last executing test programs: 1m50.227926081s ago: executing program 4 (id=235): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r0 = syz_io_uring_setup(0x3488, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x1000, 0x181}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m50.130831237s ago: executing program 4 (id=237): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x8, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 1m50.038442342s ago: executing program 4 (id=239): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001e00)=@newtaction={0x14, 0x58, 0x284f}, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m50.012934354s ago: executing program 4 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000340)='securityfs\x00', 0x0, 0x0) 1m49.972049106s ago: executing program 4 (id=241): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x8) 1m49.788807927s ago: executing program 4 (id=248): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000040)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x1d}}], 0x30, 0x4000000}, 0x0) 1m49.726775051s ago: executing program 32 (id=248): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000040)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x1d}}], 0x30, 0x4000000}, 0x0) 1m43.405225659s ago: executing program 1 (id=366): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m43.23072563s ago: executing program 1 (id=369): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1013}], 0x2, 0x0, 0x0, 0x0) 1m43.031433812s ago: executing program 1 (id=376): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20f42, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m42.914668678s ago: executing program 1 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x0) 1m42.812188804s ago: executing program 1 (id=379): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 1m42.19072091s ago: executing program 1 (id=381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe0f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x8884}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0xfbfb}}}}, 0x1a) 1m42.161918322s ago: executing program 33 (id=381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe0f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x8884}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0xfbfb}}}}, 0x1a) 47.537527148s ago: executing program 6 (id=1616): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)='^', 0x1}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x10004841) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000300), 0x4) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1}, 0x20002) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}}], 0x2, 0x4044004) 47.238204785s ago: executing program 6 (id=1627): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 47.179115058s ago: executing program 6 (id=1628): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a000005001200"], 0x3c}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 47.120571762s ago: executing program 6 (id=1632): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10880, &(0x7f00000002c0), 0x4, 0x261, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x161000, 0x2c3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_clone(0x4001000, &(0x7f0000000180), 0x0, &(0x7f0000000340), 0x0, 0x0) getdents64(r0, 0x0, 0x0) 46.771444643s ago: executing program 6 (id=1640): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2c}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc, 0x8000}, 0x70bd2a, 0x3508, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="90b3185ad7"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 46.070460583s ago: executing program 6 (id=1653): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x400}}, 0x0, 0x3, 0x0, 0x0, 0xc0}, 0x9c) 46.031177876s ago: executing program 34 (id=1653): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r2, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x400}}, 0x0, 0x3, 0x0, 0x0, 0xc0}, 0x9c) 30.372555129s ago: executing program 0 (id=2009): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2007}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x20000018}) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x3) 29.541606507s ago: executing program 0 (id=2029): unshare(0x62040200) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44890) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xfffffffffffffffd, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0x1}, {0xe}, {0xfff1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8020}, 0x4000000) 29.447895283s ago: executing program 0 (id=2031): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 29.30709345s ago: executing program 0 (id=2036): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x100) 29.290455232s ago: executing program 0 (id=2037): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setreuid(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) 28.867059656s ago: executing program 0 (id=2044): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000e00)={0x17c04, r0, 0x299f25fd, 0x4000003, 0x400000006, 0x101}) 28.820785229s ago: executing program 35 (id=2044): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000e00)={0x17c04, r0, 0x299f25fd, 0x4000003, 0x400000006, 0x101}) 12.250853755s ago: executing program 8 (id=2266): r0 = syz_io_uring_setup(0x11cd, &(0x7f00000003c0)={0x0, 0xde73, 0x80, 0x1103, 0x2c}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) 11.962783462s ago: executing program 8 (id=2277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x161241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be000c2ffffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESOCT=r2], 0xfdef) 11.83788103s ago: executing program 8 (id=2279): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x208000, &(0x7f0000000980), 0xfe, 0x573, &(0x7f00000009c0)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) 11.680479559s ago: executing program 8 (id=2282): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nombcache}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {@errors_remount}, {@usrjquota}, {@acl}]}, 0x1, 0x4e4, &(0x7f0000001c40)="$eJzs3M9vVNUeAPDvnXbaAo/3+hBREKWAxsbElhYUFm4wMXGhiREXsGzaQioFDO1CCJGSGFyTuDcujTtN3OrSuPIPwIWJJoaEGDaAqzF35t7p/GxnoD8o8/kk055z77n3nHPvOXfOvWdmAuhZI+mfJOI/EXE7Iv5XidYnGKn8e3Dv2vTDe9emY6lUOvV3Uk53P41n8u12ZJHRQkTh86RhhxULV66en5qfn72cxccXL3wyvnDl6utzF6bOzZ6bvTh54sSxoxPH35x8o/tKtcgvrdf9fZ9d2r/33TO33p/uz5cPZf9r69FWf3fFGFlh3Svd7eqJt7MmnDQfp+sbWhg6NpQ162La/6/NHzqz2QUCNkypVCoNtl+9VGp0o2kJsGUlsdklADZH/kaf3v/mrw0aejwR7p6s3ACl9X6QvSpr+qOQpSk23N+upZGIOL30z1fpK+qeQ/xxsa824e/rVAAAoOf8dDIfCTaO/wqxpybdf7M5lOGI+H9E7IqIZyJid0Q8G1FO+1xEPN+YQRJRWiH/3Q3x5fy/z2YRCnceu5IrSMd/b2VzW/Xjv3z0F8N9WWxnRD5gnj2SHZPRKA6endsxO9Fm/wMRfSvlXzv+S19p/vlYMCvHnf6GB3QzU4tTj1zhBndvROzrb6x/0p+euHwaJ4mIvRGxr4v9DteE5177Zn81UqxPt3r9y0otpvS6no9rpfR1xKuV878Uded/Ocdk5fnJ8aGYnz0yfnZuvtwqmv3y680P2uW/av1/+LNxk3eO/3jqcatdlZ7/7TXtP/L52+X6DycRSXW+diGitGKLbnbzty/K+x053LzuUdv/QPJROTyQLft0anHx8kTEQPJe8/LJ5W3zeJ4+rf/o4db9f1e2TXokXoiItBG/GBEvRcSBrOwHI+JQRLSoWtXPb7/8cbt1I0Mdtf91k9Z/puX1r+78L8/XdxjIN06X9J0/ePthm4tHZ+f/WDk0mi1pff1L6i4RnZb08Y4eAAAAbA2FKH/2vzBWDRcKY2OVZ0C7Y3th/tLC4oGIuDhT+Y7AcBQL+ZOuyvPgYpLGJ7JnfsNxunz3PVmNV9YfzZ4bfxlRjo9NX5qf2ezKQ4/bUe7zSVP/T/3V5XNeYAtag3k0YItarf/vubVBBQE2XN7/jfeh99S8/y+1STLokzLwdHL/D72rVf+/Ht8OdLsNsLWU9GXoafo/9K7++LAaLn/tueW3bYGnkfd/6Endfq+/u0BpsPWqoWjxiwFD61OMbS3y2pRAOrJawx0WI6KzxNseJYt8CNj+Fx4K3e1wMJpX9UU5MNQ6r6SL33HIA+lRWTXxuT1r3vjz30RZ62bz3XI/LXZ4utcosOGXIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHXxbwAAAP//aizTCw==") socket$inet6(0xa, 0x2, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 11.559965786s ago: executing program 8 (id=2288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001d0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 11.234777155s ago: executing program 8 (id=2299): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/4\x00') read$eventfd(r2, &(0x7f0000000280), 0x8) 11.215364136s ago: executing program 36 (id=2299): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/4\x00') read$eventfd(r2, &(0x7f0000000280), 0x8) 6.300692233s ago: executing program 5 (id=2398): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r0, 0x10, 0x6, 0x10001) creat(&(0x7f0000000240)='./bus\x00', 0xc2) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x443, 0x0) fchown(r1, 0x0, 0xee01) 6.194985109s ago: executing program 5 (id=2400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0) 6.16745136s ago: executing program 5 (id=2402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x400000}, 0x28) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000e, 0x10012, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080), 0x0}, 0x20) 6.116442484s ago: executing program 5 (id=2403): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) fadvise64(r0, 0x2, 0x0, 0x4) 5.789184282s ago: executing program 5 (id=2409): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 5.523069548s ago: executing program 5 (id=2413): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000ef000/0x1000)=nil, 0x1000, 0x100000e, 0x12, r2, 0x7c21a000) 2.365439122s ago: executing program 7 (id=2455): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.339003612s ago: executing program 7 (id=2466): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20881) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x3, 0x0, 0xbc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.249043377s ago: executing program 7 (id=2469): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000100)) 1.043545769s ago: executing program 2 (id=2474): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x14, &(0x7f0000000000)=[0xffffffff], 0x2) 1.038894329s ago: executing program 7 (id=2475): unshare(0x24060400) creat(&(0x7f0000000100)='./file0\x00', 0x3c) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, 0x0, &(0x7f0000000040)) 935.518216ms ago: executing program 7 (id=2477): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x4c014) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 935.231455ms ago: executing program 2 (id=2478): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 892.227958ms ago: executing program 2 (id=2479): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000000000000014000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) 798.699844ms ago: executing program 2 (id=2481): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) fadvise64(r0, 0x2, 0x0, 0x4) 741.527617ms ago: executing program 3 (id=2482): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x3}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) 614.776814ms ago: executing program 3 (id=2484): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bind$tipc(r0, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x200, 0xfffffffd}}, 0x10) 528.911459ms ago: executing program 3 (id=2485): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) 528.504359ms ago: executing program 9 (id=2486): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x80000001}, &(0x7f0000000480)=0x8) 438.877145ms ago: executing program 3 (id=2487): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x177304b1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 438.641405ms ago: executing program 9 (id=2488): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) 409.909436ms ago: executing program 9 (id=2489): creat(0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) 409.410386ms ago: executing program 3 (id=2490): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 224.329097ms ago: executing program 9 (id=2491): creat(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4139, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000e4ff0000180000007b020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getcwd(0x0, 0x0) 224.138647ms ago: executing program 3 (id=2492): socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="7263000000000100000000000000000000000000f9ffffffffffffff000000000200000000"], 0x48) 174.53807ms ago: executing program 2 (id=2493): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) poll(&(0x7f0000000200)=[{r1, 0x8200}], 0x1, 0x21ea4b66) 103.529114ms ago: executing program 7 (id=2494): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") creat(&(0x7f00000001c0)='./file1\x00', 0x42) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 103.220104ms ago: executing program 9 (id=2495): syz_io_uring_setup(0x2a21, &(0x7f0000000100)={0x0, 0x6e7f, 0x1000, 0xfffffffc, 0x5cc}, &(0x7f0000000280), 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) 102.959024ms ago: executing program 2 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x6, 0xfffff400}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'wg0\x00', 0x200}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)={'hsr0\x00'}) 0s ago: executing program 9 (id=2497): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): process `syz.2.1637'. [ 110.186190][ T8011] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.1632: No space for directory leaf checksum. Please run e2fsck -D. [ 110.201642][ T8011] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.1632: Directory block failed checksum [ 110.209807][ T8022] EXT4-fs (loop5): invalid journal inode [ 110.221296][ T8025] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.1632: No space for directory leaf checksum. Please run e2fsck -D. [ 110.236784][ T8025] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.1632: checksumming directory block 0 [ 110.254761][ T8022] EXT4-fs (loop5): can't get journal size [ 110.270721][ T8022] EXT4-fs (loop5): 1 truncate cleaned up [ 110.277417][ T8022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.280372][ T8025] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.1632: No space for directory leaf checksum. Please run e2fsck -D. [ 110.305136][ T8025] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.1632: checksumming directory block 0 [ 110.316331][ T8019] serio: Serial port ptm0 [ 110.325596][ T8028] netlink: 'syz.2.1639': attribute type 27 has an invalid length. [ 110.351597][ T8022] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 110.376422][ T4113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.403608][ T4515] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 110.419390][ T4515] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory block failed checksum [ 110.557548][ T5877] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.692985][ T8028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.713736][ T8028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.783169][ T8028] hsr1: left promiscuous mode [ 110.799506][ T8028] gretap1: left allmulticast mode [ 110.806706][ T8028] bond2: left promiscuous mode [ 110.811590][ T8028] bridge2: left promiscuous mode [ 110.855680][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.864803][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.895159][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.904188][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.918777][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.927777][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.954305][ T8069] loop3: detected capacity change from 0 to 2048 [ 110.967004][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.976099][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.039706][ T8069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.074982][ T5188] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.085761][ T5188] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.182565][ T5188] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.193039][ T5188] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.300276][ T5188] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.310838][ T5188] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.423349][ T5188] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.433810][ T5188] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.450473][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.571342][ T5188] bridge_slave_1: left allmulticast mode [ 111.577053][ T5188] bridge_slave_1: left promiscuous mode [ 111.582884][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.614602][ T5188] bridge_slave_0: left allmulticast mode [ 111.620368][ T5188] bridge_slave_0: left promiscuous mode [ 111.626236][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.717390][ T5188] erspan0 (unregistering): left promiscuous mode [ 111.733417][ T5188] gretap0 (unregistering): left promiscuous mode [ 111.889733][ T8134] netlink: 'syz.5.1670': attribute type 10 has an invalid length. [ 111.897661][ T8134] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1670'. [ 111.906675][ T8134] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 111.945566][ T5188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.983857][ T5188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.004448][ T5188] bond0 (unregistering): Released all slaves [ 112.016502][ T5188] bond1 (unregistering): Released all slaves [ 112.176616][ T5188] hsr_slave_0: left promiscuous mode [ 112.183584][ T5188] hsr_slave_1: left promiscuous mode [ 112.192856][ T5188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.200353][ T5188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.231496][ T5188] veth1_macvtap: left promiscuous mode [ 112.237484][ T5188] veth0_macvtap: left promiscuous mode [ 112.243178][ T5188] veth1_vlan: left promiscuous mode [ 112.248896][ T5188] veth0_vlan: left promiscuous mode [ 112.332628][ T5188] team0 (unregistering): Port device team_slave_1 removed [ 112.342688][ T5188] team0 (unregistering): Port device team_slave_0 removed [ 112.398869][ T8158] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1676'. [ 112.470816][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 112.519343][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1677'. [ 112.588488][ T8169] ip6gre1: entered promiscuous mode [ 112.593758][ T8169] ip6gre1: entered allmulticast mode [ 112.600927][ T5171] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.608779][ T5171] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.618192][ T8169] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.626180][ T8066] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.674832][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.681970][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.689297][ T8091] bridge_slave_0: entered allmulticast mode [ 112.696140][ T8091] bridge_slave_0: entered promiscuous mode [ 112.707989][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.715173][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.722460][ T8091] bridge_slave_1: entered allmulticast mode [ 112.729408][ T8091] bridge_slave_1: entered promiscuous mode [ 112.788367][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.837164][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.840020][ T8203] loop2: detected capacity change from 0 to 128 [ 112.856376][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1686'. [ 112.858966][ T8042] kernel write not supported for file bpf-prog (pid: 8042 comm: kworker/1:11) [ 112.877635][ T8203] msdos filesystem being mounted at /321/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 112.960424][ T8091] team0: Port device team_slave_0 added [ 112.981727][ T8091] team0: Port device team_slave_1 added [ 113.018735][ T8222] loop5: detected capacity change from 0 to 128 [ 113.036298][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.043303][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.069478][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.093701][ T8222] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.107263][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.114283][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.131351][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.140311][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.176629][ T8091] hsr_slave_0: entered promiscuous mode [ 113.192401][ T8091] hsr_slave_1: entered promiscuous mode [ 113.198478][ T8091] debugfs: 'hsr0' already exists in 'hsr' [ 113.204262][ T8091] Cannot create hsr debugfs directory [ 113.210128][ T8222] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.292918][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.307590][ T4113] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.342841][ T8091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.356087][ T8091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.365804][ T8091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.393883][ T8091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.518423][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 113.518441][ T29] audit: type=1326 audit(3917222380.352:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 113.621336][ T29] audit: type=1326 audit(3917222380.384:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 113.644940][ T29] audit: type=1326 audit(3917222380.384:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 113.668534][ T29] audit: type=1326 audit(3917222380.384:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 113.692159][ T29] audit: type=1326 audit(3917222380.384:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 113.715716][ T29] audit: type=1326 audit(3917222380.384:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 113.739216][ T29] audit: type=1326 audit(3917222380.384:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 113.763257][ T29] audit: type=1326 audit(3917222380.384:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 113.786572][ T29] audit: type=1326 audit(3917222380.384:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 113.810042][ T29] audit: type=1326 audit(3917222380.384:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 113.825332][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.886768][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.910434][ T8091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.920937][ T8091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.018659][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.025787][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.085516][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.092694][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.143243][ T8282] loop0: detected capacity change from 0 to 512 [ 114.303869][ T8282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.316893][ T8282] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.377420][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.391764][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.427941][ T8243] Set syz1 is full, maxelem 65536 reached [ 114.757841][ T8327] loop5: detected capacity change from 0 to 256 [ 114.781682][ T8327] vfat filesystem being mounted at /364/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 114.808000][ T8337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1722'. [ 114.817155][ T8337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1722'. [ 114.828401][ T8335] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 114.884132][ T8091] veth0_vlan: entered promiscuous mode [ 114.894490][ T8091] veth1_vlan: entered promiscuous mode [ 114.931639][ T8091] veth0_macvtap: entered promiscuous mode [ 114.945822][ T8091] veth1_macvtap: entered promiscuous mode [ 114.975470][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.983982][ T8348] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1723'. [ 115.004405][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.037288][ T5177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.055198][ T5177] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.063973][ T5177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.154842][ T5177] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.228119][ T8358] loop0: detected capacity change from 0 to 8192 [ 115.245718][ T8358] vfat filesystem being mounted at /319/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 116.060640][ T8347] dvmrp1: entered allmulticast mode [ 116.117056][ T8351] dvmrp1: left allmulticast mode [ 116.284569][ T8393] loop5: detected capacity change from 0 to 1024 [ 116.344146][ T8393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.412033][ T8393] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.509317][ T8393] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.1740: lblock 3 mapped to illegal pblock 3 (length 3) [ 116.547488][ T8393] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 116.560034][ T8393] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.560034][ T8393] [ 116.577758][ T8409] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.1740: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.594957][ T8409] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.1740: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.609911][ T8409] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.1740: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.624676][ T8409] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.1740: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.668804][ T8392] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.1740: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.712523][ T8392] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.1740: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.719195][ T8407] loop7: detected capacity change from 0 to 8192 [ 116.726874][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.763433][ T8392] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.1740: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.794589][ T8407] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.794688][ T8392] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.1740: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.829691][ T8407] vfat filesystem being mounted at /3/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 116.852417][ T8392] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: block 3: comm syz.5.1740: lblock 3 mapped to illegal pblock 3 (length 1) [ 116.947976][ T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 116.960366][ T37] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.960366][ T37] [ 117.023798][ T4113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.146787][ T8435] loop3: detected capacity change from 0 to 128 [ 117.186620][ T8435] vfat filesystem being mounted at /361/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 117.254565][ T8444] loop2: detected capacity change from 0 to 2048 [ 117.259359][ T8442] loop0: detected capacity change from 0 to 4096 [ 117.276911][ T8444] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.309974][ T8442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.357750][ T8444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.393123][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.499440][ T8444] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1762: bg 0: block 234: padding at end of block bitmap is not set [ 117.521189][ T8459] loop0: detected capacity change from 0 to 2048 [ 117.532258][ T8444] EXT4-fs (loop2): Remounting filesystem read-only [ 117.539258][ T8456] loop3: detected capacity change from 0 to 1024 [ 117.581198][ T8459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.631110][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.645071][ T8456] EXT4-fs: Ignoring removed oldalloc option [ 117.651077][ T8456] EXT4-fs: Ignoring removed bh option [ 117.687374][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.662965][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 118.663041][ T29] audit: type=1326 audit(3917222385.748:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 118.693865][ T29] audit: type=1326 audit(3917222385.748:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 118.717517][ T29] audit: type=1326 audit(3917222385.748:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 118.741178][ T29] audit: type=1326 audit(3917222385.759:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 118.764667][ T29] audit: type=1326 audit(3917222385.759:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 118.788003][ T29] audit: type=1326 audit(3917222385.759:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 118.811617][ T29] audit: type=1326 audit(3917222385.759:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 118.835172][ T29] audit: type=1326 audit(3917222385.759:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 118.859029][ T29] audit: type=1326 audit(3917222385.759:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 118.882880][ T29] audit: type=1326 audit(3917222385.759:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 119.044176][ T8542] netlink: 'syz.7.1799': attribute type 19 has an invalid length. [ 119.052160][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1799'. [ 119.128276][ T8543] loop2: detected capacity change from 0 to 128 [ 119.150453][ T5177] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.159363][ T5177] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.168632][ T8542] netlink: 'syz.7.1799': attribute type 19 has an invalid length. [ 119.176612][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1799'. [ 119.203417][ T8543] vfat filesystem being mounted at /345/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 119.214165][ T5177] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.223230][ T5177] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.613104][ T8560] loop0: detected capacity change from 0 to 128 [ 119.637338][ T8560] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 119.661972][ T8560] ext2 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.816371][ T8576] loop0: detected capacity change from 0 to 2048 [ 119.883034][ T8581] loop0: detected capacity change from 0 to 256 [ 119.894665][ T8581] vfat filesystem being mounted at /337/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 120.072228][ T8599] loop2: detected capacity change from 0 to 256 [ 120.082981][ T8599] vfat filesystem being mounted at /351/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 120.132351][ T8599] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 120.140289][ T8599] FAT-fs (loop2): Filesystem has been set read-only [ 120.156714][ T8599] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 120.168478][ T8599] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 120.176666][ T8599] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 120.303593][ T8066] IPVS: starting estimator thread 0... [ 120.389041][ T8614] IPVS: using max 2112 ests per chain, 105600 per kthread [ 120.458238][ T8622] loop2: detected capacity change from 0 to 8192 [ 120.513829][ T8622] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.535002][ T8622] vfat filesystem being mounted at /356/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 120.594077][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1838'. [ 120.603134][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1838'. [ 120.716037][ T8645] loop0: detected capacity change from 0 to 8192 [ 120.727912][ T8645] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.738571][ T8645] vfat filesystem being mounted at /349/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 120.760300][ T8646] netlink: 'syz.7.1841': attribute type 6 has an invalid length. [ 121.086666][ T8667] loop2: detected capacity change from 0 to 128 [ 121.109878][ T8667] ext4 filesystem being mounted at /360/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.149992][ T8667] EXT4-fs (loop2): shut down requested (0) [ 121.358895][ T8517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.411287][ T8685] netlink: 'syz.5.1859': attribute type 1 has an invalid length. [ 121.455178][ T8689] Invalid ELF header magic: != ELF [ 121.704722][ T8681] loop7: detected capacity change from 0 to 1024 [ 121.834681][ T8713] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1870'. [ 121.974045][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1878'. [ 121.983136][ T8729] netlink: 'syz.7.1878': attribute type 30 has an invalid length. [ 122.055805][ T8735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8735 comm=syz.2.1881 [ 122.489100][ T8785] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1904'. [ 122.886951][ T8804] loop7: detected capacity change from 0 to 512 [ 122.905756][ T8804] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.918672][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1911'. [ 122.937575][ T8804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.026208][ T8815] loop7: detected capacity change from 0 to 8192 [ 123.035148][ T8815] vfat filesystem being mounted at /41/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 123.124776][ T8091] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 123.132811][ T8091] FAT-fs (loop7): Filesystem has been set read-only [ 123.174729][ T8821] ext4 filesystem being mounted at /362/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.215968][ T8821] EXT4-fs (loop0): shut down requested (1) [ 123.393461][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 123.464988][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 123.465004][ T29] audit: type=1326 audit(3917222390.787:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f280814aeb9 code=0x0 [ 123.618441][ T8862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8862 comm=syz.0.1933 [ 123.828078][ T8870] EXT4-fs warning (device loop0): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 123.873432][ T29] audit: type=1400 audit(3917222391.218:1650): avc: denied { mount } for pid=8875 comm="syz.3.1939" name="/" dev="hugetlbfs" ino=22288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 123.928227][ T29] audit: type=1326 audit(3917222391.280:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 123.954671][ T29] audit: type=1326 audit(3917222391.280:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 123.978491][ T29] audit: type=1326 audit(3917222391.280:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 124.002157][ T29] audit: type=1326 audit(3917222391.280:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 124.025714][ T29] audit: type=1326 audit(3917222391.280:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 124.049260][ T29] audit: type=1326 audit(3917222391.280:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 124.072731][ T29] audit: type=1326 audit(3917222391.280:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.3.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 124.134106][ T29] audit: type=1400 audit(3917222391.501:1658): avc: denied { mount } for pid=8890 comm="syz.3.1942" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 124.156937][ T8891] 9p: Bad value for 'rfdno' [ 124.678177][ T8969] set_capacity_and_notify: 2 callbacks suppressed [ 124.678199][ T8969] loop5: detected capacity change from 0 to 512 [ 124.696506][ T8969] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1958: iget: bad i_size value: -4294967286 [ 124.709442][ T8969] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1958: couldn't read orphan inode 15 (err -117) [ 124.936356][ T8996] team0: Device ipvlan0 failed to register rx_handler [ 125.074168][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1968'. [ 125.346196][ T9016] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1975'. [ 125.485338][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.795668][ T9043] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 125.803470][ T9043] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 126.022120][ T9052] loop5: detected capacity change from 0 to 8192 [ 126.182302][ T9063] loop2: detected capacity change from 0 to 512 [ 126.255787][ T9063] EXT4-fs mount: 18 callbacks suppressed [ 126.255808][ T9063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 126.266178][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1996'. [ 126.304706][ T9063] ext4 filesystem being mounted at /380/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.325307][ T9063] Invalid ELF header magic: != ELF [ 126.347401][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 126.444215][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'. [ 126.569980][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2003'. [ 126.578984][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2003'. [ 126.594553][ T9077] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9077 comm=syz.2.1999 [ 126.660584][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2003'. [ 126.669593][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2003'. [ 126.683031][ T5177] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.695172][ T5177] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.716634][ T5177] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.728317][ T5177] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.397336][ T9140] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2021'. [ 127.521218][ T9148] loop2: detected capacity change from 0 to 128 [ 127.532874][ T9148] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 127.542883][ T9148] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.555625][ T9148] ext2 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.591407][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.721046][ T9157] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 127.837647][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 128.170860][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2041'. [ 128.423272][ T9192] veth0: entered promiscuous mode [ 128.447606][ T9188] loop5: detected capacity change from 0 to 8192 [ 128.458354][ T9191] veth0: left promiscuous mode [ 128.717992][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 128.718012][ T29] audit: type=1400 audit(3917222396.309:1685): avc: denied { listen } for pid=9209 comm="syz.2.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.743579][ T29] audit: type=1400 audit(3917222396.309:1686): avc: denied { accept } for pid=9209 comm="syz.2.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.804632][ T9216] loop7: detected capacity change from 0 to 1024 [ 128.811667][ T9216] EXT4-fs: Ignoring removed oldalloc option [ 128.817640][ T9216] EXT4-fs: Ignoring removed bh option [ 128.837294][ T9216] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.887574][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.906680][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2059'. [ 128.938379][ T9230] Cannot find del_set index 2 as target [ 129.029989][ T9193] chnl_net:caif_netlink_parms(): no params data found [ 129.063164][ T9236] loop5: detected capacity change from 0 to 8192 [ 129.095799][ T29] audit: type=1326 audit(3917222396.697:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 129.119362][ T29] audit: type=1326 audit(3917222396.697:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 129.143383][ T29] audit: type=1326 audit(3917222396.708:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 129.174076][ T29] audit: type=1326 audit(3917222396.792:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 129.197765][ T29] audit: type=1326 audit(3917222396.792:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 129.227215][ T29] audit: type=1326 audit(3917222396.792:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 129.250890][ T29] audit: type=1326 audit(3917222396.792:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 129.274664][ T29] audit: type=1326 audit(3917222396.792:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9246 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc817eaeb9 code=0x7ffc0000 [ 129.337140][ T9193] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.344280][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.352050][ T9193] bridge_slave_0: entered allmulticast mode [ 129.378639][ T9193] bridge_slave_0: entered promiscuous mode [ 129.385907][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.393067][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.401213][ T9193] bridge_slave_1: entered allmulticast mode [ 129.408447][ T9193] bridge_slave_1: entered promiscuous mode [ 129.444477][ T9193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.455137][ T9193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.505916][ T9193] team0: Port device team_slave_0 added [ 129.512815][ T9193] team0: Port device team_slave_1 added [ 129.532473][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.539518][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.565619][ T9193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.578930][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.585987][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.612089][ T9193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.687616][ T9193] hsr_slave_0: entered promiscuous mode [ 129.696287][ T9281] netlink: 'syz.5.2081': attribute type 1 has an invalid length. [ 129.711304][ T9193] hsr_slave_1: entered promiscuous mode [ 129.724984][ T9193] debugfs: 'hsr0' already exists in 'hsr' [ 129.731398][ T9193] Cannot create hsr debugfs directory [ 129.749351][ T9281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.769144][ T9281] bond1: (slave geneve2): making interface the new active one [ 129.807009][ T9281] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 130.022799][ T5177] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.031948][ T5177] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.048034][ T5177] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.058912][ T5177] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.072685][ T9312] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 130.876056][ T9324] loop2: detected capacity change from 0 to 1024 [ 130.899302][ T9324] EXT4-fs: Ignoring removed nobh option [ 130.905034][ T9324] EXT4-fs: inline encryption not supported [ 130.952770][ T9324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.973594][ T9324] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 131.011228][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.805155][ T9319] syz.3.2097 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 131.815944][ T9319] CPU: 0 UID: 0 PID: 9319 Comm: syz.3.2097 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.816006][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.816020][ T9319] Call Trace: [ 131.816027][ T9319] [ 131.816035][ T9319] __dump_stack+0x1d/0x30 [ 131.816148][ T9319] dump_stack_lvl+0x95/0xd0 [ 131.816177][ T9319] dump_stack+0x15/0x1b [ 131.816203][ T9319] dump_header+0x80/0x240 [ 131.816286][ T9319] oom_kill_process+0x295/0x350 [ 131.816313][ T9319] out_of_memory+0x97d/0xb80 [ 131.816352][ T9319] try_charge_memcg+0x62e/0xa10 [ 131.816382][ T9319] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 131.816495][ T9319] __read_swap_cache_async+0x17b/0x2d0 [ 131.816531][ T9319] swap_cluster_readahead+0x262/0x3c0 [ 131.816578][ T9319] swapin_readahead+0xde/0x840 [ 131.816635][ T9319] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 131.816671][ T9319] ? lruvec_stat_mod_folio+0xd2/0x110 [ 131.816705][ T9319] ? __rcu_read_unlock+0x4e/0x70 [ 131.816742][ T9319] ? swap_cache_get_folio+0x26f/0x280 [ 131.816791][ T9319] do_swap_page+0x59b/0x2a50 [ 131.816838][ T9319] ? __rcu_read_lock+0x36/0x50 [ 131.816920][ T9319] ? __pfx_default_wake_function+0x10/0x10 [ 131.816964][ T9319] handle_mm_fault+0xb40/0x3030 [ 131.817011][ T9319] ? vma_start_read+0x1c7/0x2c0 [ 131.817054][ T9319] do_user_addr_fault+0x62f/0x1050 [ 131.817152][ T9319] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 131.817182][ T9319] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 131.817357][ T9319] ? irqentry_exit+0x3c/0x510 [ 131.817390][ T9319] exc_page_fault+0x62/0xa0 [ 131.817421][ T9319] asm_exc_page_fault+0x26/0x30 [ 131.817482][ T9319] RIP: 0033:0x7fbc8169f73f [ 131.817507][ T9319] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d d2 28 3b 00 89 f0 4c 8d 05 c9 08 3b 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 131.817526][ T9319] RSP: 002b:00007ffcb0087428 EFLAGS: 00010206 [ 131.817547][ T9319] RAX: 00000000819a8de7 RBX: ffffffff819a8de7 RCX: 0000001b34021178 [ 131.817567][ T9319] RDX: 0000000000000de7 RSI: ffffffff819a8de7 RDI: 0000000000000002 [ 131.817591][ T9319] RBP: 0000000000000001 R08: 00007fbc81a50000 R09: 00007fbc81a52000 [ 131.817628][ T9319] R10: 00000000819a8deb R11: 0000000000000002 R12: 00007fbc81a66038 [ 131.817646][ T9319] R13: 0000000000000001 R14: ffffffff819a88c2 R15: 00007fbc82595720 [ 131.817669][ T9319] ? fdget+0x12/0x110 [ 131.817692][ T9319] ? set_close_on_exec+0xb7/0x110 [ 131.817745][ T9319] ? set_close_on_exec+0xb7/0x110 [ 131.817880][ T9319] [ 131.817890][ T9319] memory: usage 307200kB, limit 307200kB, failcnt 234 [ 132.069998][ T9319] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0 [ 132.077967][ T9319] kmem: usage 300000kB, limit 9007199254740988kB, failcnt 0 [ 132.085273][ T9319] Memory cgroup stats for /syz3: [ 132.086053][ T9319] cache 0 [ 132.094022][ T9319] rss 7368704 [ 132.097354][ T9319] shmem 0 [ 132.100305][ T9319] mapped_file 0 [ 132.103760][ T9319] dirty 0 [ 132.106760][ T9319] writeback 0 [ 132.110233][ T9319] workingset_refault_anon 510 [ 132.115017][ T9319] workingset_refault_file 175 [ 132.119871][ T9319] swap 442368 [ 132.123208][ T9319] swapcached 0 [ 132.126679][ T9319] pgpgin 94029 [ 132.130125][ T9319] pgpgout 92229 [ 132.133582][ T9319] pgfault 113463 [ 132.137173][ T9319] pgmajfault 78 [ 132.140647][ T9319] inactive_anon 0 [ 132.144372][ T9319] active_anon 0 [ 132.147867][ T9319] inactive_file 7372800 [ 132.152019][ T9319] active_file 0 [ 132.155517][ T9319] unevictable 0 [ 132.159001][ T9319] hierarchical_memory_limit 314572800 [ 132.164525][ T9319] hierarchical_memsw_limit 9223372036854771712 [ 132.170733][ T9319] total_cache 0 [ 132.174312][ T9319] total_rss 7368704 [ 132.178142][ T9319] total_shmem 0 [ 132.181766][ T9319] total_mapped_file 0 [ 132.185803][ T9319] total_dirty 0 [ 132.189280][ T9319] total_writeback 0 [ 132.193154][ T9319] total_workingset_refault_anon 510 [ 132.198423][ T9319] total_workingset_refault_file 175 [ 132.203671][ T9319] total_swap 442368 [ 132.207502][ T9319] total_swapcached 0 [ 132.211496][ T9319] total_pgpgin 94029 [ 132.215411][ T9319] total_pgpgout 92229 [ 132.219405][ T9319] total_pgfault 113463 [ 132.221376][ T9258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.223576][ T9319] total_pgmajfault 78 [ 132.236248][ T9319] total_inactive_anon 0 [ 132.240533][ T9319] total_active_anon 0 [ 132.244571][ T9319] total_inactive_file 7372800 [ 132.249394][ T9319] total_active_file 0 [ 132.249635][ T9193] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 132.253437][ T9319] total_unevictable 0 [ 132.253449][ T9319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.485,pid=4874,uid=0 [ 132.269103][ T9193] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 132.278907][ T9319] Memory cgroup out of memory: Killed process 4874 (syz.3.485) total-vm:96048kB, anon-rss:1236kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 132.357599][ T9193] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 132.379035][ T9193] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 132.383802][ T9351] loop7: detected capacity change from 0 to 128 [ 132.446582][ T9351] vfat filesystem being mounted at /70/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 132.520517][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.548534][ T9193] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.597894][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.605099][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.638396][ T8039] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 132.647323][ T8039] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.662285][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.669426][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.854488][ T9384] __nla_validate_parse: 9 callbacks suppressed [ 132.854506][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2119'. [ 132.876281][ T9193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.979399][ T9389] loop5: detected capacity change from 0 to 1024 [ 133.049401][ T9389] EXT4-fs: Ignoring removed oldalloc option [ 133.490439][ T9193] veth0_vlan: entered promiscuous mode [ 133.546853][ T9193] veth1_vlan: entered promiscuous mode [ 133.602579][ T9193] veth0_macvtap: entered promiscuous mode [ 133.610425][ T9193] veth1_macvtap: entered promiscuous mode [ 133.650989][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.662459][ T9408] loop2: detected capacity change from 0 to 512 [ 133.696424][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.707335][ T5169] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.722100][ T9408] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.765873][ T5169] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.782846][ T9408] EXT4-fs (loop2): 1 truncate cleaned up [ 133.789132][ T9408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.807656][ T5169] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.829343][ T5169] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.893993][ T9415] loop5: detected capacity change from 0 to 4096 [ 134.137714][ T3314] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 134.148782][ T3314] CPU: 0 UID: 0 PID: 3314 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.148861][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.148929][ T3314] Call Trace: [ 134.148938][ T3314] [ 134.148948][ T3314] __dump_stack+0x1d/0x30 [ 134.148979][ T3314] dump_stack_lvl+0x95/0xd0 [ 134.149080][ T3314] dump_stack+0x15/0x1b [ 134.149104][ T3314] dump_header+0x80/0x240 [ 134.149130][ T3314] oom_kill_process+0x295/0x350 [ 134.149160][ T3314] out_of_memory+0x97d/0xb80 [ 134.149217][ T3314] try_charge_memcg+0x62e/0xa10 [ 134.149248][ T3314] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 134.149342][ T3314] __read_swap_cache_async+0x17b/0x2d0 [ 134.149389][ T3314] swap_cluster_readahead+0x262/0x3c0 [ 134.149431][ T3314] swapin_readahead+0xde/0x840 [ 134.149545][ T3314] ? __rcu_read_unlock+0x4e/0x70 [ 134.149578][ T3314] ? swap_cache_get_folio+0x26f/0x280 [ 134.149614][ T3314] do_swap_page+0x59b/0x2a50 [ 134.149650][ T3314] ? ___perf_sw_event+0x2e3/0x320 [ 134.149689][ T3314] ? __rcu_read_lock+0x36/0x50 [ 134.149740][ T3314] ? __pfx_default_wake_function+0x10/0x10 [ 134.149860][ T3314] handle_mm_fault+0xb40/0x3030 [ 134.149965][ T3314] ? mt_find+0x291/0x3b0 [ 134.150009][ T3314] do_user_addr_fault+0x3fd/0x1050 [ 134.150151][ T3314] exc_page_fault+0x62/0xa0 [ 134.150180][ T3314] asm_exc_page_fault+0x26/0x30 [ 134.150207][ T3314] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 134.150252][ T3314] Code: c9 75 f6 e9 52 23 02 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 134.150272][ T3314] RSP: 0018:ffffc9000162bc88 EFLAGS: 00050246 [ 134.150384][ T3314] RAX: 0000000000000000 RBX: 00007ffcb0087644 RCX: 0000000000000040 [ 134.150401][ T3314] RDX: 0000000000000000 RSI: 00007ffcb0087300 RDI: 00007ffcb0087500 [ 134.150417][ T3314] RBP: ffff888103b07000 R08: 0001888103b06fd7 R09: 0000000000000000 [ 134.150431][ T3314] R10: 0000000004000000 R11: 00007fbc8169f700 R12: 00007ffffffff000 [ 134.150445][ T3314] R13: 00007ffcb0087300 R14: 00007ffcb0087300 R15: ffff888103b06300 [ 134.150528][ T3314] copy_fpstate_to_sigframe+0xaf/0x7d0 [ 134.150553][ T3314] ? __dequeue_signal+0x21b/0x280 [ 134.150575][ T3314] ? dequeue_signal+0x365/0x3a0 [ 134.150593][ T3314] ? x86_task_fpu+0x36/0x60 [ 134.150663][ T3314] get_sigframe+0x34c/0x470 [ 134.150692][ T3314] ? get_signal+0xdbe/0xf60 [ 134.150732][ T3314] x64_setup_rt_frame+0xa7/0x4e0 [ 134.150765][ T3314] arch_do_signal_or_restart+0x24b/0x450 [ 134.150801][ T3314] irqentry_exit+0xf7/0x510 [ 134.150865][ T3314] asm_exc_page_fault+0x26/0x30 [ 134.150890][ T3314] RIP: 0033:0x7fbc816b8fb4 [ 134.150910][ T3314] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 c8 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c6 ed 00 48 01 d1 [ 134.150933][ T3314] RSP: 002b:00007ffcb0087700 EFLAGS: 00010202 [ 134.150970][ T3314] RAX: 0000001b33a24000 RBX: 00000000000003fd RCX: 0000000000020f58 [ 134.150984][ T3314] RDX: 000000000c648e84 RSI: 00007ffcb0087790 RDI: 0000000000000001 [ 134.150997][ T3314] RBP: 00007ffcb008773c R08: 000000002f4657ea R09: 7fffffffffffffff [ 134.151010][ T3314] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 134.151023][ T3314] R13: 00000000000927c0 R14: 0000000000020f38 R15: 00007ffcb0087790 [ 134.151047][ T3314] [ 134.151129][ T3314] memory: usage 307200kB, limit 307200kB, failcnt 300 [ 134.487978][ T3314] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 134.495979][ T3314] kmem: usage 300000kB, limit 9007199254740988kB, failcnt 0 [ 134.503346][ T3314] Memory cgroup stats for /syz3: [ 134.508930][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.556506][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 134.556522][ T29] audit: type=1326 audit(3917222402.440:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 134.586321][ T29] audit: type=1326 audit(3917222402.440:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 134.658717][ T3314] cache 0 [ 134.661827][ T3314] rss 7368704 [ 134.665253][ T3314] shmem 0 [ 134.668247][ T3314] mapped_file 0 [ 134.671727][ T3314] dirty 0 [ 134.674760][ T3314] writeback 0 [ 134.678113][ T3314] workingset_refault_anon 513 [ 134.682811][ T3314] workingset_refault_file 176 [ 134.687557][ T3314] swap 266240 [ 134.690863][ T3314] swapcached 0 [ 134.694298][ T3314] pgpgin 94033 [ 134.697696][ T3314] pgpgout 92233 [ 134.701171][ T3314] pgfault 113464 [ 134.704050][ T29] audit: type=1326 audit(3917222402.492:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 134.704841][ T3314] pgmajfault 79 [ 134.728238][ T29] audit: type=1326 audit(3917222402.492:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 134.728273][ T29] audit: type=1326 audit(3917222402.492:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.2.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 134.731770][ T3314] inactive_anon 0 [ 134.755182][ T29] audit: type=1400 audit(3917222402.534:1725): avc: denied { mounton } for pid=9431 comm="syz.7.2132" path="/77/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 134.778819][ T3314] active_anon 0 [ 134.809195][ T3314] inactive_file 7372800 [ 134.813399][ T3314] active_file 0 [ 134.816883][ T3314] unevictable 0 [ 134.820463][ T3314] hierarchical_memory_limit 314572800 [ 134.825882][ T3314] hierarchical_memsw_limit 9223372036854771712 [ 134.832070][ T3314] total_cache 0 [ 134.835547][ T3314] total_rss 7368704 [ 134.839386][ T3314] total_shmem 0 [ 134.842959][ T3314] total_mapped_file 0 [ 134.846965][ T3314] total_dirty 0 [ 134.850525][ T3314] total_writeback 0 [ 134.854359][ T3314] total_workingset_refault_anon 513 [ 134.859639][ T3314] total_workingset_refault_file 176 [ 134.864858][ T3314] total_swap 266240 [ 134.868715][ T3314] total_swapcached 0 [ 134.872630][ T3314] total_pgpgin 94033 [ 134.876548][ T3314] total_pgpgout 92233 [ 134.880574][ T3314] total_pgfault 113464 [ 134.884730][ T3314] total_pgmajfault 79 [ 134.888823][ T3314] total_inactive_anon 0 [ 134.893123][ T3314] total_active_anon 0 [ 134.897207][ T3314] total_inactive_file 7372800 [ 134.902002][ T3314] total_active_file 0 [ 134.905998][ T3314] total_unevictable 0 [ 134.910044][ T3314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2097,pid=9319,uid=0 [ 134.924906][ T3314] Memory cgroup out of memory: Killed process 9319 (syz.3.2097) total-vm:96312kB, anon-rss:8372kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 135.013909][ T29] audit: type=1326 audit(3917222402.912:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3264aeb9 code=0x7ffc0000 [ 135.037417][ T29] audit: type=1326 audit(3917222402.912:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3264aeb9 code=0x7ffc0000 [ 135.060934][ T29] audit: type=1326 audit(3917222402.912:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f0d3264aeb9 code=0x7ffc0000 [ 135.084430][ T29] audit: type=1326 audit(3917222402.912:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d325ec2d9 code=0x7ffc0000 [ 135.197384][ T9444] netlink: 'syz.8.2135': attribute type 13 has an invalid length. [ 135.237185][ T9444] gretap0: refused to change device tx_queue_len [ 135.263253][ T9444] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 135.710071][ T9476] loop8: detected capacity change from 0 to 1024 [ 135.729692][ T9476] EXT4-fs: inline encryption not supported [ 135.742637][ T9476] EXT4-fs: Ignoring removed nobh option [ 135.748306][ T9476] EXT4-fs: Ignoring removed bh option [ 135.779385][ T9476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.840751][ T9193] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.908911][ T9486] sg_write: data in/out 32732/14 bytes for SCSI command 0x0-- guessing data in; [ 135.908911][ T9486] program syz.5.2152 not setting count and/or reply_len properly [ 136.354571][ T9511] netlink: 'syz.2.2164': attribute type 30 has an invalid length. [ 136.584816][ T9523] sctp: [Deprecated]: syz.5.2169 (pid 9523) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.584816][ T9523] Use struct sctp_sack_info instead [ 136.967021][ T30] oom_reaper: reaped process 9319 (syz.3.2097), now anon-rss:20kB, file-rss:21140kB, shmem-rss:0kB [ 137.110875][ T9542] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.2179'. [ 137.266346][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2181'. [ 137.275460][ T9554] netlink: 'syz.3.2181': attribute type 11 has an invalid length. [ 137.283432][ T9554] netlink: 'syz.3.2181': attribute type 14 has an invalid length. [ 137.341783][ T9527] loop2: detected capacity change from 0 to 2048 [ 137.400636][ T3304] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 137.401804][ T9554] vxlan1: entered promiscuous mode [ 137.507976][ T3304] loop2: p2 start 150994944 is beyond EOD, truncated [ 137.566863][ T3304] loop2: p5 start 150994944 is beyond EOD, truncated [ 137.573809][ T3304] loop2: p6 start 150994944 is beyond EOD, truncated [ 137.580537][ T3304] loop2: p7 start 150994944 is beyond EOD, truncated [ 137.587414][ T3304] loop2: p8 start 150994944 is beyond EOD, truncated [ 137.594175][ T3304] loop2: p9 start 150994944 is beyond EOD, truncated [ 137.600930][ T3304] loop2: p10 start 150994944 is beyond EOD, truncated [ 137.607953][ T3304] loop2: p11 start 150994944 is beyond EOD, truncated [ 137.614856][ T3304] loop2: p12 start 150994944 is beyond EOD, truncated [ 137.621806][ T3304] loop2: p13 start 150994944 is beyond EOD, truncated [ 137.628632][ T3304] loop2: p14 start 150994944 is beyond EOD, truncated [ 137.635475][ T3304] loop2: p15 start 150994944 is beyond EOD, truncated [ 137.642320][ T3304] loop2: p16 start 150994944 is beyond EOD, truncated [ 137.649110][ T3304] loop2: p17 start 150994944 is beyond EOD, truncated [ 137.656002][ T3304] loop2: p18 start 150994944 is beyond EOD, truncated [ 137.662844][ T3304] loop2: p19 start 150994944 is beyond EOD, truncated [ 137.669659][ T3304] loop2: p20 start 150994944 is beyond EOD, truncated [ 137.676543][ T3304] loop2: p21 start 150994944 is beyond EOD, truncated [ 137.683563][ T3304] loop2: p22 start 150994944 is beyond EOD, truncated [ 137.690425][ T3304] loop2: p23 start 150994944 is beyond EOD, truncated [ 137.697220][ T3304] loop2: p24 start 150994944 is beyond EOD, truncated [ 137.704128][ T3304] loop2: p25 start 150994944 is beyond EOD, truncated [ 137.711013][ T3304] loop2: p26 start 150994944 is beyond EOD, truncated [ 137.717853][ T3304] loop2: p27 start 150994944 is beyond EOD, truncated [ 137.724659][ T3304] loop2: p28 start 150994944 is beyond EOD, truncated [ 137.731495][ T3304] loop2: p29 start 150994944 is beyond EOD, truncated [ 137.738401][ T3304] loop2: p30 start 150994944 is beyond EOD, truncated [ 137.745348][ T3304] loop2: p31 start 150994944 is beyond EOD, truncated [ 137.752135][ T3304] loop2: p32 start 150994944 is beyond EOD, truncated [ 137.758985][ T3304] loop2: p33 start 150994944 is beyond EOD, truncated [ 137.765878][ T3304] loop2: p34 start 150994944 is beyond EOD, truncated [ 137.772713][ T3304] loop2: p35 start 150994944 is beyond EOD, truncated [ 137.779536][ T3304] loop2: p36 start 150994944 is beyond EOD, truncated [ 137.787011][ T3304] loop2: p37 start 150994944 is beyond EOD, truncated [ 137.793843][ T3304] loop2: p38 start 150994944 is beyond EOD, truncated [ 137.800760][ T3304] loop2: p39 start 150994944 is beyond EOD, truncated [ 137.807590][ T3304] loop2: p40 start 150994944 is beyond EOD, truncated [ 137.814494][ T3304] loop2: p41 start 150994944 is beyond EOD, truncated [ 137.821488][ T3304] loop2: p42 start 150994944 is beyond EOD, truncated [ 137.828299][ T3304] loop2: p43 start 150994944 is beyond EOD, truncated [ 137.835155][ T3304] loop2: p44 start 150994944 is beyond EOD, truncated [ 137.841978][ T3304] loop2: p45 start 150994944 is beyond EOD, truncated [ 137.848811][ T3304] loop2: p46 start 150994944 is beyond EOD, truncated [ 137.855659][ T3304] loop2: p47 start 150994944 is beyond EOD, truncated [ 137.862480][ T3304] loop2: p48 start 150994944 is beyond EOD, truncated [ 137.869298][ T3304] loop2: p49 start 150994944 is beyond EOD, truncated [ 137.876192][ T3304] loop2: p50 start 150994944 is beyond EOD, truncated [ 137.883031][ T3304] loop2: p51 start 150994944 is beyond EOD, truncated [ 137.889874][ T3304] loop2: p52 start 150994944 is beyond EOD, truncated [ 137.896733][ T3304] loop2: p53 start 150994944 is beyond EOD, truncated [ 137.903565][ T3304] loop2: p54 start 150994944 is beyond EOD, truncated [ 137.910410][ T3304] loop2: p55 start 150994944 is beyond EOD, truncated [ 137.917248][ T3304] loop2: p56 start 150994944 is beyond EOD, truncated [ 137.924043][ T3304] loop2: p57 start 150994944 is beyond EOD, truncated [ 137.930946][ T3304] loop2: p58 start 150994944 is beyond EOD, truncated [ 137.937885][ T3304] loop2: p59 start 150994944 is beyond EOD, truncated [ 137.944693][ T3304] loop2: p60 start 150994944 is beyond EOD, truncated [ 137.951549][ T3304] loop2: p61 start 150994944 is beyond EOD, truncated [ 137.958434][ T3304] loop2: p62 start 150994944 is beyond EOD, truncated [ 137.965278][ T3304] loop2: p63 start 150994944 is beyond EOD, truncated [ 137.972090][ T3304] loop2: p64 start 150994944 is beyond EOD, truncated [ 137.979030][ T3304] loop2: p65 start 150994944 is beyond EOD, truncated [ 137.985907][ T3304] loop2: p66 start 150994944 is beyond EOD, truncated [ 137.992903][ T3304] loop2: p67 start 150994944 is beyond EOD, truncated [ 137.999692][ T3304] loop2: p68 start 150994944 is beyond EOD, truncated [ 138.006604][ T3304] loop2: p69 start 150994944 is beyond EOD, truncated [ 138.013447][ T3304] loop2: p70 start 150994944 is beyond EOD, truncated [ 138.020317][ T3304] loop2: p71 start 150994944 is beyond EOD, truncated [ 138.027158][ T3304] loop2: p72 start 150994944 is beyond EOD, truncated [ 138.034084][ T3304] loop2: p73 start 150994944 is beyond EOD, truncated [ 138.040983][ T3304] loop2: p74 start 150994944 is beyond EOD, truncated [ 138.047782][ T3304] loop2: p75 start 150994944 is beyond EOD, truncated [ 138.054636][ T3304] loop2: p76 start 150994944 is beyond EOD, truncated [ 138.061714][ T3304] loop2: p77 start 150994944 is beyond EOD, truncated [ 138.068633][ T3304] loop2: p78 start 150994944 is beyond EOD, truncated [ 138.075550][ T3304] loop2: p79 start 150994944 is beyond EOD, truncated [ 138.082453][ T3304] loop2: p80 start 150994944 is beyond EOD, truncated [ 138.089306][ T3304] loop2: p81 start 150994944 is beyond EOD, truncated [ 138.096295][ T3304] loop2: p82 start 150994944 is beyond EOD, truncated [ 138.103143][ T3304] loop2: p83 start 150994944 is beyond EOD, truncated [ 138.110095][ T3304] loop2: p84 start 150994944 is beyond EOD, truncated [ 138.116948][ T3304] loop2: p85 start 150994944 is beyond EOD, truncated [ 138.124008][ T3304] loop2: p86 start 150994944 is beyond EOD, truncated [ 138.130878][ T3304] loop2: p87 start 150994944 is beyond EOD, truncated [ 138.137842][ T3304] loop2: p88 start 150994944 is beyond EOD, truncated [ 138.144655][ T3304] loop2: p89 start 150994944 is beyond EOD, truncated [ 138.151576][ T3304] loop2: p90 start 150994944 is beyond EOD, truncated [ 138.158411][ T3304] loop2: p91 start 150994944 is beyond EOD, truncated [ 138.165255][ T3304] loop2: p92 start 150994944 is beyond EOD, truncated [ 138.172081][ T3304] loop2: p93 start 150994944 is beyond EOD, truncated [ 138.178956][ T3304] loop2: p94 start 150994944 is beyond EOD, truncated [ 138.185786][ T3304] loop2: p95 start 150994944 is beyond EOD, truncated [ 138.192608][ T3304] loop2: p96 start 150994944 is beyond EOD, truncated [ 138.199478][ T3304] loop2: p97 start 150994944 is beyond EOD, truncated [ 138.206393][ T3304] loop2: p98 start 150994944 is beyond EOD, truncated [ 138.213439][ T3304] loop2: p99 start 150994944 is beyond EOD, truncated [ 138.220251][ T3304] loop2: p100 start 150994944 is beyond EOD, truncated [ 138.227283][ T3304] loop2: p101 start 150994944 is beyond EOD, truncated [ 138.234226][ T3304] loop2: p102 start 150994944 is beyond EOD, truncated [ 138.241125][ T3304] loop2: p103 start 150994944 is beyond EOD, truncated [ 138.248027][ T3304] loop2: p104 start 150994944 is beyond EOD, truncated [ 138.255021][ T3304] loop2: p105 start 150994944 is beyond EOD, truncated [ 138.262047][ T3304] loop2: p106 start 150994944 is beyond EOD, truncated [ 138.268958][ T3304] loop2: p107 start 150994944 is beyond EOD, truncated [ 138.275848][ T3304] loop2: p108 start 150994944 is beyond EOD, truncated [ 138.282760][ T3304] loop2: p109 start 150994944 is beyond EOD, truncated [ 138.289869][ T3304] loop2: p110 start 150994944 is beyond EOD, truncated [ 138.296811][ T3304] loop2: p111 start 150994944 is beyond EOD, truncated [ 138.303839][ T3304] loop2: p112 start 150994944 is beyond EOD, truncated [ 138.310822][ T3304] loop2: p113 start 150994944 is beyond EOD, truncated [ 138.317709][ T3304] loop2: p114 start 150994944 is beyond EOD, truncated [ 138.324593][ T3304] loop2: p115 start 150994944 is beyond EOD, truncated [ 138.331585][ T3304] loop2: p116 start 150994944 is beyond EOD, truncated [ 138.338515][ T3304] loop2: p117 start 150994944 is beyond EOD, truncated [ 138.345620][ T3304] loop2: p118 start 150994944 is beyond EOD, truncated [ 138.352643][ T3304] loop2: p119 start 150994944 is beyond EOD, truncated [ 138.359562][ T3304] loop2: p120 start 150994944 is beyond EOD, truncated [ 138.366696][ T3304] loop2: p121 start 150994944 is beyond EOD, truncated [ 138.373591][ T3304] loop2: p122 start 150994944 is beyond EOD, truncated [ 138.380611][ T3304] loop2: p123 start 150994944 is beyond EOD, truncated [ 138.387536][ T3304] loop2: p124 start 150994944 is beyond EOD, truncated [ 138.394479][ T3304] loop2: p125 start 150994944 is beyond EOD, truncated [ 138.401432][ T3304] loop2: p126 start 150994944 is beyond EOD, truncated [ 138.408390][ T3304] loop2: p127 start 150994944 is beyond EOD, truncated [ 138.415341][ T3304] loop2: p128 start 150994944 is beyond EOD, truncated [ 138.422261][ T3304] loop2: p129 start 150994944 is beyond EOD, truncated [ 138.429148][ T3304] loop2: p130 start 150994944 is beyond EOD, truncated [ 138.436151][ T3304] loop2: p131 start 150994944 is beyond EOD, truncated [ 138.443146][ T3304] loop2: p132 start 150994944 is beyond EOD, truncated [ 138.450112][ T3304] loop2: p133 start 150994944 is beyond EOD, truncated [ 138.457033][ T3304] loop2: p134 start 150994944 is beyond EOD, truncated [ 138.464025][ T3304] loop2: p135 start 150994944 is beyond EOD, truncated [ 138.470979][ T3304] loop2: p136 start 150994944 is beyond EOD, truncated [ 138.477964][ T3304] loop2: p137 start 150994944 is beyond EOD, truncated [ 138.484901][ T3304] loop2: p138 start 150994944 is beyond EOD, truncated [ 138.491868][ T3304] loop2: p139 start 150994944 is beyond EOD, truncated [ 138.498787][ T3304] loop2: p140 start 150994944 is beyond EOD, truncated [ 138.505688][ T3304] loop2: p141 start 150994944 is beyond EOD, truncated [ 138.512606][ T3304] loop2: p142 start 150994944 is beyond EOD, truncated [ 138.519601][ T3304] loop2: p143 start 150994944 is beyond EOD, truncated [ 138.526528][ T3304] loop2: p144 start 150994944 is beyond EOD, truncated [ 138.533475][ T3304] loop2: p145 start 150994944 is beyond EOD, truncated [ 138.540445][ T3304] loop2: p146 start 150994944 is beyond EOD, truncated [ 138.547447][ T3304] loop2: p147 start 150994944 is beyond EOD, truncated [ 138.554329][ T3304] loop2: p148 start 150994944 is beyond EOD, truncated [ 138.561370][ T3304] loop2: p149 start 150994944 is beyond EOD, truncated [ 138.568394][ T3304] loop2: p150 start 150994944 is beyond EOD, truncated [ 138.575336][ T3304] loop2: p151 start 150994944 is beyond EOD, truncated [ 138.582212][ T3304] loop2: p152 start 150994944 is beyond EOD, truncated [ 138.589138][ T3304] loop2: p153 start 150994944 is beyond EOD, truncated [ 138.596134][ T3304] loop2: p154 start 150994944 is beyond EOD, truncated [ 138.603084][ T3304] loop2: p155 start 150994944 is beyond EOD, truncated [ 138.609977][ T3304] loop2: p156 start 150994944 is beyond EOD, truncated [ 138.616982][ T3304] loop2: p157 start 150994944 is beyond EOD, truncated [ 138.623895][ T3304] loop2: p158 start 150994944 is beyond EOD, truncated [ 138.630829][ T3304] loop2: p159 start 150994944 is beyond EOD, truncated [ 138.637852][ T3304] loop2: p160 start 150994944 is beyond EOD, truncated [ 138.645115][ T3304] loop2: p161 start 150994944 is beyond EOD, truncated [ 138.652189][ T3304] loop2: p162 start 150994944 is beyond EOD, truncated [ 138.659135][ T3304] loop2: p163 start 150994944 is beyond EOD, truncated [ 138.666038][ T3304] loop2: p164 start 150994944 is beyond EOD, truncated [ 138.673040][ T3304] loop2: p165 start 150994944 is beyond EOD, truncated [ 138.679980][ T3304] loop2: p166 start 150994944 is beyond EOD, truncated [ 138.686989][ T3304] loop2: p167 start 150994944 is beyond EOD, truncated [ 138.693999][ T3304] loop2: p168 start 150994944 is beyond EOD, truncated [ 138.700917][ T3304] loop2: p169 start 150994944 is beyond EOD, truncated [ 138.707820][ T3304] loop2: p170 start 150994944 is beyond EOD, truncated [ 138.714715][ T3304] loop2: p171 start 150994944 is beyond EOD, truncated [ 138.721763][ T3304] loop2: p172 start 150994944 is beyond EOD, truncated [ 138.728689][ T3304] loop2: p173 start 150994944 is beyond EOD, truncated [ 138.735671][ T3304] loop2: p174 start 150994944 is beyond EOD, truncated [ 138.742549][ T3304] loop2: p175 start 150994944 is beyond EOD, truncated [ 138.749653][ T3304] loop2: p176 start 150994944 is beyond EOD, truncated [ 138.756787][ T3304] loop2: p177 start 150994944 is beyond EOD, truncated [ 138.763812][ T3304] loop2: p178 start 150994944 is beyond EOD, truncated [ 138.770729][ T3304] loop2: p179 start 150994944 is beyond EOD, truncated [ 138.777628][ T3304] loop2: p180 start 150994944 is beyond EOD, truncated [ 138.784538][ T3304] loop2: p181 start 150994944 is beyond EOD, truncated [ 138.791524][ T3304] loop2: p182 start 150994944 is beyond EOD, truncated [ 138.798446][ T3304] loop2: p183 start 150994944 is beyond EOD, truncated [ 138.805387][ T3304] loop2: p184 start 150994944 is beyond EOD, truncated [ 138.812305][ T3304] loop2: p185 start 150994944 is beyond EOD, truncated [ 138.819184][ T3304] loop2: p186 start 150994944 is beyond EOD, truncated [ 138.826099][ T3304] loop2: p187 start 150994944 is beyond EOD, truncated [ 138.833025][ T3304] loop2: p188 start 150994944 is beyond EOD, truncated [ 138.839908][ T3304] loop2: p189 start 150994944 is beyond EOD, truncated [ 138.846828][ T3304] loop2: p190 start 150994944 is beyond EOD, truncated [ 138.853749][ T3304] loop2: p191 start 150994944 is beyond EOD, truncated [ 138.860673][ T3304] loop2: p192 start 150994944 is beyond EOD, truncated [ 138.867551][ T3304] loop2: p193 start 150994944 is beyond EOD, truncated [ 138.874566][ T3304] loop2: p194 start 150994944 is beyond EOD, truncated [ 138.881681][ T3304] loop2: p195 start 150994944 is beyond EOD, truncated [ 138.888598][ T3304] loop2: p196 start 150994944 is beyond EOD, truncated [ 138.895481][ T3304] loop2: p197 start 150994944 is beyond EOD, truncated [ 138.902736][ T3304] loop2: p198 start 150994944 is beyond EOD, truncated [ 138.909853][ T3304] loop2: p199 start 150994944 is beyond EOD, truncated [ 138.916803][ T3304] loop2: p200 start 150994944 is beyond EOD, truncated [ 138.923717][ T3304] loop2: p201 start 150994944 is beyond EOD, truncated [ 138.930713][ T3304] loop2: p202 start 150994944 is beyond EOD, truncated [ 138.937617][ T3304] loop2: p203 start 150994944 is beyond EOD, truncated [ 138.944501][ T3304] loop2: p204 start 150994944 is beyond EOD, truncated [ 138.951413][ T3304] loop2: p205 start 150994944 is beyond EOD, truncated [ 138.958343][ T3304] loop2: p206 start 150994944 is beyond EOD, truncated [ 138.965275][ T3304] loop2: p207 start 150994944 is beyond EOD, truncated [ 138.972160][ T3304] loop2: p208 start 150994944 is beyond EOD, truncated [ 138.979762][ T3304] loop2: p209 start 150994944 is beyond EOD, truncated [ 138.986810][ T3304] loop2: p210 start 150994944 is beyond EOD, truncated [ 138.993788][ T3304] loop2: p211 start 150994944 is beyond EOD, truncated [ 139.000693][ T3304] loop2: p212 start 150994944 is beyond EOD, truncated [ 139.007642][ T3304] loop2: p213 start 150994944 is beyond EOD, truncated [ 139.014626][ T3304] loop2: p214 start 150994944 is beyond EOD, truncated [ 139.021533][ T3304] loop2: p215 start 150994944 is beyond EOD, truncated [ 139.028418][ T3304] loop2: p216 start 150994944 is beyond EOD, truncated [ 139.035329][ T3304] loop2: p217 start 150994944 is beyond EOD, truncated [ 139.042287][ T3304] loop2: p218 start 150994944 is beyond EOD, truncated [ 139.049197][ T3304] loop2: p219 start 150994944 is beyond EOD, truncated [ 139.056214][ T3304] loop2: p220 start 150994944 is beyond EOD, truncated [ 139.063331][ T3304] loop2: p221 start 150994944 is beyond EOD, truncated [ 139.070253][ T3304] loop2: p222 start 150994944 is beyond EOD, truncated [ 139.077134][ T3304] loop2: p223 start 150994944 is beyond EOD, truncated [ 139.084050][ T3304] loop2: p224 start 150994944 is beyond EOD, truncated [ 139.090987][ T3304] loop2: p225 start 150994944 is beyond EOD, truncated [ 139.097881][ T3304] loop2: p226 start 150994944 is beyond EOD, truncated [ 139.104816][ T3304] loop2: p227 start 150994944 is beyond EOD, truncated [ 139.111791][ T3304] loop2: p228 start 150994944 is beyond EOD, truncated [ 139.118687][ T3304] loop2: p229 start 150994944 is beyond EOD, truncated [ 139.125626][ T3304] loop2: p230 start 150994944 is beyond EOD, truncated [ 139.132720][ T3304] loop2: p231 start 150994944 is beyond EOD, truncated [ 139.139759][ T3304] loop2: p232 start 150994944 is beyond EOD, truncated [ 139.146723][ T3304] loop2: p233 start 150994944 is beyond EOD, truncated [ 139.153602][ T3304] loop2: p234 start 150994944 is beyond EOD, truncated [ 139.160511][ T3304] loop2: p235 start 150994944 is beyond EOD, truncated [ 139.167418][ T3304] loop2: p236 start 150994944 is beyond EOD, truncated [ 139.174363][ T3304] loop2: p237 start 150994944 is beyond EOD, truncated [ 139.181249][ T3304] loop2: p238 start 150994944 is beyond EOD, truncated [ 139.188181][ T3304] loop2: p239 start 150994944 is beyond EOD, truncated [ 139.195174][ T3304] loop2: p240 start 150994944 is beyond EOD, truncated [ 139.202095][ T3304] loop2: p241 start 150994944 is beyond EOD, truncated [ 139.209098][ T3304] loop2: p242 start 150994944 is beyond EOD, truncated [ 139.216015][ T3304] loop2: p243 start 150994944 is beyond EOD, truncated [ 139.222949][ T3304] loop2: p244 start 150994944 is beyond EOD, truncated [ 139.229841][ T3304] loop2: p245 start 150994944 is beyond EOD, truncated [ 139.236812][ T3304] loop2: p246 start 150994944 is beyond EOD, truncated [ 139.243766][ T3304] loop2: p247 start 150994944 is beyond EOD, truncated [ 139.250818][ T3304] loop2: p248 start 150994944 is beyond EOD, truncated [ 139.257748][ T3304] loop2: p249 start 150994944 is beyond EOD, truncated [ 139.264704][ T3304] loop2: p250 start 150994944 is beyond EOD, truncated [ 139.271662][ T3304] loop2: p251 start 150994944 is beyond EOD, truncated [ 139.278541][ T3304] loop2: p252 start 150994944 is beyond EOD, truncated [ 139.285525][ T3304] loop2: p253 start 150994944 is beyond EOD, truncated [ 139.292485][ T3304] loop2: p254 start 150994944 is beyond EOD, truncated [ 139.299606][ T3304] loop2: p255 start 150994944 is beyond EOD, truncated [ 139.322331][ T9527] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 139.345641][ T9527] loop2: p2 start 150994944 is beyond EOD, truncated [ 139.541854][ T9527] loop2: p5 start 150994944 is beyond EOD, truncated [ 139.548703][ T9527] loop2: p6 start 150994944 is beyond EOD, truncated [ 139.555437][ T9527] loop2: p7 start 150994944 is beyond EOD, truncated [ 139.562235][ T9527] loop2: p8 start 150994944 is beyond EOD, truncated [ 139.569053][ T9527] loop2: p9 start 150994944 is beyond EOD, truncated [ 139.575788][ T9527] loop2: p10 start 150994944 is beyond EOD, truncated [ 139.582585][ T9527] loop2: p11 start 150994944 is beyond EOD, truncated [ 139.589419][ T9527] loop2: p12 start 150994944 is beyond EOD, truncated [ 139.596238][ T9527] loop2: p13 start 150994944 is beyond EOD, truncated [ 139.603063][ T9527] loop2: p14 start 150994944 is beyond EOD, truncated [ 139.609917][ T9527] loop2: p15 start 150994944 is beyond EOD, truncated [ 139.616849][ T9527] loop2: p16 start 150994944 is beyond EOD, truncated [ 139.623712][ T9527] loop2: p17 start 150994944 is beyond EOD, truncated [ 139.630553][ T9527] loop2: p18 start 150994944 is beyond EOD, truncated [ 139.637427][ T9527] loop2: p19 start 150994944 is beyond EOD, truncated [ 139.644285][ T9527] loop2: p20 start 150994944 is beyond EOD, truncated [ 139.651107][ T9527] loop2: p21 start 150994944 is beyond EOD, truncated [ 139.657952][ T9527] loop2: p22 start 150994944 is beyond EOD, truncated [ 139.664780][ T9527] loop2: p23 start 150994944 is beyond EOD, truncated [ 139.671637][ T9527] loop2: p24 start 150994944 is beyond EOD, truncated [ 139.678466][ T9527] loop2: p25 start 150994944 is beyond EOD, truncated [ 139.685369][ T9527] loop2: p26 start 150994944 is beyond EOD, truncated [ 139.692491][ T9527] loop2: p27 start 150994944 is beyond EOD, truncated [ 139.699307][ T9527] loop2: p28 start 150994944 is beyond EOD, truncated [ 139.706188][ T9527] loop2: p29 start 150994944 is beyond EOD, truncated [ 139.713044][ T9527] loop2: p30 start 150994944 is beyond EOD, truncated [ 139.719974][ T9527] loop2: p31 start 150994944 is beyond EOD, truncated [ 139.726893][ T9527] loop2: p32 start 150994944 is beyond EOD, truncated [ 139.733781][ T9527] loop2: p33 start 150994944 is beyond EOD, truncated [ 139.740905][ T9527] loop2: p34 start 150994944 is beyond EOD, truncated [ 139.747811][ T9527] loop2: p35 start 150994944 is beyond EOD, truncated [ 139.754629][ T9527] loop2: p36 start 150994944 is beyond EOD, truncated [ 139.761464][ T9527] loop2: p37 start 150994944 is beyond EOD, truncated [ 139.768336][ T9527] loop2: p38 start 150994944 is beyond EOD, truncated [ 139.775239][ T9527] loop2: p39 start 150994944 is beyond EOD, truncated [ 139.782088][ T9527] loop2: p40 start 150994944 is beyond EOD, truncated [ 139.788930][ T9527] loop2: p41 start 150994944 is beyond EOD, truncated [ 139.795766][ T9527] loop2: p42 start 150994944 is beyond EOD, truncated [ 139.802591][ T9527] loop2: p43 start 150994944 is beyond EOD, truncated [ 139.809383][ T9527] loop2: p44 start 150994944 is beyond EOD, truncated [ 139.816291][ T9527] loop2: p45 start 150994944 is beyond EOD, truncated [ 139.823149][ T9527] loop2: p46 start 150994944 is beyond EOD, truncated [ 139.829958][ T9527] loop2: p47 start 150994944 is beyond EOD, truncated [ 139.836789][ T9527] loop2: p48 start 150994944 is beyond EOD, truncated [ 139.843630][ T9527] loop2: p49 start 150994944 is beyond EOD, truncated [ 139.850482][ T9527] loop2: p50 start 150994944 is beyond EOD, truncated [ 139.857447][ T9527] loop2: p51 start 150994944 is beyond EOD, truncated [ 139.864329][ T9527] loop2: p52 start 150994944 is beyond EOD, truncated [ 139.871225][ T9527] loop2: p53 start 150994944 is beyond EOD, truncated [ 139.878087][ T9527] loop2: p54 start 150994944 is beyond EOD, truncated [ 139.884926][ T9527] loop2: p55 start 150994944 is beyond EOD, truncated [ 139.891795][ T9527] loop2: p56 start 150994944 is beyond EOD, truncated [ 139.898649][ T9527] loop2: p57 start 150994944 is beyond EOD, truncated [ 139.905445][ T9527] loop2: p58 start 150994944 is beyond EOD, truncated [ 139.912265][ T9527] loop2: p59 start 150994944 is beyond EOD, truncated [ 139.919101][ T9527] loop2: p60 start 150994944 is beyond EOD, truncated [ 139.925946][ T9527] loop2: p61 start 150994944 is beyond EOD, truncated [ 139.932801][ T9527] loop2: p62 start 150994944 is beyond EOD, truncated [ 139.939622][ T9527] loop2: p63 start 150994944 is beyond EOD, truncated [ 139.946443][ T9527] loop2: p64 start 150994944 is beyond EOD, truncated [ 139.953237][ T9527] loop2: p65 start 150994944 is beyond EOD, truncated [ 139.960246][ T9527] loop2: p66 start 150994944 is beyond EOD, truncated [ 139.967136][ T9527] loop2: p67 start 150994944 is beyond EOD, truncated [ 139.974026][ T9527] loop2: p68 start 150994944 is beyond EOD, truncated [ 139.980830][ T9527] loop2: p69 start 150994944 is beyond EOD, truncated [ 139.987705][ T9527] loop2: p70 start 150994944 is beyond EOD, truncated [ 139.994606][ T9527] loop2: p71 start 150994944 is beyond EOD, truncated [ 140.001487][ T9527] loop2: p72 start 150994944 is beyond EOD, truncated [ 140.008353][ T9527] loop2: p73 start 150994944 is beyond EOD, truncated [ 140.015192][ T9527] loop2: p74 start 150994944 is beyond EOD, truncated [ 140.022078][ T9527] loop2: p75 start 150994944 is beyond EOD, truncated [ 140.028890][ T9527] loop2: p76 start 150994944 is beyond EOD, truncated [ 140.035711][ T9527] loop2: p77 start 150994944 is beyond EOD, truncated [ 140.042800][ T9527] loop2: p78 start 150994944 is beyond EOD, truncated [ 140.049633][ T9527] loop2: p79 start 150994944 is beyond EOD, truncated [ 140.056491][ T9527] loop2: p80 start 150994944 is beyond EOD, truncated [ 140.063463][ T9527] loop2: p81 start 150994944 is beyond EOD, truncated [ 140.070296][ T9527] loop2: p82 start 150994944 is beyond EOD, truncated [ 140.077171][ T9527] loop2: p83 start 150994944 is beyond EOD, truncated [ 140.084068][ T9527] loop2: p84 start 150994944 is beyond EOD, truncated [ 140.090888][ T9527] loop2: p85 start 150994944 is beyond EOD, truncated [ 140.097684][ T9527] loop2: p86 start 150994944 is beyond EOD, truncated [ 140.104523][ T9527] loop2: p87 start 150994944 is beyond EOD, truncated [ 140.111429][ T9527] loop2: p88 start 150994944 is beyond EOD, truncated [ 140.118339][ T9527] loop2: p89 start 150994944 is beyond EOD, truncated [ 140.125136][ T9527] loop2: p90 start 150994944 is beyond EOD, truncated [ 140.132000][ T9527] loop2: p91 start 150994944 is beyond EOD, truncated [ 140.138865][ T9527] loop2: p92 start 150994944 is beyond EOD, truncated [ 140.145729][ T9527] loop2: p93 start 150994944 is beyond EOD, truncated [ 140.152560][ T9527] loop2: p94 start 150994944 is beyond EOD, truncated [ 140.159459][ T9527] loop2: p95 start 150994944 is beyond EOD, truncated [ 140.166281][ T9527] loop2: p96 start 150994944 is beyond EOD, truncated [ 140.173088][ T9527] loop2: p97 start 150994944 is beyond EOD, truncated [ 140.179947][ T9527] loop2: p98 start 150994944 is beyond EOD, truncated [ 140.186773][ T9527] loop2: p99 start 150994944 is beyond EOD, truncated [ 140.193599][ T9527] loop2: p100 start 150994944 is beyond EOD, truncated [ 140.200562][ T9527] loop2: p101 start 150994944 is beyond EOD, truncated [ 140.207466][ T9527] loop2: p102 start 150994944 is beyond EOD, truncated [ 140.214380][ T9527] loop2: p103 start 150994944 is beyond EOD, truncated [ 140.221643][ T9527] loop2: p104 start 150994944 is beyond EOD, truncated [ 140.228546][ T9527] loop2: p105 start 150994944 is beyond EOD, truncated [ 140.235456][ T9527] loop2: p106 start 150994944 is beyond EOD, truncated [ 140.242447][ T9527] loop2: p107 start 150994944 is beyond EOD, truncated [ 140.249335][ T9527] loop2: p108 start 150994944 is beyond EOD, truncated [ 140.256261][ T9527] loop2: p109 start 150994944 is beyond EOD, truncated [ 140.263171][ T9527] loop2: p110 start 150994944 is beyond EOD, truncated [ 140.270247][ T9527] loop2: p111 start 150994944 is beyond EOD, truncated [ 140.277191][ T9527] loop2: p112 start 150994944 is beyond EOD, truncated [ 140.284151][ T9527] loop2: p113 start 150994944 is beyond EOD, truncated [ 140.291133][ T9527] loop2: p114 start 150994944 is beyond EOD, truncated [ 140.298076][ T9527] loop2: p115 start 150994944 is beyond EOD, truncated [ 140.304964][ T9527] loop2: p116 start 150994944 is beyond EOD, truncated [ 140.311916][ T9527] loop2: p117 start 150994944 is beyond EOD, truncated [ 140.318867][ T9527] loop2: p118 start 150994944 is beyond EOD, truncated [ 140.325756][ T9527] loop2: p119 start 150994944 is beyond EOD, truncated [ 140.332715][ T9527] loop2: p120 start 150994944 is beyond EOD, truncated [ 140.339622][ T9527] loop2: p121 start 150994944 is beyond EOD, truncated [ 140.346552][ T9527] loop2: p122 start 150994944 is beyond EOD, truncated [ 140.353454][ T9527] loop2: p123 start 150994944 is beyond EOD, truncated [ 140.360430][ T9527] loop2: p124 start 150994944 is beyond EOD, truncated [ 140.367352][ T9527] loop2: p125 start 150994944 is beyond EOD, truncated [ 140.374379][ T9527] loop2: p126 start 150994944 is beyond EOD, truncated [ 140.381273][ T9527] loop2: p127 start 150994944 is beyond EOD, truncated [ 140.388212][ T9527] loop2: p128 start 150994944 is beyond EOD, truncated [ 140.395445][ T9527] loop2: p129 start 150994944 is beyond EOD, truncated [ 140.402424][ T9527] loop2: p130 start 150994944 is beyond EOD, truncated [ 140.409361][ T9527] loop2: p131 start 150994944 is beyond EOD, truncated [ 140.416542][ T9527] loop2: p132 start 150994944 is beyond EOD, truncated [ 140.423534][ T9527] loop2: p133 start 150994944 is beyond EOD, truncated [ 140.430516][ T9527] loop2: p134 start 150994944 is beyond EOD, truncated [ 140.437528][ T9527] loop2: p135 start 150994944 is beyond EOD, truncated [ 140.444511][ T9527] loop2: p136 start 150994944 is beyond EOD, truncated [ 140.451510][ T9527] loop2: p137 start 150994944 is beyond EOD, truncated [ 140.458397][ T9527] loop2: p138 start 150994944 is beyond EOD, truncated [ 140.465318][ T9527] loop2: p139 start 150994944 is beyond EOD, truncated [ 140.472238][ T9527] loop2: p140 start 150994944 is beyond EOD, truncated [ 140.479239][ T9527] loop2: p141 start 150994944 is beyond EOD, truncated [ 140.486218][ T9527] loop2: p142 start 150994944 is beyond EOD, truncated [ 140.493166][ T9527] loop2: p143 start 150994944 is beyond EOD, truncated [ 140.500108][ T9527] loop2: p144 start 150994944 is beyond EOD, truncated [ 140.507081][ T9527] loop2: p145 start 150994944 is beyond EOD, truncated [ 140.514003][ T9527] loop2: p146 start 150994944 is beyond EOD, truncated [ 140.521026][ T9527] loop2: p147 start 150994944 is beyond EOD, truncated [ 140.527949][ T9527] loop2: p148 start 150994944 is beyond EOD, truncated [ 140.534843][ T9527] loop2: p149 start 150994944 is beyond EOD, truncated [ 140.541831][ T9527] loop2: p150 start 150994944 is beyond EOD, truncated [ 140.548745][ T9527] loop2: p151 start 150994944 is beyond EOD, truncated [ 140.555658][ T9527] loop2: p152 start 150994944 is beyond EOD, truncated [ 140.562553][ T9527] loop2: p153 start 150994944 is beyond EOD, truncated [ 140.569477][ T9527] loop2: p154 start 150994944 is beyond EOD, truncated [ 140.576414][ T9527] loop2: p155 start 150994944 is beyond EOD, truncated [ 140.583325][ T9527] loop2: p156 start 150994944 is beyond EOD, truncated [ 140.590342][ T9527] loop2: p157 start 150994944 is beyond EOD, truncated [ 140.597310][ T9527] loop2: p158 start 150994944 is beyond EOD, truncated [ 140.604220][ T9527] loop2: p159 start 150994944 is beyond EOD, truncated [ 140.611102][ T9527] loop2: p160 start 150994944 is beyond EOD, truncated [ 140.618075][ T9527] loop2: p161 start 150994944 is beyond EOD, truncated [ 140.624983][ T9527] loop2: p162 start 150994944 is beyond EOD, truncated [ 140.631946][ T9527] loop2: p163 start 150994944 is beyond EOD, truncated [ 140.638887][ T9527] loop2: p164 start 150994944 is beyond EOD, truncated [ 140.645823][ T9527] loop2: p165 start 150994944 is beyond EOD, truncated [ 140.652816][ T9527] loop2: p166 start 150994944 is beyond EOD, truncated [ 140.659881][ T9527] loop2: p167 start 150994944 is beyond EOD, truncated [ 140.666866][ T9527] loop2: p168 start 150994944 is beyond EOD, truncated [ 140.673840][ T9527] loop2: p169 start 150994944 is beyond EOD, truncated [ 140.680826][ T9527] loop2: p170 start 150994944 is beyond EOD, truncated [ 140.687710][ T9527] loop2: p171 start 150994944 is beyond EOD, truncated [ 140.694646][ T9527] loop2: p172 start 150994944 is beyond EOD, truncated [ 140.701561][ T9527] loop2: p173 start 150994944 is beyond EOD, truncated [ 140.708624][ T9527] loop2: p174 start 150994944 is beyond EOD, truncated [ 140.715594][ T9527] loop2: p175 start 150994944 is beyond EOD, truncated [ 140.722685][ T9527] loop2: p176 start 150994944 is beyond EOD, truncated [ 140.729808][ T9527] loop2: p177 start 150994944 is beyond EOD, truncated [ 140.736820][ T9527] loop2: p178 start 150994944 is beyond EOD, truncated [ 140.743710][ T9527] loop2: p179 start 150994944 is beyond EOD, truncated [ 140.750713][ T9527] loop2: p180 start 150994944 is beyond EOD, truncated [ 140.757632][ T9527] loop2: p181 start 150994944 is beyond EOD, truncated [ 140.764525][ T9527] loop2: p182 start 150994944 is beyond EOD, truncated [ 140.771557][ T9527] loop2: p183 start 150994944 is beyond EOD, truncated [ 140.778467][ T9527] loop2: p184 start 150994944 is beyond EOD, truncated [ 140.785423][ T9527] loop2: p185 start 150994944 is beyond EOD, truncated [ 140.792328][ T9527] loop2: p186 start 150994944 is beyond EOD, truncated [ 140.799274][ T9527] loop2: p187 start 150994944 is beyond EOD, truncated [ 140.806213][ T9527] loop2: p188 start 150994944 is beyond EOD, truncated [ 140.813161][ T9527] loop2: p189 start 150994944 is beyond EOD, truncated [ 140.820041][ T9527] loop2: p190 start 150994944 is beyond EOD, truncated [ 140.826993][ T9527] loop2: p191 start 150994944 is beyond EOD, truncated [ 140.833918][ T9527] loop2: p192 start 150994944 is beyond EOD, truncated [ 140.840874][ T9527] loop2: p193 start 150994944 is beyond EOD, truncated [ 140.847870][ T9527] loop2: p194 start 150994944 is beyond EOD, truncated [ 140.854792][ T9527] loop2: p195 start 150994944 is beyond EOD, truncated [ 140.861756][ T9527] loop2: p196 start 150994944 is beyond EOD, truncated [ 140.868688][ T9527] loop2: p197 start 150994944 is beyond EOD, truncated [ 140.875699][ T9527] loop2: p198 start 150994944 is beyond EOD, truncated [ 140.882619][ T9527] loop2: p199 start 150994944 is beyond EOD, truncated [ 140.889528][ T9527] loop2: p200 start 150994944 is beyond EOD, truncated [ 140.896419][ T9527] loop2: p201 start 150994944 is beyond EOD, truncated [ 140.903504][ T9527] loop2: p202 start 150994944 is beyond EOD, truncated [ 140.910454][ T9527] loop2: p203 start 150994944 is beyond EOD, truncated [ 140.917403][ T9527] loop2: p204 start 150994944 is beyond EOD, truncated [ 140.924283][ T9527] loop2: p205 start 150994944 is beyond EOD, truncated [ 140.931206][ T9527] loop2: p206 start 150994944 is beyond EOD, truncated [ 140.938272][ T9527] loop2: p207 start 150994944 is beyond EOD, truncated [ 140.945220][ T9527] loop2: p208 start 150994944 is beyond EOD, truncated [ 140.952140][ T9527] loop2: p209 start 150994944 is beyond EOD, truncated [ 140.959055][ T9527] loop2: p210 start 150994944 is beyond EOD, truncated [ 140.965985][ T9527] loop2: p211 start 150994944 is beyond EOD, truncated [ 140.972867][ T9527] loop2: p212 start 150994944 is beyond EOD, truncated [ 140.979831][ T9527] loop2: p213 start 150994944 is beyond EOD, truncated [ 140.986826][ T9527] loop2: p214 start 150994944 is beyond EOD, truncated [ 140.993887][ T9527] loop2: p215 start 150994944 is beyond EOD, truncated [ 141.000763][ T9527] loop2: p216 start 150994944 is beyond EOD, truncated [ 141.007737][ T9527] loop2: p217 start 150994944 is beyond EOD, truncated [ 141.014659][ T9527] loop2: p218 start 150994944 is beyond EOD, truncated [ 141.021621][ T9527] loop2: p219 start 150994944 is beyond EOD, truncated [ 141.028549][ T9527] loop2: p220 start 150994944 is beyond EOD, truncated [ 141.035451][ T9527] loop2: p221 start 150994944 is beyond EOD, truncated [ 141.042389][ T9527] loop2: p222 start 150994944 is beyond EOD, truncated [ 141.049276][ T9527] loop2: p223 start 150994944 is beyond EOD, truncated [ 141.056208][ T9527] loop2: p224 start 150994944 is beyond EOD, truncated [ 141.063133][ T9527] loop2: p225 start 150994944 is beyond EOD, truncated [ 141.070053][ T9527] loop2: p226 start 150994944 is beyond EOD, truncated [ 141.076953][ T9527] loop2: p227 start 150994944 is beyond EOD, truncated [ 141.083954][ T9527] loop2: p228 start 150994944 is beyond EOD, truncated [ 141.090902][ T9527] loop2: p229 start 150994944 is beyond EOD, truncated [ 141.097781][ T9527] loop2: p230 start 150994944 is beyond EOD, truncated [ 141.104847][ T9527] loop2: p231 start 150994944 is beyond EOD, truncated [ 141.111881][ T9527] loop2: p232 start 150994944 is beyond EOD, truncated [ 141.118795][ T9527] loop2: p233 start 150994944 is beyond EOD, truncated [ 141.125738][ T9527] loop2: p234 start 150994944 is beyond EOD, truncated [ 141.132709][ T9527] loop2: p235 start 150994944 is beyond EOD, truncated [ 141.139619][ T9527] loop2: p236 start 150994944 is beyond EOD, truncated [ 141.146554][ T9527] loop2: p237 start 150994944 is beyond EOD, truncated [ 141.153449][ T9527] loop2: p238 start 150994944 is beyond EOD, truncated [ 141.160511][ T9527] loop2: p239 start 150994944 is beyond EOD, truncated [ 141.167463][ T9527] loop2: p240 start 150994944 is beyond EOD, truncated [ 141.174459][ T9527] loop2: p241 start 150994944 is beyond EOD, truncated [ 141.181343][ T9527] loop2: p242 start 150994944 is beyond EOD, truncated [ 141.188352][ T9527] loop2: p243 start 150994944 is beyond EOD, truncated [ 141.195263][ T9527] loop2: p244 start 150994944 is beyond EOD, truncated [ 141.202158][ T9527] loop2: p245 start 150994944 is beyond EOD, truncated [ 141.209077][ T9527] loop2: p246 start 150994944 is beyond EOD, truncated [ 141.216001][ T9527] loop2: p247 start 150994944 is beyond EOD, truncated [ 141.222952][ T9527] loop2: p248 start 150994944 is beyond EOD, truncated [ 141.229852][ T9527] loop2: p249 start 150994944 is beyond EOD, truncated [ 141.236812][ T9527] loop2: p250 start 150994944 is beyond EOD, truncated [ 141.243827][ T9527] loop2: p251 start 150994944 is beyond EOD, truncated [ 141.250757][ T9527] loop2: p252 start 150994944 is beyond EOD, truncated [ 141.257742][ T9527] loop2: p253 start 150994944 is beyond EOD, truncated [ 141.264718][ T9527] loop2: p254 start 150994944 is beyond EOD, truncated [ 141.271679][ T9527] loop2: p255 start 150994944 is beyond EOD, truncated [ 141.308955][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 141.325241][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 141.419085][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 141.437968][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 141.547638][ T9603] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2195'. [ 141.639384][ T9603] bridge1: entered promiscuous mode [ 141.645897][ T9603] bridge1: entered allmulticast mode [ 141.946494][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.065946][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 142.065962][ T29] audit: type=1400 audit(3917222410.313:1772): avc: denied { create } for pid=9625 comm="syz.8.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 142.166002][ T9614] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 142.428210][ T9643] loop7: detected capacity change from 0 to 8192 [ 142.437768][ T9643] vfat filesystem being mounted at /91/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 142.487402][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'. [ 142.496428][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2211'. [ 142.522518][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'. [ 142.531518][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2211'. [ 142.830772][ T29] audit: type=1400 audit(3917222411.111:1773): avc: denied { mount } for pid=9662 comm="syz.7.2217" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 142.888538][ T29] audit: type=1400 audit(3917222411.164:1774): avc: denied { unmount } for pid=8091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 142.995964][ T9666] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2218'. [ 143.012805][ T29] audit: type=1400 audit(3917222411.300:1775): avc: denied { nlmsg_read } for pid=9665 comm="syz.7.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.328285][ T9682] loop2: detected capacity change from 0 to 2048 [ 143.423004][ T3304] loop2: p1 < > p4 [ 143.437361][ T3304] loop2: p4 size 8388608 extends beyond EOD, truncated [ 143.453219][ T9682] loop2: p1 < > p4 [ 143.458262][ T9682] loop2: p4 size 8388608 extends beyond EOD, truncated [ 143.692040][ T29] audit: type=1400 audit(3917222412.014:1776): avc: denied { read append } for pid=9695 comm="syz.5.2231" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.715825][ T29] audit: type=1400 audit(3917222412.014:1777): avc: denied { open } for pid=9695 comm="syz.5.2231" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.840747][ T29] audit: type=1326 audit(3917222412.182:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.2.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 143.864347][ T29] audit: type=1326 audit(3917222412.182:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.2.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 143.972734][ T29] audit: type=1326 audit(3917222412.203:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.2.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 143.996220][ T29] audit: type=1326 audit(3917222412.203:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.2.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 144.438728][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2251'. [ 144.734276][ T9765] loop2: detected capacity change from 0 to 8192 [ 144.757927][ T9765] vfat filesystem being mounted at /443/bus supports timestamps until 2107-12-31 (0x10391447e) [ 144.824839][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2265'. [ 144.838165][ T9772] bridge_slave_1: left allmulticast mode [ 144.843918][ T9772] bridge_slave_1: left promiscuous mode [ 144.849701][ T9772] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.858098][ T9772] bridge_slave_0: left allmulticast mode [ 144.864131][ T9772] bridge_slave_0: left promiscuous mode [ 144.870057][ T9772] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.189500][ T9803] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2276'. [ 145.281008][ T9803] bridge0: entered promiscuous mode [ 145.286859][ T9803] bridge0: entered allmulticast mode [ 145.325305][ T9811] loop8: detected capacity change from 0 to 1024 [ 145.332716][ T5171] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.350135][ T9811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.419776][ T9193] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.446183][ T9822] loop8: detected capacity change from 0 to 512 [ 145.454129][ T9822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.471547][ T9822] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2282: iget: bad i_size value: 38620345925642 [ 145.489619][ T9822] EXT4-fs (loop8): Remounting filesystem read-only [ 145.500830][ T9822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.602707][ T9617] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.793311][ T9851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2294'. [ 145.802451][ T9851] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 145.829985][ T5188] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.864905][ T5188] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.913783][ T5188] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.990608][ T5188] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.121220][ T5188] bridge_slave_1: left allmulticast mode [ 146.126968][ T5188] bridge_slave_1: left promiscuous mode [ 146.132841][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.157273][ T9880] loop2: detected capacity change from 0 to 512 [ 146.166203][ T5188] bridge_slave_0: left allmulticast mode [ 146.171941][ T5188] bridge_slave_0: left promiscuous mode [ 146.177742][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.200370][ T9880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.236014][ T9880] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.328244][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.346600][ T5188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.386114][ T5188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.428549][ T5188] bond0 (unregistering): Released all slaves [ 146.518695][ T5188] hsr_slave_0: left promiscuous mode [ 146.535966][ T5188] hsr_slave_1: left promiscuous mode [ 146.542111][ T5188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.549710][ T5188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.558373][ T5188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.565882][ T5188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.577813][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 146.577993][ T5188] veth1_macvtap: left promiscuous mode [ 146.586839][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2309'. [ 146.592536][ T5188] veth0_macvtap: left promiscuous mode [ 146.601207][ T9913] netlink: 'syz.5.2309': attribute type 6 has an invalid length. [ 146.607837][ T5188] veth1_vlan: left promiscuous mode [ 146.614371][ T9913] netlink: 'syz.5.2309': attribute type 5 has an invalid length. [ 146.632462][ T5188] veth0_vlan: left promiscuous mode [ 146.763156][ T5188] team0 (unregistering): Port device team_slave_1 removed [ 146.775913][ T5188] team0 (unregistering): Port device team_slave_0 removed [ 146.827353][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 146.836308][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2309'. [ 146.845240][ T9913] netlink: 'syz.5.2309': attribute type 6 has an invalid length. [ 146.853075][ T9913] netlink: 'syz.5.2309': attribute type 5 has an invalid length. [ 146.943956][ T9863] chnl_net:caif_netlink_parms(): no params data found [ 147.045888][ T9863] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.053178][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.067000][ T9863] bridge_slave_0: entered allmulticast mode [ 147.074077][ T9863] bridge_slave_0: entered promiscuous mode [ 147.080907][ T9863] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.088057][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.095540][ T9863] bridge_slave_1: entered allmulticast mode [ 147.102298][ T9863] bridge_slave_1: entered promiscuous mode [ 147.139364][ T9953] loop5: detected capacity change from 0 to 8192 [ 147.148986][ T9863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.195002][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 147.195021][ T29] audit: type=1400 audit(3917222415.699:1791): avc: denied { connect } for pid=9958 comm="syz.3.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.233458][ T9863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.266665][ T9863] team0: Port device team_slave_0 added [ 147.272948][ T9968] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 147.279977][ T3601] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.303734][ T9968] syzkaller0: linktype set to 4 [ 147.369414][ T9863] team0: Port device team_slave_1 added [ 147.427275][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.434309][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.460361][ T9863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.504287][ T9986] sctp: [Deprecated]: syz.7.2323 (pid 9986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.504287][ T9986] Use struct sctp_sack_info instead [ 147.589976][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.597083][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.623182][ T9863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.632837][ T29] audit: type=1400 audit(3917222416.101:1792): avc: denied { bind } for pid=9992 comm="syz.2.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.691647][ T29] audit: type=1400 audit(3917222416.227:1793): avc: denied { getopt } for pid=9994 comm="syz.2.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.746733][ T9863] hsr_slave_0: entered promiscuous mode [ 147.779340][T10001] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2328'. [ 147.790561][ T9863] hsr_slave_1: entered promiscuous mode [ 147.814111][ T9863] debugfs: 'hsr0' already exists in 'hsr' [ 147.819899][ T9863] Cannot create hsr debugfs directory [ 147.951395][T10001] bridge3: entered promiscuous mode [ 147.957593][T10001] bridge3: entered allmulticast mode [ 148.222954][ T9863] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 148.239022][ T9863] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 148.246220][T10038] tls_set_device_offload_rx: netdev not found [ 148.262335][ T9863] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 148.283439][ T9863] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 148.349985][ T9863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.363724][ T9863] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.388047][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.395212][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.416639][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.423818][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.506150][ T9863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.630203][ T9863] veth0_vlan: entered promiscuous mode [ 148.639384][ T9863] veth1_vlan: entered promiscuous mode [ 148.659047][ T9863] veth0_macvtap: entered promiscuous mode [ 148.671625][ T9863] veth1_macvtap: entered promiscuous mode [ 148.687020][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.699288][ T9863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.711618][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.721056][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.738935][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.760846][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.797608][T10076] loop9: detected capacity change from 0 to 512 [ 148.805163][T10076] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.824391][T10076] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 148.841896][T10076] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.2301: attempt to clear invalid blocks 2 len 1 [ 148.868001][T10076] EXT4-fs (loop9): Remounting filesystem read-only [ 148.874774][T10076] EXT4-fs (loop9): 1 truncate cleaned up [ 148.881352][T10076] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.930870][ T9863] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.025029][T10092] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2349'. [ 149.290714][T10119] loop9: detected capacity change from 0 to 128 [ 149.306532][T10119] vfat filesystem being mounted at /4/bus supports timestamps until 2107-12-31 (0x10391447e) [ 149.400845][T10124] loop9: detected capacity change from 0 to 256 [ 149.411836][T10124] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 149.421050][T10124] FAT-fs (loop9): bogus number of directory entries (1) [ 149.428089][T10124] FAT-fs (loop9): Can't find a valid FAT filesystem [ 149.463983][ T3601] Bluetooth: hci0: sending frame failed (-49) [ 149.470210][ T4671] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 149.549458][T10142] netlink: 'syz.3.2356': attribute type 6 has an invalid length. [ 149.882354][ T29] audit: type=1326 audit(3917222418.515:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4069aeb9 code=0x7ffc0000 [ 149.906149][ T29] audit: type=1326 audit(3917222418.515:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9b4069aeb9 code=0x7ffc0000 [ 149.929849][ T29] audit: type=1326 audit(3917222418.515:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4069aeb9 code=0x7ffc0000 [ 149.953660][ T29] audit: type=1326 audit(3917222418.515:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b4069aeb9 code=0x7ffc0000 [ 149.977281][ T29] audit: type=1326 audit(3917222418.515:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4069aeb9 code=0x7ffc0000 [ 150.000970][ T29] audit: type=1326 audit(3917222418.515:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b4069aeb9 code=0x7ffc0000 [ 150.024537][ T29] audit: type=1326 audit(3917222418.515:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10181 comm="syz.5.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4069aeb9 code=0x7ffc0000 [ 150.182291][T10191] loop5: detected capacity change from 0 to 512 [ 150.218567][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 150.227668][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2376'. [ 150.236866][T10195] netlink: 'syz.2.2376': attribute type 6 has an invalid length. [ 150.245085][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 150.254048][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2376'. [ 150.263005][T10195] netlink: 'syz.2.2376': attribute type 6 has an invalid length. [ 150.351136][T10201] loop5: detected capacity change from 0 to 8192 [ 150.745003][T10241] loop2: detected capacity change from 0 to 128 [ 150.759072][T10241] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.809177][T10241] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.867967][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.885815][T10249] loop5: detected capacity change from 0 to 4096 [ 150.902859][T10240] bridge1: entered promiscuous mode [ 150.910108][T10240] bridge1: entered allmulticast mode [ 151.040664][T10262] loop5: detected capacity change from 0 to 128 [ 151.913142][T10293] option changes via remount are deprecated (pid=10292 comm=syz.2.2417) [ 151.989405][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 151.989423][ T29] audit: type=1326 audit(3917222420.741:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777cefaeb9 code=0x7ffc0000 [ 152.071717][ T29] audit: type=1326 audit(3917222420.741:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f777cefaeb9 code=0x7ffc0000 [ 152.095529][ T29] audit: type=1326 audit(3917222420.741:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777cefaeb9 code=0x7ffc0000 [ 152.119341][ T29] audit: type=1326 audit(3917222420.741:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f777cefaeb9 code=0x7ffc0000 [ 152.142806][ T29] audit: type=1326 audit(3917222420.741:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777cefaeb9 code=0x7ffc0000 [ 152.166549][ T29] audit: type=1326 audit(3917222420.752:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f777cefaeb9 code=0x7ffc0000 [ 152.190222][ T29] audit: type=1326 audit(3917222420.752:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777cefaeb9 code=0x7ffc0000 [ 152.213895][ T29] audit: type=1326 audit(3917222420.752:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777cefaeb9 code=0x7ffc0000 [ 152.237614][ T29] audit: type=1326 audit(3917222420.752:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f777cefaeb9 code=0x7ffc0000 [ 152.261569][ T29] audit: type=1326 audit(3917222420.752:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777cefaeb9 code=0x7ffc0000 [ 152.331691][T10312] loop9: detected capacity change from 0 to 512 [ 152.378328][T10312] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.424799][T10312] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.569307][ T9863] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.829590][T10348] loop7: detected capacity change from 0 to 256 [ 152.847619][T10348] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.867977][T10348] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.881158][T10348] vfat filesystem being mounted at /131/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 153.764898][T10376] __nla_validate_parse: 1 callbacks suppressed [ 153.764919][T10376] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2447'. [ 154.359798][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2449'. [ 154.395333][T10382] xfrm1: entered promiscuous mode [ 154.400503][T10382] xfrm1: entered allmulticast mode [ 154.409573][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2449'. [ 154.901119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.514048][T10334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.648783][T10461] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 155.766008][T10467] Invalid argument reading file caps for ./file0 [ 155.862532][T10475] loop9: detected capacity change from 0 to 512 [ 155.912334][T10475] msdos filesystem being mounted at /32/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 155.931245][T10481] loop7: detected capacity change from 0 to 512 [ 155.975304][T10481] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.032499][T10481] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.053578][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2472'. [ 156.105820][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.195628][T10496] loop9: detected capacity change from 0 to 1024 [ 156.208956][T10496] EXT4-fs: Ignoring removed orlov option [ 156.264551][T10496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.308437][T10507] loop2: detected capacity change from 0 to 128 [ 156.316261][T10507] vfat filesystem being mounted at /503/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 156.319078][ T9863] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.405621][T10510] syz.2.2481: attempt to access beyond end of device [ 156.405621][T10510] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 156.433961][T10510] syz.2.2481: attempt to access beyond end of device [ 156.433961][T10510] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 156.466374][T10510] syz.2.2481: attempt to access beyond end of device [ 156.466374][T10510] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 156.490043][T10510] syz.2.2481: attempt to access beyond end of device [ 156.490043][T10510] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 156.512729][T10510] syz.2.2481: attempt to access beyond end of device [ 156.512729][T10510] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 156.539407][T10516] tipc: Can't bind to reserved service type 0 [ 156.547769][T10515] loop9: detected capacity change from 0 to 136 [ 156.597457][T10510] syz.2.2481: attempt to access beyond end of device [ 156.597457][T10510] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 156.649017][T10510] syz.2.2481: attempt to access beyond end of device [ 156.649017][T10510] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 156.668354][T10510] syz.2.2481: attempt to access beyond end of device [ 156.668354][T10510] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 156.682111][T10510] syz.2.2481: attempt to access beyond end of device [ 156.682111][T10510] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 156.736498][T10510] syz.2.2481: attempt to access beyond end of device [ 156.736498][T10510] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 156.758134][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 156.758151][ T29] audit: type=1326 audit(3917222425.738:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f280810b78e code=0x7ffc0000 [ 156.788668][ T29] audit: type=1326 audit(3917222425.780:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f280810b78e code=0x7ffc0000 [ 156.812801][ T29] audit: type=1326 audit(3917222425.801:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f280810b78e code=0x7ffc0000 [ 156.843064][ T29] audit: type=1326 audit(3917222425.822:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 156.866808][ T29] audit: type=1326 audit(3917222425.822:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 156.890454][ T29] audit: type=1326 audit(3917222425.833:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 156.930558][ T29] audit: type=1326 audit(3917222425.927:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.2.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f280814aeb9 code=0x7ffc0000 [ 157.051973][T10541] loop7: detected capacity change from 0 to 512 [ 157.089948][ T29] audit: type=1400 audit(3917222426.085:2038): avc: denied { attach_queue } for pid=10542 comm="syz.2.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 157.114660][T10541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.129594][T10541] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.236921][T10541] ================================================================== [ 157.245093][T10541] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 157.252574][T10541] [ 157.254923][T10541] read-write to 0xffff8881006126c0 of 8 bytes by interrupt on cpu 0: [ 157.263211][T10541] __xa_clear_mark+0xf5/0x1e0 [ 157.267943][T10541] __folio_end_writeback+0xf4/0x360 [ 157.273201][T10541] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 157.279491][T10541] folio_end_writeback+0x1c/0x70 [ 157.284474][T10541] ext4_finish_bio+0x459/0x8b0 [ 157.289278][T10541] ext4_end_bio+0x27b/0x380 [ 157.293836][T10541] bio_endio+0x37a/0x410 [ 157.298128][T10541] blk_update_request+0x338/0x730 [ 157.303206][T10541] blk_mq_end_request+0x26/0x50 [ 157.308109][T10541] lo_complete_rq+0x98/0x140 [ 157.312744][T10541] blk_done_softirq+0x77/0xb0 [ 157.317456][T10541] handle_softirqs+0xb9/0x280 [ 157.322188][T10541] run_ksoftirqd+0x1c/0x30 [ 157.326649][T10541] smpboot_thread_fn+0x32a/0x510 [ 157.331642][T10541] kthread+0x488/0x510 [ 157.335751][T10541] ret_from_fork+0x148/0x280 [ 157.340375][T10541] ret_from_fork_asm+0x1a/0x30 [ 157.345192][T10541] [ 157.347548][T10541] read to 0xffff8881006126c0 of 8 bytes by task 10541 on cpu 1: [ 157.355210][T10541] xas_find_marked+0x213/0x620 [ 157.360031][T10541] filemap_get_folios_tag+0xfa/0x510 [ 157.365351][T10541] file_write_and_wait_range+0x20c/0x2f0 [ 157.371031][T10541] generic_buffers_fsync_noflush+0x45/0x130 [ 157.376970][T10541] ext4_sync_file+0x1aa/0x680 [ 157.381679][T10541] vfs_fsync_range+0x10d/0x130 [ 157.386546][T10541] ext4_buffered_write_iter+0x34f/0x3c0 [ 157.392209][T10541] ext4_file_write_iter+0x380/0xf70 [ 157.397444][T10541] do_iter_readv_writev+0x4fd/0x5a0 [ 157.402674][T10541] vfs_writev+0x2e1/0x900 [ 157.407073][T10541] __se_sys_pwritev2+0xfc/0x1c0 [ 157.411959][T10541] __x64_sys_pwritev2+0x67/0x80 [ 157.416849][T10541] x64_sys_call+0x2c9e/0x3000 [ 157.421562][T10541] do_syscall_64+0xc0/0x2a0 [ 157.426122][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.432057][T10541] [ 157.434409][T10541] value changed: 0x00007ffe00000000 -> 0x00007f0000000000 [ 157.441543][T10541] [ 157.443945][T10541] Reported by Kernel Concurrency Sanitizer on: [ 157.450117][T10541] CPU: 1 UID: 0 PID: 10541 Comm: syz.7.2494 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.459943][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.470016][T10541] ================================================================== [ 157.575453][ T8091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.292455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog