414aa, cluster identity 4711 [ 214.545272][T14929] tipc: Enabling of bearer rejected, failed to enable media [ 214.806827][T14954] loop2: detected capacity change from 0 to 512 [ 214.833066][T14954] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 214.868656][T14954] EXT4-fs (loop2): 1 orphan inode deleted [ 214.874824][T14954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.887238][T14957] loop1: detected capacity change from 0 to 1024 [ 214.896870][T14957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 214.920508][T14957] System zones: 0-1, 3-36 [ 214.925072][T14954] EXT4-fs (loop2): shut down requested (2) [ 214.937449][T14957] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.4037: bad orphan inode 134217728 [ 214.950414][T14954] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 214.960411][T14954] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 214.969660][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 214.969673][ T28] audit: type=1400 audit(1774660966.652:3847): avc: denied { rmdir } for pid=14953 comm="syz.2.4036" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.008275][T14957] loop1: lost filesystem error report for type 5 error -117 [ 215.008974][T14957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.031576][T13998] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.265901][T14960] ================================================================== [ 215.274071][T14960] BUG: KCSAN: data-race in filemap_read / filemap_read [ 215.280958][T14960] [ 215.283301][T14960] write to 0xffff8881197b22e8 of 8 bytes by task 14957 on cpu 1: [ 215.291038][T14960] filemap_read+0x98d/0xa10 [ 215.295577][T14960] generic_file_read_iter+0x79/0x330 [ 215.300897][T14960] ext4_file_read_iter+0x1cc/0x290 [ 215.306034][T14960] copy_splice_read+0x471/0x6c0 [ 215.310914][T14960] splice_direct_to_actor+0x28f/0x670 [ 215.316314][T14960] do_splice_direct+0x119/0x1a0 [ 215.321191][T14960] do_sendfile+0x382/0x650 [ 215.325647][T14960] __x64_sys_sendfile64+0x105/0x150 [ 215.330871][T14960] x64_sys_call+0x2dc4/0x3020 [ 215.335579][T14960] do_syscall_64+0x12c/0x370 [ 215.340209][T14960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.346163][T14960] [ 215.348508][T14960] write to 0xffff8881197b22e8 of 8 bytes by task 14960 on cpu 0: [ 215.356244][T14960] filemap_read+0x98d/0xa10 [ 215.360786][T14960] generic_file_read_iter+0x79/0x330 [ 215.366117][T14960] ext4_file_read_iter+0x1cc/0x290 [ 215.371263][T14960] copy_splice_read+0x471/0x6c0 [ 215.376144][T14960] splice_direct_to_actor+0x28f/0x670 [ 215.381544][T14960] do_splice_direct+0x119/0x1a0 [ 215.386413][T14960] do_sendfile+0x382/0x650 [ 215.390858][T14960] __x64_sys_sendfile64+0x105/0x150 [ 215.396091][T14960] x64_sys_call+0x2dc4/0x3020 [ 215.400800][T14960] do_syscall_64+0x12c/0x370 [ 215.405420][T14960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.411321][T14960] [ 215.413653][T14960] value changed: 0x0000000000000237 -> 0x0000000000000238 [ 215.420790][T14960] [ 215.423123][T14960] Reported by Kernel Concurrency Sanitizer on: [ 215.429282][T14960] CPU: 0 UID: 0 PID: 14960 Comm: syz.1.4037 Not tainted syzkaller #0 PREEMPT(full) [ 215.438658][T14960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.448724][T14960] ================================================================== [ 215.612082][T13116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.