last executing test programs: 5m3.009959098s ago: executing program 32 (id=141): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d000100040000000100040000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m27.401190045s ago: executing program 33 (id=1041): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 4m27.401101305s ago: executing program 34 (id=1042): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb1000000080088484803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 4m14.633938691s ago: executing program 35 (id=1272): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000c00)="03fbab8d26", 0x5}], 0x2}, 0x24000881) 4m4.977356803s ago: executing program 36 (id=1521): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) listen(r0, 0x80) 3m54.063804307s ago: executing program 37 (id=1838): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m51.547563231s ago: executing program 3 (id=1877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3m51.506668762s ago: executing program 3 (id=1879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1003c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @random="af40245bac34", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x20, 0x0, 0x0, 0x100, {[@md5sig={0x13, 0x12, "500ca883e5d7c4560780fecf2211b4ff"}, @nop, @nop]}}}}}}}, 0x0) 3m51.425476525s ago: executing program 3 (id=1881): r0 = socket$igmp(0x2, 0x3, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 3m51.425165835s ago: executing program 3 (id=1882): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 3m51.361387307s ago: executing program 3 (id=1883): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r0, 0x100101) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x62, 0x0, 0x4, 0x0, 0xd4, 0x0, 0x800}, 0x8) accept4(r0, 0x0, 0x0, 0x80800) 3m51.036430288s ago: executing program 3 (id=1884): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m51.003283669s ago: executing program 38 (id=1884): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m48.232588822s ago: executing program 6 (id=1915): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x6, 0x0, 0x0, 0x0, 0x7, 0x28510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, @perf_config_ext={0x200000000008, 0x2c}, 0x7e75, 0x5, 0x0, 0x7, 0x2008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 3m47.354472321s ago: executing program 6 (id=1926): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x491b, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x89}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x40814, &(0x7f0000000000)={0xa, 0x0, 0x6a, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 3m47.282329783s ago: executing program 6 (id=1929): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="b702000004000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd000071d3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def6132e4f8acf03438b1d01ccbe27e5be5b46304c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1eaf8deff211a307626d8b27f4356755a8b3a8103e73bb2c7114e85ab2f2ee3f2ea8a4188a7d5917e790629887c1c51f56d10a8400fb4193dd79dd657ec190acfbd00e5b3a37b6205b6b5c438ebaaea9d47acc662e5ef3c51cc2add70aa9a6420abb168651d78e3a61b3007e5c86b03ffdaaebc7545061274f1b7bfefecea707423af2601bd1608abc6f7dc4bc1ab8933d11c825efb1308d2fc80d2c19d6e083bed16f8063497f59174a8e2d0500d4c1f5f0384fd8b54faa13ecde3080a17bd3b60191a8bc1cdc985d70c539e53c1b99a8e07"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m47.254468094s ago: executing program 6 (id=1930): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 3m47.195950927s ago: executing program 6 (id=1934): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x453, 0x400, 0x70bd2d, 0x25dfdbfc, "1808a14c77ea9628fb65ee91515c2277b7"}, 0x24}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) 3m46.391648353s ago: executing program 6 (id=1951): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) 3m46.285400987s ago: executing program 39 (id=1951): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) 2m57.113340716s ago: executing program 5 (id=2943): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffd, @multicast1}, 0x5, 0xfffe, 0x2, 0xfffd}}, 0x80, 0x0, 0xffffffb1}, 0x488c5) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000a00)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x3081bf0b056d2e46) 2m57.00261529s ago: executing program 5 (id=2945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r3, 0x8d}, 0x8) 2m56.967359831s ago: executing program 5 (id=2946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x1848ade0}, 0x1c) listen(r0, 0x0) 2m56.845592035s ago: executing program 5 (id=2948): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40000, 0x0) 2m56.845371965s ago: executing program 5 (id=2949): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r3, 0x5}, 0x8) 2m56.557540405s ago: executing program 5 (id=2952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 2m56.557150935s ago: executing program 40 (id=2952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 2m1.8229854s ago: executing program 8 (id=4109): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m1.693306314s ago: executing program 8 (id=4115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r1, 0x8949, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_hwaddr=@local}) 2m1.582764827s ago: executing program 8 (id=4122): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="c400"], 0xc4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2m1.449163112s ago: executing program 8 (id=4125): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2m1.448953622s ago: executing program 8 (id=4126): timer_create(0x2, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="cf08536d52989c33b2606a1feb08c52ff4c11b78409dfe5e2a680d06bd17da2bd54b19747a7cf179962a09670d5dd61367d3c3d863cdd41b20c95386ec7c3f15d8152a2e955ab893b76d35cd6d07c52116ae1c869caeba073cb00453ffc23a0ccbf078ad7a522b7d7a886825f095cc0a83"], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x90, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2m1.416489213s ago: executing program 8 (id=4128): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m1.369458805s ago: executing program 41 (id=4128): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 27.798924565s ago: executing program 7 (id=6002): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r0, 0xfffffffffffffffd, &(0x7f0000000000)=0xd, 0x80800) 27.727269697s ago: executing program 7 (id=6006): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0xc004004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x88, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) 27.692713308s ago: executing program 7 (id=6008): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 27.589356162s ago: executing program 7 (id=6013): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 27.554975303s ago: executing program 7 (id=6016): prctl$PR_SET_SECUREBITS(0x1c, 0xc) setresuid(0x0, 0xee00, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) 27.289560311s ago: executing program 7 (id=6025): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x6, 0x0, 0x0, 0x0, 0x7, 0x28510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, @perf_config_ext={0x200000000008, 0x2c}, 0x7e75, 0x5, 0x2000, 0x7, 0x2008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x802, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) 27.265902243s ago: executing program 42 (id=6025): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x6, 0x0, 0x0, 0x0, 0x7, 0x28510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, @perf_config_ext={0x200000000008, 0x2c}, 0x7e75, 0x5, 0x2000, 0x7, 0x2008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x802, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) 1.836369319s ago: executing program 2 (id=6453): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x56) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.711636023s ago: executing program 9 (id=6456): syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0xfffffffd, 0x170}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000900)=""/174, 0xae}], 0x42}}], 0x2, 0x0, 0x0) 1.630844686s ago: executing program 2 (id=6471): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x37, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount_setattr(r2, 0x0, 0x1100, 0x0, 0x0) 1.586476227s ago: executing program 9 (id=6463): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x2300, 0x0}, 0x10) 1.586135397s ago: executing program 4 (id=6464): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1.416051203s ago: executing program 1 (id=6465): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f0000004000), 0x5, 0x1, 0x0, &(0x7f0000004000), 0xa2020000) 1.396793644s ago: executing program 9 (id=6466): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.374825225s ago: executing program 2 (id=6467): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xf, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.284529088s ago: executing program 2 (id=6468): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='wchan\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) 1.206224381s ago: executing program 9 (id=6470): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.193580971s ago: executing program 2 (id=6472): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x891b, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 1.062369085s ago: executing program 1 (id=6474): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x2c9, &(0x7f00000005c0)="$eJzs3b9rJFUcAPDvbGYne6TYFFYiOMUVNobkWgtzSAQxlbKFP0APLwdHdjlIYOFUXK66v8DCwv/Dzl6x8T8QLCztPCTwZGb2dveyexs35+YkfD7V4/u+33nv7bxkA8O8fP7a4Pjug9N7j77+LTqdLFr7sR9PstiOVjyVxgIAuBaepBR/Xur7PW+ta04AwHrNfP+3n5OyOR96e93TAgDW6MOPPn7/9uHhwQdl2Yn4+fGwl0XE4PGw1/Tfvhf3ox9HsRvd2Jg+C0ipab/73uFB5GVlO24ORsNeVTn47JdJahF1/V50Y3tx/V7ZmKkfDfP6L48si7i/X03kVnTjlbn6qv/g1oL66BXxRme8yGr8nejGr1/Eg+jH3fqZRl2/WY3/TRHlO+nbv776pEqu6rPRsLdZ502ljau+NwAAAAAAAAAAAAAAAAAAAAAAXF875cR23BxUoeb8nd7GWd2/80x/fb5Oq+5v6rOIom7sRjfOpufzjFJ835zvE/luWZYpa/In5/vcyOPVPPKXtnAAAAAAAAAAAAAAAAAAAAD4Hzl9+OXxnX7/6OQ/aYxf8p+81n/Z6+zPRF6P5cmbK40VG+P0aq7nc/Z++nQwiVSLuMzkh+0yYtmc23ORG9V8Lr7y3ymllGURL3ab2tE/yufWvlpja3lO9QH/+N3Wm8d3sos+w87TG/fDbFcRJ6cPz93TyJYPevZMJK20/YolOcV4x/yr62y94A/RW783g40j2QWraM9E2uNGPG/7dVbaz1f3OwgAAAAAAAAAAAAAAAAAAGhMX/pd0PloaWlrbZMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCs2/f//00bMRc41RvFHXbw4J6U0mkSKODl92WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+vsnAAD//7NtasQ=") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x25, 0xd, 0x4, 0x6}, {0x2d, 0x0, 0x81, 0x4}, {0xc, 0x90, 0x2, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff6}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 712.863647ms ago: executing program 1 (id=6475): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 545.949732ms ago: executing program 4 (id=6476): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2400000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 545.791702ms ago: executing program 2 (id=6477): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x14}, {&(0x7f0000000340)="5bad", 0x2}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000cdab020004000000000000880f000000657000006600000002400000", @ANYRES32=r2], 0x30, 0x2400e044}, 0x0) 470.470644ms ago: executing program 1 (id=6479): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 470.115654ms ago: executing program 0 (id=6480): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xf, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 469.881505ms ago: executing program 4 (id=6481): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) write(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 465.576505ms ago: executing program 9 (id=6482): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 431.348926ms ago: executing program 4 (id=6483): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) timer_create(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x8, 0xa, "ff00f70000e5020052c4f21c7f000000002000"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 333.534049ms ago: executing program 4 (id=6484): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) unshare(0x22020600) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) 328.304159ms ago: executing program 4 (id=6485): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 254.123112ms ago: executing program 1 (id=6486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000311010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a3200000000140000"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000080) 253.477122ms ago: executing program 0 (id=6496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0b00000007000000020000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000008850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 187.043694ms ago: executing program 1 (id=6487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) ppoll(&(0x7f0000000540)=[{r0, 0x6290}], 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 118.046257ms ago: executing program 9 (id=6488): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 116.803177ms ago: executing program 0 (id=6489): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x18000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 96.278457ms ago: executing program 0 (id=6490): syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0xfffffffd, 0x170}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000900)=""/174, 0xae}], 0x42}}], 0x2, 0x0, 0x0) 17.96649ms ago: executing program 0 (id=6491): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) socket(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 0s ago: executing program 0 (id=6492): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): ilesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.918475][T17115] PID 17115 killed due to inadequate hugepage pool [ 239.937363][T15846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.193240][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4571'. [ 240.213695][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4571'. [ 240.224089][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4571'. [ 240.233758][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4571'. [ 241.436118][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4614'. [ 241.448793][T17307] vxlan1: entered promiscuous mode [ 241.576876][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4619'. [ 241.655614][T17345] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4622'. [ 242.232089][T17412] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 242.238657][T17412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.246824][T17412] vhci_hcd vhci_hcd.0: Device attached [ 242.254594][T17412] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 242.261226][T17412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.269449][T17412] vhci_hcd vhci_hcd.0: Device attached [ 242.282223][T17412] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 242.288803][T17412] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 242.296728][T17412] vhci_hcd vhci_hcd.0: Device attached [ 242.303752][T17412] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 242.310284][T17412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.319488][T17412] vhci_hcd vhci_hcd.0: Device attached [ 242.327373][T17412] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 242.334218][T17412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.344038][T17412] vhci_hcd vhci_hcd.0: Device attached [ 242.359456][T17412] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 242.366089][T17412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.381662][T17412] vhci_hcd vhci_hcd.0: Device attached [ 242.388951][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 242.388969][ T28] audit: type=1400 audit(1774986835.114:3690): avc: denied { name_bind } for pid=17426 comm="syz.7.4639" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 242.434208][T17423] vhci_hcd: connection closed [ 242.434293][T17419] vhci_hcd: connection closed [ 242.434318][T17421] vhci_hcd: connection closed [ 242.439231][T17417] vhci_hcd: connection closed [ 242.443985][T17415] vhci_hcd: connection closed [ 242.451860][T17413] vhci_hcd: connection closed [ 242.458391][ T8478] vhci_hcd vhci_hcd.2: stop threads [ 242.469324][ T8478] vhci_hcd vhci_hcd.2: release socket [ 242.487245][ T3403] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 242.500043][T17414] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 242.506562][ T8478] vhci_hcd vhci_hcd.2: disconnect device [ 242.512816][ T8478] vhci_hcd vhci_hcd.2: stop threads [ 242.518617][ T8478] vhci_hcd vhci_hcd.2: release socket [ 242.524349][ T8478] vhci_hcd vhci_hcd.2: disconnect device [ 242.532410][ T8478] vhci_hcd vhci_hcd.2: stop threads [ 242.555955][ T8478] vhci_hcd vhci_hcd.2: release socket [ 242.580809][ T8478] vhci_hcd vhci_hcd.2: disconnect device [ 242.586781][ T8478] vhci_hcd vhci_hcd.2: stop threads [ 242.592295][ T8478] vhci_hcd vhci_hcd.2: release socket [ 242.606530][ T8478] vhci_hcd vhci_hcd.2: disconnect device [ 242.621813][ T8478] vhci_hcd vhci_hcd.2: stop threads [ 242.639844][ T8478] vhci_hcd vhci_hcd.2: release socket [ 242.657065][ T8478] vhci_hcd vhci_hcd.2: disconnect device [ 242.664707][ T8478] vhci_hcd vhci_hcd.2: stop threads [ 242.670823][ T8478] vhci_hcd vhci_hcd.2: release socket [ 242.685876][ T8478] vhci_hcd vhci_hcd.2: disconnect device [ 243.362365][ T28] audit: type=1400 audit(1774986836.084:3691): avc: denied { write } for pid=17500 comm="syz.0.4668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 243.624315][T17517] loop2: detected capacity change from 0 to 2048 [ 243.633921][T17517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.661502][T17517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.699887][T17517] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4676: bg 0: block 2: invalid block bitmap [ 243.712885][T17517] EXT4-fs (loop2): Remounting filesystem read-only [ 243.736113][T17476] kexec: Could not allocate control_code_buffer [ 243.760006][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.826168][T17536] loop2: detected capacity change from 0 to 512 [ 243.850437][T17536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.863985][T17536] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.908201][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.417473][T17581] ip6gre2: entered promiscuous mode [ 245.412447][T17629] loop2: detected capacity change from 0 to 1024 [ 245.489285][T17629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.536039][ T28] audit: type=1326 audit(1774986838.254:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.4.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea619bc819 code=0x7ffc0000 [ 245.572850][ T28] audit: type=1326 audit(1774986838.254:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.4.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea619bc819 code=0x7ffc0000 [ 245.596591][ T28] audit: type=1326 audit(1774986838.254:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.4.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea619bc819 code=0x7ffc0000 [ 245.620349][ T28] audit: type=1326 audit(1774986838.254:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.4.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea619bc819 code=0x7ffc0000 [ 245.646836][ T28] audit: type=1326 audit(1774986838.254:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.4.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea619bc819 code=0x7ffc0000 [ 245.671891][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.697054][ T28] audit: type=1326 audit(1774986838.254:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.4.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fea619bc819 code=0x7ffc0000 [ 245.738958][ T28] audit: type=1326 audit(1774986838.254:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.4.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea619bc819 code=0x7ffc0000 [ 245.775528][ T28] audit: type=1326 audit(1774986838.254:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.4.4728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea619bc819 code=0x7ffc0000 [ 245.825023][T17657] __nla_validate_parse: 1 callbacks suppressed [ 245.825044][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4732'. [ 245.841139][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4732'. [ 245.870157][T17657] netlink: 'syz.2.4732': attribute type 7 has an invalid length. [ 245.892916][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4732'. [ 245.917359][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4732'. [ 245.926735][T17657] netlink: 'syz.2.4732': attribute type 7 has an invalid length. [ 246.070347][T17660] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 246.789566][T17713] netlink: 'syz.1.4757': attribute type 21 has an invalid length. [ 247.420838][T17728] 9pnet: p9_errstr2errno: server reported unknown error  [ 247.518187][ T3403] usb 5-1: enqueue for inactive port 0 [ 247.530083][ T3403] usb 5-1: enqueue for inactive port 0 [ 247.535864][T17739] loop2: detected capacity change from 0 to 1024 [ 247.543553][T17739] EXT4-fs: Ignoring removed bh option [ 247.582363][T17739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.617824][ T3403] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 247.641486][T17739] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.756843][T17750] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.4769: Freeing blocks not in datazone - block = 0, count = 16 [ 247.845467][ T50] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 247.874661][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 247.900767][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 247.900767][ T50] [ 247.911182][ T50] EXT4-fs (loop2): Total free blocks count 0 [ 247.917828][ T50] EXT4-fs (loop2): Free/Dirty block details [ 247.924112][ T50] EXT4-fs (loop2): free_blocks=16 [ 247.942774][ T50] EXT4-fs (loop2): dirty_blocks=32 [ 247.948424][ T50] EXT4-fs (loop2): Block reservation details [ 247.954450][ T50] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 247.965040][ T260] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 640 with max blocks 4 with error 28 [ 247.991073][ T9243] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 248.293453][T17783] loop7: detected capacity change from 0 to 1024 [ 248.319421][T17783] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 248.327857][T17783] System zones: 0-1, 3-36 [ 248.336785][T17783] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.4782: bad orphan inode 134217728 [ 248.354811][T17783] loop7: lost filesystem error report for type 5 error -117 [ 248.355293][T17783] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.930051][T15846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.952874][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 248.952890][ T28] audit: type=1400 audit(1774986841.674:3718): avc: denied { getopt } for pid=17799 comm="syz.2.4791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.945341][T17761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.985497][ T28] audit: type=1326 audit(1774986843.704:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 251.017347][ T28] audit: type=1326 audit(1774986843.704:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 251.045205][ T28] audit: type=1326 audit(1774986843.704:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 251.077828][ T28] audit: type=1326 audit(1774986843.704:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 251.215845][T17816] bridge0: left allmulticast mode [ 251.292063][T17816] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 251.311660][ T28] audit: type=1326 audit(1774986843.704:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 251.353533][ T28] audit: type=1326 audit(1774986843.744:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 251.402733][ T28] audit: type=1326 audit(1774986843.794:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 251.431699][ T28] audit: type=1326 audit(1774986843.814:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 251.456556][ T28] audit: type=1326 audit(1774986843.814:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.1.4795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 252.018178][T17881] netlink: 'syz.2.4824': attribute type 1 has an invalid length. [ 253.229502][ T8478] Bluetooth: hci0: Frame reassembly failed (-84) [ 253.300160][T17950] loop2: detected capacity change from 0 to 1024 [ 253.322264][T17950] EXT4-fs: Ignoring removed bh option [ 253.348819][T17950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.786873][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.849306][T18055] syzkaller1: entered promiscuous mode [ 254.855371][T18057] loop2: detected capacity change from 0 to 512 [ 254.861924][T18055] syzkaller1: entered allmulticast mode [ 254.875878][T18057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.897303][T18057] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.938361][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.278961][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 257.184890][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 257.184949][ T28] audit: type=1326 audit(1774986849.904:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18168 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 257.256591][ T28] audit: type=1326 audit(1774986849.944:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18168 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 257.326721][ T28] audit: type=1326 audit(1774986849.944:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18168 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 257.359011][ T28] audit: type=1326 audit(1774986849.944:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18168 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 257.465921][ T28] audit: type=1326 audit(1774986849.944:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18168 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 257.586951][ T28] audit: type=1326 audit(1774986849.944:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18168 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 257.616628][ T28] audit: type=1326 audit(1774986849.944:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18168 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 257.666424][ T28] audit: type=1326 audit(1774986849.944:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18168 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 257.699533][ T28] audit: type=1326 audit(1774986849.964:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18168 comm="syz.1.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 257.729173][T18190] gretap2: entered promiscuous mode [ 257.734921][ T28] audit: type=1400 audit(1774986850.454:3754): avc: denied { ioctl } for pid=18189 comm="syz.7.4904" path="socket:[50426]" dev="sockfs" ino=50426 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 257.872021][T18204] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 257.959118][T14280] IPVS: starting estimator thread 0... [ 257.974727][T18212] netlink: 'syz.7.4915': attribute type 10 has an invalid length. [ 258.018101][T18212] team0: Port device dummy0 added [ 258.046678][T18212] netlink: 'syz.7.4915': attribute type 10 has an invalid length. [ 258.057291][T18223] IPVS: using max 2640 ests per chain, 132000 per kthread [ 258.072566][T18212] team0: Port device dummy0 removed [ 258.080669][T18212] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 258.244272][T18244] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 258.251083][T18244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.258867][T18244] vhci_hcd vhci_hcd.0: Device attached [ 258.267555][T18244] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 258.274109][T18244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.281852][T18244] vhci_hcd vhci_hcd.0: Device attached [ 258.295848][T18244] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 258.302514][T18244] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 258.310388][T18244] vhci_hcd vhci_hcd.0: Device attached [ 258.318505][T18244] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(9) [ 258.325047][T18244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.332850][T18244] vhci_hcd vhci_hcd.0: Device attached [ 258.339793][T18244] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(11) [ 258.346412][T18244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.354355][T18244] vhci_hcd vhci_hcd.0: Device attached [ 258.362195][T18244] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(13) [ 258.368819][T18244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.376550][T18244] vhci_hcd vhci_hcd.0: Device attached [ 258.382884][T18256] vhci_hcd: connection closed [ 258.382978][T18259] vhci_hcd: connection closed [ 258.383254][T18254] vhci_hcd: connection closed [ 258.387801][ T8478] vhci_hcd vhci_hcd.7: stop threads [ 258.392582][T18246] vhci_hcd: connection closed [ 258.397073][ T8478] vhci_hcd vhci_hcd.7: release socket [ 258.402625][T18250] vhci_hcd: connection closed [ 258.412761][T18248] vhci_hcd: connection closed [ 258.417351][ T8478] vhci_hcd vhci_hcd.7: disconnect device [ 258.438696][ T8478] vhci_hcd vhci_hcd.7: stop threads [ 258.444089][ T8478] vhci_hcd vhci_hcd.7: release socket [ 258.455192][ T8478] vhci_hcd vhci_hcd.7: disconnect device [ 258.461309][ T8478] vhci_hcd vhci_hcd.7: stop threads [ 258.466612][ T8478] vhci_hcd vhci_hcd.7: release socket [ 258.472154][ T8478] vhci_hcd vhci_hcd.7: disconnect device [ 258.478077][ T8478] vhci_hcd vhci_hcd.7: stop threads [ 258.483435][ T8478] vhci_hcd vhci_hcd.7: release socket [ 258.489024][ T8478] vhci_hcd vhci_hcd.7: disconnect device [ 258.494896][ T8478] vhci_hcd vhci_hcd.7: stop threads [ 258.497264][T14262] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 258.500379][ T8478] vhci_hcd vhci_hcd.7: release socket [ 258.529721][ T8478] vhci_hcd vhci_hcd.7: disconnect device [ 258.535802][ T8478] vhci_hcd vhci_hcd.7: stop threads [ 258.541408][ T8478] vhci_hcd vhci_hcd.7: release socket [ 258.547306][ T8478] vhci_hcd vhci_hcd.7: disconnect device [ 258.711093][T18263] loop2: detected capacity change from 0 to 128 [ 258.966480][ T50] kworker/u8:3: attempt to access beyond end of device [ 258.966480][ T50] loop2: rw=1, sector=145, nr_sectors = 40 limit=128 [ 259.019281][ T50] kworker/u8:3: attempt to access beyond end of device [ 259.019281][ T50] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 259.058295][ T50] kworker/u8:3: attempt to access beyond end of device [ 259.058295][ T50] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 259.097308][ T50] kworker/u8:3: attempt to access beyond end of device [ 259.097308][ T50] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 259.114000][ T50] kworker/u8:3: attempt to access beyond end of device [ 259.114000][ T50] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 259.128784][ T50] kworker/u8:3: attempt to access beyond end of device [ 259.128784][ T50] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 259.142797][ T50] kworker/u8:3: attempt to access beyond end of device [ 259.142797][ T50] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 259.157242][ T50] kworker/u8:3: attempt to access beyond end of device [ 259.157242][ T50] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 259.170737][ T50] kworker/u8:3: attempt to access beyond end of device [ 259.170737][ T50] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 259.184521][ T50] kworker/u8:3: attempt to access beyond end of device [ 259.184521][ T50] loop2: rw=1, sector=321, nr_sectors = 8 limit=128 [ 259.710708][T18315] netlink: 'syz.7.4945': attribute type 21 has an invalid length. [ 259.728146][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4945'. [ 259.737688][T18315] netlink: 'syz.7.4945': attribute type 21 has an invalid length. [ 259.746122][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4945'. [ 259.925881][T18328] netlink: 'syz.4.4949': attribute type 10 has an invalid length. [ 259.936123][T18328] team0: Port device dummy0 added [ 259.943377][T18328] netlink: 'syz.4.4949': attribute type 10 has an invalid length. [ 259.961034][T18328] team0: Port device dummy0 removed [ 260.542484][T18365] syzkaller0: entered promiscuous mode [ 260.548091][T18365] syzkaller0: entered allmulticast mode [ 261.093989][T18384] loop0: detected capacity change from 0 to 128 [ 261.184717][T18381] loop2: detected capacity change from 0 to 128 [ 261.427276][T18400] netlink: 'syz.4.4979': attribute type 10 has an invalid length. [ 261.458661][T18400] syz_tun: entered promiscuous mode [ 261.530298][T18407] loop0: detected capacity change from 0 to 1024 [ 261.590662][T18407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.669642][T18419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4986'. [ 261.682220][T18419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4986'. [ 261.694895][T11272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.791902][T18428] loop0: detected capacity change from 0 to 512 [ 261.824283][T18428] EXT4-fs: Ignoring removed bh option [ 261.844610][T18428] EXT4-fs: inline encryption not supported [ 261.861238][T18428] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.891679][T18428] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 261.909487][T18428] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4987: bg 0: block 248: padding at end of block bitmap is not set [ 261.924700][T18428] loop0: lost filesystem error report for type 5 error -117 [ 261.925189][T18428] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.4987: Failed to acquire dquot type 1 [ 261.932643][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 261.932669][ C0] EXT4-fs (loop0): last error at time 1774986854: ext4_validate_block_bitmap:441 [ 261.959778][T18428] loop0: lost filesystem error report for type 5 error -28 [ 261.974633][T18428] EXT4-fs (loop0): 1 truncate cleaned up [ 261.988422][T18428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 262.449387][T18456] loop7: detected capacity change from 0 to 1024 [ 262.497815][T18456] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.672307][T18392] kexec: Could not allocate control_code_buffer [ 262.748051][T18465] xt_hashlimit: size too large, truncated to 1048576 [ 262.772823][T15846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.837852][T11272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 262.951241][T18478] netlink: 'syz.0.5005': attribute type 4 has an invalid length. [ 262.979801][T18478] netlink: 'syz.0.5005': attribute type 4 has an invalid length. [ 263.158393][T14271] kernel read not supported for file /rfkill (pid: 14271 comm: kworker/1:12) [ 263.179956][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 263.179973][ T28] audit: type=1326 audit(1774986855.904:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18496 comm="syz.7.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3cf7c819 code=0x7ffc0000 [ 263.262496][ T28] audit: type=1326 audit(1774986855.904:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18496 comm="syz.7.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3cf7c819 code=0x7ffc0000 [ 263.288434][ T28] audit: type=1326 audit(1774986855.904:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18496 comm="syz.7.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3cf7c819 code=0x7ffc0000 [ 263.320638][T18504] loop2: detected capacity change from 0 to 512 [ 263.378014][ T28] audit: type=1326 audit(1774986855.904:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18496 comm="syz.7.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3cf7c819 code=0x7ffc0000 [ 263.444725][ T28] audit: type=1326 audit(1774986855.904:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18496 comm="syz.7.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7feb3cf7c819 code=0x7ffc0000 [ 263.491014][T18504] EXT4-fs: Ignoring removed bh option [ 263.496438][T18504] EXT4-fs: inline encryption not supported [ 263.502681][ T28] audit: type=1326 audit(1774986855.904:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18496 comm="syz.7.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3cf7c819 code=0x7ffc0000 [ 263.547797][T14262] usb 15-1: enqueue for inactive port 0 [ 263.556150][T14262] usb 15-1: enqueue for inactive port 0 [ 263.604176][T18504] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.644876][ T28] audit: type=1326 audit(1774986855.934:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18496 comm="syz.7.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3cf7c819 code=0x7ffc0000 [ 263.668934][T14262] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 263.771656][ T28] audit: type=1326 audit(1774986855.944:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18496 comm="syz.7.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3cf7c819 code=0x7ffc0000 [ 263.851774][ T28] audit: type=1326 audit(1774986855.984:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18496 comm="syz.7.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3cf7c819 code=0x7ffc0000 [ 263.877477][ T28] audit: type=1326 audit(1774986855.984:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18496 comm="syz.7.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb3cf7c819 code=0x7ffc0000 [ 263.902126][T18504] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 263.937270][T18504] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5016: bg 0: block 248: padding at end of block bitmap is not set [ 263.957922][T18504] loop2: lost filesystem error report for type 5 error -117 [ 263.958494][T18504] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.5016: Failed to acquire dquot type 1 [ 263.977251][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 263.977275][ C0] EXT4-fs (loop2): last error at time 1774986856: ext4_validate_block_bitmap:441 [ 264.005364][T18504] loop2: lost filesystem error report for type 5 error -28 [ 264.005857][T18504] EXT4-fs (loop2): 1 truncate cleaned up [ 264.021040][T18504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 264.108647][T18532] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5023'. [ 264.262396][T18542] loop7: detected capacity change from 0 to 512 [ 264.279923][T18542] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 264.306119][T18542] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #13: comm syz.7.5039: iget: bad i_size value: 12154757448730 [ 264.327459][T18542] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 264.327717][T18542] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5039: couldn't read orphan inode 13 (err -117) [ 264.349157][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 264.349179][ C1] EXT4-fs (loop7): initial error at time 1774986857: ext4_orphan_get:1397: inode 13 [ 264.349205][ C1] EXT4-fs (loop7): last error at time 1774986857: ext4_orphan_get:1397: inode 13 [ 264.378008][T18542] loop7: lost filesystem error report for type 5 error -117 [ 264.382398][T18542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.512687][T15846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.540100][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 264.821645][T18586] dvmrp0: entered allmulticast mode [ 265.445462][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5061'. [ 265.890426][T18642] loop7: detected capacity change from 0 to 128 [ 266.078395][ T37] bio_check_eod: 206 callbacks suppressed [ 266.078437][ T37] kworker/u8:2: attempt to access beyond end of device [ 266.078437][ T37] loop7: rw=1, sector=145, nr_sectors = 40 limit=128 [ 266.102680][ T37] kworker/u8:2: attempt to access beyond end of device [ 266.102680][ T37] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 266.116594][ T37] kworker/u8:2: attempt to access beyond end of device [ 266.116594][ T37] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 266.131185][ T37] kworker/u8:2: attempt to access beyond end of device [ 266.131185][ T37] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 266.145479][ T37] kworker/u8:2: attempt to access beyond end of device [ 266.145479][ T37] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 266.159610][ T37] kworker/u8:2: attempt to access beyond end of device [ 266.159610][ T37] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 266.173811][ T37] kworker/u8:2: attempt to access beyond end of device [ 266.173811][ T37] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 266.189617][ T37] kworker/u8:2: attempt to access beyond end of device [ 266.189617][ T37] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 266.204615][ T37] kworker/u8:2: attempt to access beyond end of device [ 266.204615][ T37] loop7: rw=1, sector=305, nr_sectors = 8 limit=128 [ 266.218740][ T37] kworker/u8:2: attempt to access beyond end of device [ 266.218740][ T37] loop7: rw=1, sector=321, nr_sectors = 8 limit=128 [ 266.480532][T18659] loop7: detected capacity change from 0 to 512 [ 266.508534][T18659] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.5085: inode has both inline data and extents flags [ 266.542792][T18659] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.542992][T18659] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5085: couldn't read orphan inode 15 (err -117) [ 266.552249][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 266.552270][ C1] EXT4-fs (loop7): initial error at time 1774986859: ext4_orphan_get:1397: inode 15 [ 266.552300][ C1] EXT4-fs (loop7): last error at time 1774986859: ext4_orphan_get:1397: inode 15 [ 266.686106][T18659] loop7: lost filesystem error report for type 5 error -117 [ 266.687250][T18659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.798386][T15846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.906369][T18694] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 268.244233][T18717] xt_hashlimit: size too large, truncated to 1048576 [ 269.432746][T18763] tipc: Started in network mode [ 269.448051][T18763] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 269.462875][T18763] tipc: Enabling of bearer rejected, failed to enable media [ 269.809703][T18793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5133'. [ 270.184652][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 270.184670][ T28] audit: type=1326 audit(1774986862.904:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 270.268091][ T28] audit: type=1326 audit(1774986862.904:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 270.301926][ T28] audit: type=1326 audit(1774986862.904:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 270.326290][ T28] audit: type=1326 audit(1774986862.904:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 270.356926][ T28] audit: type=1326 audit(1774986862.964:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 270.411847][ T28] audit: type=1326 audit(1774986862.964:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d49fbc582 code=0x7ffc0000 [ 270.443114][ T28] audit: type=1326 audit(1774986862.964:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8d49fbc617 code=0x7ffc0000 [ 270.467599][ T28] audit: type=1326 audit(1774986862.964:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8d49f79511 code=0x7ffc0000 [ 270.537219][ T28] audit: type=1326 audit(1774986862.964:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8d49fbd609 code=0x7ffc0000 [ 270.568609][T18830] loop2: detected capacity change from 0 to 128 [ 270.591527][T18830] FAT-fs (loop2): bogus logical sector size 759 [ 270.623436][T18830] FAT-fs (loop2): Can't find a valid FAT filesystem [ 270.635061][ T28] audit: type=1326 audit(1774986862.964:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.0.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8d49f7957b code=0x7ffc0000 [ 270.708228][T18843] : renamed from vlan0 (while UP) [ 270.937852][T18864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5163'. [ 271.072254][T18871] loop2: detected capacity change from 0 to 512 [ 271.106262][T18871] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.5167: inode has both inline data and extents flags [ 271.130720][T18871] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.132310][T18871] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5167: couldn't read orphan inode 15 (err -117) [ 271.141917][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 271.141950][ C1] EXT4-fs (loop2): initial error at time 1774986863: ext4_orphan_get:1397: inode 15 [ 271.141981][ C1] EXT4-fs (loop2): last error at time 1774986863: ext4_orphan_get:1397: inode 15 [ 271.215467][T18871] loop2: lost filesystem error report for type 5 error -117 [ 271.215993][T18871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.351511][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.384400][T18890] ip6gre2: entered promiscuous mode [ 271.410228][T18890] ip6gre2: entered allmulticast mode [ 271.410906][T18888] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.5170'. [ 271.450042][T10561] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.483444][T10561] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.545411][T10561] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.577114][T10561] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.616083][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5184'. [ 271.658616][T18917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5184'. [ 271.673009][T10561] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.683666][T10561] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.708780][T18922] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 271.759613][T10561] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.771740][T10561] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.805685][T18922] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 271.871313][T18922] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 271.956589][T18922] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 272.007550][T10561] bridge_slave_1: left allmulticast mode [ 272.013235][T10561] bridge_slave_1: left promiscuous mode [ 272.028586][T10561] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.044201][T10561] bridge_slave_0: left allmulticast mode [ 272.052507][T10561] bridge_slave_0: left promiscuous mode [ 272.058577][T10561] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.211310][T18967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5198'. [ 272.242764][T10561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.253911][T10561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.264786][T10561] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 272.274652][T10561] bond0 (unregistering): Released all slaves [ 272.339229][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 272.365087][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 272.378020][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 272.379656][T18976] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.5199'. [ 272.401311][T18903] chnl_net:caif_netlink_parms(): no params data found [ 272.411082][T18976] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.5199'. [ 272.688679][T10561] hsr_slave_0: left promiscuous mode [ 272.694407][T10561] hsr_slave_1: left promiscuous mode [ 272.700682][T10561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.708277][T10561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.716039][T10561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.723504][T10561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.738584][T10561] veth1_macvtap: left promiscuous mode [ 272.745551][T10561] veth0_macvtap: left promiscuous mode [ 272.751270][T10561] veth1_vlan: left promiscuous mode [ 272.777286][T10561] veth0_vlan: left promiscuous mode [ 272.905769][T10561] team0 (unregistering): Port device team_slave_1 removed [ 272.923354][T10561] team0 (unregistering): Port device team_slave_0 removed [ 273.053675][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 273.149635][T18903] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.166950][T18903] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.174428][T18903] bridge_slave_0: entered allmulticast mode [ 273.181485][T18903] bridge_slave_0: entered promiscuous mode [ 273.189240][T18903] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.202440][T18903] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.210634][T18903] bridge_slave_1: entered allmulticast mode [ 273.217438][T18903] bridge_slave_1: entered promiscuous mode [ 273.228270][T19026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5215'. [ 273.235608][T18903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.248365][T18903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.268158][T19026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5215'. [ 273.270884][T18903] team0: Port device team_slave_0 added [ 273.286832][T18903] team0: Port device team_slave_1 added [ 273.304415][T19026] netlink: 4676 bytes leftover after parsing attributes in process `syz.0.5215'. [ 273.361344][T18903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.407533][T18903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.501935][T18903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.539346][T18903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.562212][T18903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.606520][T18903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.755106][T18903] hsr_slave_0: entered promiscuous mode [ 273.762872][T18903] hsr_slave_1: entered promiscuous mode [ 273.772761][T18903] debugfs: 'hsr0' already exists in 'hsr' [ 273.787231][T18903] Cannot create hsr debugfs directory [ 274.246771][T19079] loop2: detected capacity change from 0 to 2048 [ 274.272206][T18903] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 274.297580][T19079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.363148][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.384788][T18903] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 274.414308][T18903] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 274.434267][T18903] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 274.568123][T18903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.596622][T18903] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.632918][ T1727] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.640126][ T1727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.689119][ T1727] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.696329][ T1727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.882013][T18903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.904545][T19116] loop0: detected capacity change from 0 to 32768 [ 274.957551][ T3304] loop0: p1 p3 < > [ 274.966205][T19116] loop0: p1 p3 < > [ 275.154614][T18903] veth0_vlan: entered promiscuous mode [ 275.168970][T18903] veth1_vlan: entered promiscuous mode [ 275.204119][T18903] veth0_macvtap: entered promiscuous mode [ 275.218157][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 275.229945][T11294] udevd[11294]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 275.242643][T18903] veth1_macvtap: entered promiscuous mode [ 275.274520][T18903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.298169][T18903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.313807][ T1727] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.324080][ T1727] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.342104][ T1727] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.360511][ T1727] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.468032][T19189] loop0: detected capacity change from 0 to 32768 [ 275.470136][T19224] netlink: 'syz.7.5254': attribute type 2 has an invalid length. [ 275.498131][ T3304] loop0: p1 p3 < > [ 275.506424][T19189] loop0: p1 p3 < > [ 275.569150][T11294] udevd[11294]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 275.580370][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 275.600358][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 275.612002][T11294] udevd[11294]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 275.633481][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 275.633534][ T28] audit: type=1326 audit(1774986868.354:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19229 comm="syz.7.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 275.669401][ T28] audit: type=1326 audit(1774986868.354:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19229 comm="syz.7.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 275.695173][ T28] audit: type=1326 audit(1774986868.354:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19229 comm="syz.7.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 275.722862][ T28] audit: type=1326 audit(1774986868.354:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19229 comm="syz.7.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 275.759521][ T28] audit: type=1326 audit(1774986868.354:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19229 comm="syz.7.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 275.809577][T19236] loop0: detected capacity change from 0 to 1024 [ 275.819363][T19236] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 275.853449][ T28] audit: type=1326 audit(1774986868.354:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19229 comm="syz.7.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 275.884953][T19236] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 275.885810][ T28] audit: type=1326 audit(1774986868.374:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19229 comm="syz.7.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 275.917278][T19236] EXT4-fs (loop0): orphan cleanup on readonly fs [ 275.924237][ T28] audit: type=1326 audit(1774986868.454:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.0.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 275.948699][ T28] audit: type=1326 audit(1774986868.454:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.0.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 275.949480][T19236] EXT4-fs error (device loop0): __ext4_get_inode_loc:4797: comm syz.0.5257: Invalid inode table block 0 in block_group 0 [ 275.972294][ T28] audit: type=1326 audit(1774986868.474:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19233 comm="syz.0.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 275.993038][T19236] loop0: lost filesystem error report for type 5 error -117 [ 276.034211][T19244] __nla_validate_parse: 3 callbacks suppressed [ 276.034230][T19244] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5264'. [ 276.048152][T19236] EXT4-fs (loop0): Remounting filesystem read-only [ 276.063511][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 276.063543][ C0] EXT4-fs (loop0): initial error at time 1774986868: __ext4_get_inode_loc:4797 [ 276.063577][ C0] EXT4-fs (loop0): last error at time 1774986868: __ext4_get_inode_loc:4797 [ 276.125537][T19236] EXT4-fs (loop0): 1 truncate cleaned up [ 276.132157][T19236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.264411][T11272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.353611][T19274] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 276.470798][T19268] loop7: detected capacity change from 0 to 32768 [ 276.504595][T19298] loop0: detected capacity change from 0 to 512 [ 276.511563][T19298] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.519317][T19268] loop7: p1 p3 < > [ 276.525474][T19298] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.5280: corrupted in-inode xattr: e_value size too large [ 276.546085][T19298] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 276.546377][T19298] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.5280: couldn't read orphan inode 15 (err -117) [ 276.555733][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 276.555767][ C1] EXT4-fs (loop0): initial error at time 1774986869: ext4_iget_extra_inode:5040: inode 15 [ 276.555808][ C1] EXT4-fs (loop0): last error at time 1774986869: ext4_iget_extra_inode:5040: inode 15 [ 276.593881][T19298] loop0: lost filesystem error report for type 5 error -117 [ 276.596363][T19298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.650554][T19298] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.5280: Logical block already allocated [ 276.707839][T11272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.718894][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 276.737607][T11294] udevd[11294]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 276.961068][T19335] loop7: detected capacity change from 0 to 512 [ 276.996338][T19335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.996783][T19338] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.5298'. [ 277.064427][T19338] netlink: zone id is out of range [ 277.083218][T19338] netlink: zone id is out of range [ 277.098370][T19335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.125638][T19335] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.133685][T19338] netlink: set zone limit has 8 unknown bytes [ 277.256497][T18903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.504674][T19379] tipc: Started in network mode [ 277.517580][T19379] tipc: Node identity , cluster identity 4711 [ 277.590464][T19385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5315'. [ 277.830980][T19391] loop7: detected capacity change from 0 to 8192 [ 278.316366][T19410] loop0: detected capacity change from 0 to 764 [ 278.777536][T19474] IPv6: Can't replace route, no match found [ 279.379743][T19565] loop7: detected capacity change from 0 to 256 [ 279.394804][T19565] FAT-fs (loop7): Directory bread(block 64) failed [ 279.401525][T19565] FAT-fs (loop7): Directory bread(block 65) failed [ 279.431730][T19565] FAT-fs (loop7): Directory bread(block 66) failed [ 279.461596][T19565] FAT-fs (loop7): Directory bread(block 67) failed [ 279.478829][T19565] FAT-fs (loop7): Directory bread(block 68) failed [ 279.485557][T19565] FAT-fs (loop7): Directory bread(block 69) failed [ 279.498350][T19565] FAT-fs (loop7): Directory bread(block 70) failed [ 279.509532][T19565] FAT-fs (loop7): Directory bread(block 71) failed [ 279.516224][T19565] FAT-fs (loop7): Directory bread(block 72) failed [ 279.528237][T19565] FAT-fs (loop7): Directory bread(block 73) failed [ 279.549089][T19565] bio_check_eod: 98 callbacks suppressed [ 279.549110][T19565] syz.7.5359: attempt to access beyond end of device [ 279.549110][T19565] loop7: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 279.631944][T19577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.343996][T19612] loop7: detected capacity change from 0 to 128 [ 280.782167][T19644] macvlan4: entered promiscuous mode [ 280.800706][T19644] team0: entered promiscuous mode [ 280.811312][T19644] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 280.829333][T19644] team0: left promiscuous mode [ 280.922106][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 280.922124][ T28] audit: type=1326 audit(1774986873.644:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 280.993052][ T28] audit: type=1326 audit(1774986873.684:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 281.019464][ T28] audit: type=1326 audit(1774986873.684:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 281.081478][T19660] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5395'. [ 281.096112][ T28] audit: type=1326 audit(1774986873.684:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 281.197389][ T28] audit: type=1326 audit(1774986873.684:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 281.357424][ T28] audit: type=1326 audit(1774986873.684:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 281.407218][ T28] audit: type=1326 audit(1774986873.684:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 281.487380][ T28] audit: type=1326 audit(1774986873.684:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 281.542488][T19677] netlink: zone id is out of range [ 281.558602][ T28] audit: type=1326 audit(1774986873.684:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 281.607223][ T28] audit: type=1326 audit(1774986873.684:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19650 comm="syz.0.5390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 282.116065][T19699] loop7: detected capacity change from 0 to 256 [ 282.137495][T19666] syz.1.5398 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 282.160885][T19666] CPU: 0 UID: 0 PID: 19666 Comm: syz.1.5398 Not tainted syzkaller #0 PREEMPT(full) [ 282.160912][T19666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.160993][T19666] Call Trace: [ 282.161002][T19666] [ 282.161011][T19666] __dump_stack+0x1d/0x30 [ 282.161047][T19666] dump_stack_lvl+0x95/0xd0 [ 282.161068][T19666] dump_stack+0x15/0x1b [ 282.161141][T19666] dump_header+0x80/0x240 [ 282.161165][T19666] oom_kill_process+0x295/0x350 [ 282.161223][T19666] out_of_memory+0x97d/0xb80 [ 282.161249][T19666] try_charge_memcg+0x62e/0xa10 [ 282.161290][T19666] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 282.161345][T19666] __swap_cache_prepare_and_add+0x67/0x460 [ 282.161379][T19666] ? alloc_pages_mpol+0x217/0x260 [ 282.161418][T19666] swap_cache_alloc_folio+0xa2/0x120 [ 282.161448][T19666] swap_cluster_readahead+0x36b/0x3d0 [ 282.161585][T19666] swapin_readahead+0xde/0x840 [ 282.161621][T19666] ? __rcu_read_unlock+0x4e/0x70 [ 282.161715][T19666] ? swap_cache_get_folio+0x26f/0x280 [ 282.161749][T19666] do_swap_page+0x2fe/0x21e0 [ 282.161780][T19666] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 282.161887][T19666] ? probe_sched_wakeup+0x84/0xa0 [ 282.161915][T19666] ? __rcu_read_lock+0x36/0x50 [ 282.161965][T19666] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 282.161998][T19666] handle_mm_fault+0xb46/0x3020 [ 282.162092][T19666] ? vma_start_read+0x1c7/0x2c0 [ 282.162120][T19666] do_user_addr_fault+0x62f/0x1050 [ 282.162148][T19666] ? arch_exit_work+0x30/0x40 [ 282.162172][T19666] ? irqentry_exit+0x3c/0x520 [ 282.162196][T19666] ? trace_page_fault_user+0x1f/0xe0 [ 282.162243][T19666] exc_page_fault+0x62/0xa0 [ 282.162298][T19666] asm_exc_page_fault+0x26/0x30 [ 282.162390][T19666] RIP: 0033:0x7f2d227ecd39 [ 282.162407][T19666] Code: f0 0f 83 c0 00 00 00 48 89 75 00 49 89 4c 24 f8 48 8b 4d 08 48 8b 55 00 eb 91 0f 1f 80 00 00 00 00 4c 89 ea 4c 89 e6 48 89 df 02 ff ff ff 48 89 d8 48 29 e8 48 3d 80 00 00 00 0f 8e 7d 00 00 [ 282.162475][T19666] RSP: 002b:00007ffc737732a0 EFLAGS: 00010246 [ 282.162495][T19666] RAX: 00007f2d22632120 RBX: 00007f2d22632120 RCX: ffffffff81854c6c [ 282.162513][T19666] RDX: 0000000000000019 RSI: 00007f2d22633a38 RDI: 00007f2d22632120 [ 282.162528][T19666] RBP: 00007f2d2262f5f0 R08: 00007f2d22b80000 R09: 00007f2d22b96038 [ 282.162545][T19666] R10: 0000000000000001 R11: 0000000000000005 R12: 00007f2d22633a38 [ 282.162558][T19666] R13: 0000000000000019 R14: 0000000000000889 R15: 0000000000000001 [ 282.162579][T19666] ? workingset_update_node+0x11c/0x150 [ 282.162608][T19666] [ 282.162615][T19666] memory: usage 307200kB, limit 307200kB, failcnt 197 [ 282.217404][T19699] FAT-fs (loop7): bogus number of FAT sectors [ 282.296781][T19666] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0 [ 282.307250][T19699] FAT-fs (loop7): Can't find a valid FAT filesystem [ 282.441779][T19666] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 282.449383][T19666] Memory cgroup stats for /syz1: [ 282.449817][T19666] cache 0 [ 282.457858][T19666] rss 0 [ 282.460668][T19666] shmem 0 [ 282.463632][T19666] mapped_file 0 [ 282.467962][T19666] dirty 0 [ 282.470942][T19666] writeback 0 [ 282.474250][T19666] workingset_refault_anon 309 [ 282.479374][T19666] workingset_refault_file 0 [ 282.483882][T19666] swap 286720 [ 282.487210][T19666] swapcached 13438976 [ 282.491216][T19666] pgpgin 226015 [ 282.494736][T19666] pgpgout 226014 [ 282.498541][T19666] pgfault 209036 [ 282.502099][T19666] pgmajfault 34 [ 282.505635][T19666] inactive_anon 0 [ 282.509308][T19666] active_anon 0 [ 282.512861][T19666] inactive_file 0 [ 282.516586][T19666] active_file 4096 [ 282.520421][T19666] unevictable 0 [ 282.523901][T19666] hierarchical_memory_limit 314572800 [ 282.529350][T19666] hierarchical_memsw_limit 9223372036854771712 [ 282.535520][T19666] total_cache 0 [ 282.539153][T19666] total_rss 0 [ 282.542553][T19666] total_shmem 0 [ 282.546038][T19666] total_mapped_file 0 [ 282.550078][T19666] total_dirty 0 [ 282.553538][T19666] total_writeback 0 [ 282.557359][T19666] total_workingset_refault_anon 309 [ 282.562643][T19666] total_workingset_refault_file 0 [ 282.567704][T19666] total_swap 286720 [ 282.571614][T19666] total_swapcached 13438976 [ 282.576159][T19666] total_pgpgin 226015 [ 282.580269][T19666] total_pgpgout 226014 [ 282.584346][T19666] total_pgfault 209036 [ 282.588776][T19666] total_pgmajfault 34 [ 282.592761][T19666] total_inactive_anon 0 [ 282.596983][T19666] total_active_anon 0 [ 282.601059][T19666] total_inactive_file 0 [ 282.605343][T19666] total_active_file 4096 [ 282.609711][T19666] total_unevictable 0 [ 282.613695][T19666] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5398,pid=19666,uid=0 [ 282.628838][T19666] Memory cgroup out of memory: Killed process 19666 (syz.1.5398) total-vm:96080kB, anon-rss:1224kB, file-rss:22248kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 282.687017][T19707] loop2: detected capacity change from 0 to 512 [ 282.694582][T19707] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 282.707674][T19707] EXT4-fs (loop2): 1 truncate cleaned up [ 282.722574][T19707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.775018][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.816197][T19716] futex_wake_op: syz.2.5418 tries to shift op by -1; fix this program [ 283.140478][T19726] netlink: 'syz.2.5422': attribute type 4 has an invalid length. [ 283.682485][T19770] loop2: detected capacity change from 0 to 128 [ 284.209780][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.209780][T19282] loop2: rw=1, sector=145, nr_sectors = 40 limit=128 [ 284.246867][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.246867][T19282] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 284.287660][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.287660][T19282] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 284.311369][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.311369][T19282] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 284.345923][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.345923][T19282] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 284.370501][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.370501][T19282] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 284.474417][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.474417][T19282] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 284.533610][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.533610][T19282] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 284.589568][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.589568][T19282] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 284.657708][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.657708][T19282] loop2: rw=1, sector=321, nr_sectors = 8 limit=128 [ 284.804002][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.804002][T19282] loop2: rw=1, sector=337, nr_sectors = 8 limit=128 [ 284.836242][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.836242][T19282] loop2: rw=1, sector=353, nr_sectors = 8 limit=128 [ 284.855671][T19796] loop0: detected capacity change from 0 to 256 [ 284.870022][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.870022][T19282] loop2: rw=1, sector=369, nr_sectors = 8 limit=128 [ 284.917384][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.917384][T19282] loop2: rw=1, sector=385, nr_sectors = 8 limit=128 [ 284.967841][T19282] kworker/u8:18: attempt to access beyond end of device [ 284.967841][T19282] loop2: rw=1, sector=401, nr_sectors = 8 limit=128 [ 284.983416][T19796] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.047258][T19282] kworker/u8:18: attempt to access beyond end of device [ 285.047258][T19282] loop2: rw=1, sector=417, nr_sectors = 8 limit=128 [ 285.087320][T19282] kworker/u8:18: attempt to access beyond end of device [ 285.087320][T19282] loop2: rw=1, sector=433, nr_sectors = 8 limit=128 [ 285.117448][T19282] kworker/u8:18: attempt to access beyond end of device [ 285.117448][T19282] loop2: rw=1, sector=449, nr_sectors = 8 limit=128 [ 285.331789][T19803] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 285.430142][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5460'. [ 285.543173][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5457'. [ 286.634871][T19868] loop2: detected capacity change from 0 to 128 [ 286.671656][T19868] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.709788][T19874] loop7: detected capacity change from 0 to 164 [ 286.729534][T19868] ext4 filesystem being mounted at /683/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.765275][T19874] rock: directory entry would overflow storage [ 286.774550][T19874] rock: sig=0x5252, size=5, remaining=3 [ 286.828082][T19880] netlink: 'syz.7.5489': attribute type 15 has an invalid length. [ 286.856118][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5489'. [ 286.890318][T19880] netlink: 'syz.7.5489': attribute type 15 has an invalid length. [ 286.898736][T10563] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 286.908362][ T9243] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.917763][T19277] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 286.926665][T19277] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 286.936932][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5489'. [ 286.958717][T19886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5492'. [ 286.960136][T19277] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 287.035204][T19892] loop0: detected capacity change from 0 to 512 [ 287.048155][T19894] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.5504'. [ 287.058249][T19892] EXT4-fs: Ignoring removed nobh option [ 287.092309][T19892] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.120062][T19892] EXT4-fs (loop0): 1 truncate cleaned up [ 287.126242][T19892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.178107][T11272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.686299][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 287.686319][ T28] audit: type=1326 audit(1774986880.404:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.7.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 287.697833][T19939] syz.7.5513 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 287.731358][ T28] audit: type=1326 audit(1774986880.404:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.7.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 287.755386][ T28] audit: type=1326 audit(1774986880.414:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.7.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 287.780593][ T28] audit: type=1326 audit(1774986880.414:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.7.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 287.804979][ T28] audit: type=1326 audit(1774986880.414:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.7.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 287.829262][ T28] audit: type=1326 audit(1774986880.414:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.7.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 287.854274][ T28] audit: type=1326 audit(1774986880.414:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.7.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 287.902209][ T28] audit: type=1326 audit(1774986880.414:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.7.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 287.977160][ T28] audit: type=1326 audit(1774986880.414:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.7.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 288.013534][ T28] audit: type=1326 audit(1774986880.414:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19938 comm="syz.7.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59d750c819 code=0x7ffc0000 [ 288.197041][ T8486] Bluetooth: hci0: Frame reassembly failed (-84) [ 288.271515][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5523'. [ 288.295843][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5523'. [ 288.333671][ T8486] netdevsim netdevsim7 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 288.342687][ T8486] netdevsim netdevsim7 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 288.352200][ T8486] netdevsim netdevsim7 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 288.386586][ T8486] netdevsim netdevsim7 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 288.631329][T19978] delete_channel: no stack [ 288.764908][T19990] netlink: 'syz.7.5536': attribute type 1 has an invalid length. [ 288.826436][T19990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.888856][T19990] bond1: (slave geneve2): making interface the new active one [ 288.898244][T19990] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 288.962468][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5542'. [ 288.972402][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5542'. [ 288.981827][T20004] netlink: 4676 bytes leftover after parsing attributes in process `syz.7.5542'. [ 289.045420][T20011] 9p: Unknown uid 00000000004294967295 [ 289.111782][T20019] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 289.128085][T20019] bond2: (slave lo): Enslaving as an active interface with an up link [ 289.138422][T20019] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 290.247293][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 290.247338][ T4596] Bluetooth: hci0: command 0x1003 tx timeout [ 290.439633][T20117] loop2: detected capacity change from 0 to 512 [ 290.446901][T20117] EXT4-fs: Ignoring removed nobh option [ 290.460466][T20117] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 290.490257][T20117] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.5589: attempt to clear invalid blocks 1 len 1 [ 290.503215][T20117] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.503377][T20117] EXT4-fs (loop2): Remounting filesystem read-only [ 290.512731][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 290.512753][ C1] EXT4-fs (loop2): initial error at time 1774986883: ext4_clear_blocks:876: inode 13 [ 290.512790][ C1] EXT4-fs (loop2): last error at time 1774986883: ext4_clear_blocks:876: inode 13 [ 290.545070][T20117] EXT4-fs (loop2): 1 truncate cleaned up [ 290.551239][T20117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.569631][T20117] EXT4-fs (loop2): shut down requested (0) [ 290.592449][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.784655][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5593'. [ 290.802242][T14280] IPVS: starting estimator thread 0... [ 290.907245][T20131] IPVS: using max 2640 ests per chain, 132000 per kthread [ 292.136175][T20189] xt_hashlimit: size too large, truncated to 1048576 [ 292.173166][T20195] loop2: detected capacity change from 0 to 128 [ 292.200482][T20195] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 292.231475][T10563] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 292.247446][T10563] FAT-fs (loop2): Filesystem has been set read-only [ 292.268946][T10563] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 292.394070][T20204] loop2: detected capacity change from 0 to 128 [ 292.498504][T20211] __nla_validate_parse: 5 callbacks suppressed [ 292.498524][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5629'. [ 292.732285][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 292.732304][ T28] audit: type=1326 audit(1774986885.454:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.1.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 292.794036][ T28] audit: type=1326 audit(1774986885.454:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.1.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 292.841540][ T28] audit: type=1326 audit(1774986885.454:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.1.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 292.866446][ T28] audit: type=1326 audit(1774986885.454:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.1.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 292.893983][T20239] loop7: detected capacity change from 0 to 128 [ 292.897128][ T28] audit: type=1326 audit(1774986885.454:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.1.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 292.926099][ T28] audit: type=1326 audit(1774986885.454:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.1.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 293.023042][ T28] audit: type=1326 audit(1774986885.504:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.1.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 293.096016][ T28] audit: type=1326 audit(1774986885.514:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.1.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d228dd04e code=0x7ffc0000 [ 293.123471][ T28] audit: type=1326 audit(1774986885.514:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.1.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d228dd04e code=0x7ffc0000 [ 293.147738][ T28] audit: type=1326 audit(1774986885.514:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20223 comm="syz.1.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d228dd04e code=0x7ffc0000 [ 293.965425][T20270] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 294.925613][T20312] netlink: 'syz.2.5671': attribute type 10 has an invalid length. [ 295.092443][T19283] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 295.120863][T20330] loop0: detected capacity change from 0 to 128 [ 296.173461][T20382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20382 comm=syz.2.5697 [ 296.495013][T20385] loop2: detected capacity change from 0 to 128 [ 297.091778][T20408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.227120][T20415] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20415 comm=syz.7.5708 [ 297.280888][T20418] sctp: [Deprecated]: syz.2.5711 (pid 20418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.280888][T20418] Use struct sctp_sack_info instead [ 297.340063][T20424] loop7: detected capacity change from 0 to 128 [ 297.821127][T20449] tipc: Enabled bearer , priority 10 [ 299.750251][T20514] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5745'. [ 299.774387][ T28] kauditd_printk_skb: 825 callbacks suppressed [ 299.774404][ T28] audit: type=1400 audit(1774986892.494:4890): avc: denied { read } for pid=20515 comm="syz.1.5747" lport=39417 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 299.851472][ T28] audit: type=1326 audit(1774986892.574:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.0.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 299.884432][T20521] loop0: detected capacity change from 0 to 1024 [ 299.891562][ T28] audit: type=1326 audit(1774986892.574:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.0.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 299.918085][T20521] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 299.918085][T20521] [ 299.935542][ T28] audit: type=1326 audit(1774986892.574:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.0.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 299.980514][ T28] audit: type=1326 audit(1774986892.574:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.0.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d49fbc582 code=0x7ffc0000 [ 300.018004][ T28] audit: type=1326 audit(1774986892.594:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.0.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8d49f7d04e code=0x7ffc0000 [ 300.073771][ T28] audit: type=1326 audit(1774986892.594:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.0.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8d49fbc647 code=0x7ffc0000 [ 300.099069][ T28] audit: type=1326 audit(1774986892.604:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.0.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d49f7d04e code=0x7ffc0000 [ 300.128104][ T28] audit: type=1326 audit(1774986892.604:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.0.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d49fbc4ab code=0x7ffc0000 [ 300.133705][T20542] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5759'. [ 300.152201][ T28] audit: type=1326 audit(1774986892.634:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.0.5749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8d49f7d04e code=0x7ffc0000 [ 300.231309][T20545] loop2: detected capacity change from 0 to 256 [ 300.268403][T20545] FAT-fs (loop2): bogus number of FAT sectors [ 300.278983][T20545] FAT-fs (loop2): Can't find a valid FAT filesystem [ 300.815095][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5777'. [ 300.843748][T20566] netlink: 'syz.7.5777': attribute type 30 has an invalid length. [ 300.867682][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5777'. [ 300.876765][T20575] netlink: 'syz.7.5777': attribute type 30 has an invalid length. [ 301.109227][T20589] tipc: Started in network mode [ 301.124346][T20589] tipc: Node identity ac1414aa, cluster identity 4711 [ 301.132061][T20582] netlink: 'syz.7.5774': attribute type 4 has an invalid length. [ 301.140041][T20589] tipc: Enabling of bearer rejected, failed to enable media [ 301.248065][T20602] loop7: detected capacity change from 0 to 512 [ 301.255234][T20602] EXT4-fs: Ignoring removed bh option [ 301.276508][T20602] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 301.362474][T20602] EXT4-fs (loop7): 1 truncate cleaned up [ 301.376801][T20602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.437680][T18903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.492188][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5786'. [ 301.501378][T20613] netlink: 'syz.0.5786': attribute type 30 has an invalid length. [ 301.512791][T19282] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.518397][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5786'. [ 301.521361][T19282] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.530149][T20613] netlink: 'syz.0.5786': attribute type 30 has an invalid length. [ 301.540747][T19282] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.554390][T19282] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.319418][T20658] netlink: 'syz.4.5805': attribute type 10 has an invalid length. [ 302.389503][T20660] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 302.697577][T20684] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5818'. [ 302.760435][T20692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5821'. [ 302.803996][T20702] bridge_slave_0: left allmulticast mode [ 302.810070][T20702] bridge_slave_0: left promiscuous mode [ 302.815947][T20702] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.825372][T20702] bridge_slave_1: left allmulticast mode [ 302.831386][T20702] bridge_slave_1: left promiscuous mode [ 302.838119][T20702] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.878846][T20702] team0: Port device team_slave_0 removed [ 302.894535][T20702] team0: Port device team_slave_1 removed [ 302.911855][T20702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.919927][T20702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.927794][T20702] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 302.946940][T20711] ip6gre1: entered promiscuous mode [ 302.952958][T20711] ip6gre1: entered allmulticast mode [ 302.960998][ T8486] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.971038][T20711] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.980209][ T8486] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.987878][ T3403] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.387696][ T3403] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.781738][T20740] netlink: 'syz.7.5838': attribute type 7 has an invalid length. [ 303.790302][T20740] netlink: 'syz.7.5838': attribute type 7 has an invalid length. [ 303.820382][T20742] netlink: 'syz.1.5841': attribute type 12 has an invalid length. [ 303.847486][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5841'. [ 303.856521][T20742] netlink: 'syz.1.5841': attribute type 12 has an invalid length. [ 303.890726][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5841'. [ 303.917325][ T3403] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.964846][T20749] 9p: Bad value for 'rfdno' [ 304.077233][T20757] syz_tun: entered promiscuous mode [ 304.088161][T19282] bond0: (slave syz_tun): interface is now down [ 304.095398][T20757] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 304.141341][T10567] bond0: (slave syz_tun): interface is now down [ 304.156555][T10567] bond0: now running without any active interface! [ 305.446719][T20803] SELinux: failed to load policy [ 305.490909][T20807] loop0: detected capacity change from 0 to 2048 [ 305.573529][T20807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.621359][T11272] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.715392][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 305.715410][ T28] audit: type=1326 audit(1774986898.434:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 305.747620][T20831] __nla_validate_parse: 1 callbacks suppressed [ 305.747638][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5883'. [ 305.772239][T20833] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.797521][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5883'. [ 305.813056][T20833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.815901][ T28] audit: type=1326 audit(1774986898.434:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 305.820560][T20833] IPv6: NLM_F_CREATE should be set when creating new route [ 305.820585][T20833] IPv6: NLM_F_CREATE should be set when creating new route [ 305.859000][T20833] IPv6: NLM_F_CREATE should be set when creating new route [ 305.870251][ T28] audit: type=1326 audit(1774986898.434:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 305.905199][ T28] audit: type=1326 audit(1774986898.434:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 305.929593][ T28] audit: type=1326 audit(1774986898.434:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 305.957526][ T28] audit: type=1326 audit(1774986898.434:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 305.981496][ T28] audit: type=1326 audit(1774986898.434:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 306.006530][ T28] audit: type=1326 audit(1774986898.434:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 306.030803][ T28] audit: type=1326 audit(1774986898.434:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 306.054841][ T28] audit: type=1326 audit(1774986898.434:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20826 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2291c819 code=0x7ffc0000 [ 306.218989][T20860] validate_nla: 8 callbacks suppressed [ 306.219007][T20860] netlink: 'syz.2.5894': attribute type 1 has an invalid length. [ 306.242826][T20860] 8021q: adding VLAN 0 to HW filter on device bond4 [ 306.325427][T20871] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.351679][T20871] bond5: (slave lo): Enslaving as an active interface with an up link [ 306.368319][T20871] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 307.357289][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 307.852106][T20966] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5934'. [ 307.921139][T20977] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.5939'. [ 307.935301][T20980] loop2: detected capacity change from 0 to 1024 [ 307.944590][T20982] 9p: Unknown uid 00000000004294967295 [ 307.973264][T20980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.071725][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.188965][T21018] loop7: detected capacity change from 0 to 512 [ 308.254138][T21018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.275278][T21018] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.327399][T21018] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.5955: Failed to acquire dquot type 1 [ 308.341586][T21018] EXT4-fs (loop7): Remounting filesystem read-only [ 308.403656][T18903] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.048635][T21083] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 309.127134][T21094] netlink: 'syz.4.5989': attribute type 9 has an invalid length. [ 309.151924][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5989'. [ 309.171997][T21094] netlink: 'syz.4.5989': attribute type 9 has an invalid length. [ 309.180828][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5989'. [ 309.582593][T21133] netlink: 'syz.1.6007': attribute type 1 has an invalid length. [ 309.730182][T21153] loop2: detected capacity change from 0 to 256 [ 309.745374][T21153] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 309.925537][T19283] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 309.962841][T19283] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 309.993992][T19283] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.102549][T19283] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 310.116921][T19283] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 310.137283][T19283] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.210965][T19283] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 310.235776][T19283] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 310.254797][T19283] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.322185][T19283] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 310.334246][T19283] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 310.360685][T19283] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.564361][T21182] chnl_net:caif_netlink_parms(): no params data found [ 310.602457][T19283] bridge_slave_1: left allmulticast mode [ 310.615660][T19283] bridge_slave_1: left promiscuous mode [ 310.632020][T19283] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.659749][T19283] bridge_slave_0: left allmulticast mode [ 310.678482][T19283] bridge_slave_0: left promiscuous mode [ 310.698222][T19283] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.875222][T19283] bond1 (unregistering): (slave geneve2): Releasing active interface [ 311.390756][T19283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.439033][T19283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.451167][T19283] bond0 (unregistering): Released all slaves [ 311.462608][T19283] bond1 (unregistering): Released all slaves [ 311.487418][T19283] bond2 (unregistering): (slave lo): Releasing backup interface [ 311.495873][T19283] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 311.508747][T19283] bond2 (unregistering): Released all slaves [ 311.523825][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 311.523891][ T28] audit: type=1400 audit(1774986904.244:4977): avc: denied { unmount } for pid=9243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 311.609840][T19283] hsr_slave_0: left promiscuous mode [ 311.635767][T19283] hsr_slave_1: left promiscuous mode [ 311.641986][T19283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.664983][T19283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.689629][T19283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.703010][T19283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.734531][T19283] veth1_macvtap: left promiscuous mode [ 311.752120][T19283] veth0_macvtap: left promiscuous mode [ 311.770570][T19283] veth1_vlan: left promiscuous mode [ 311.775892][T19283] veth0_vlan: left promiscuous mode [ 311.878837][T21277] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6053'. [ 311.930419][T21281] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6053'. [ 311.969733][T19283] team0 (unregistering): Port device team_slave_1 removed [ 311.982816][T19283] team0 (unregistering): Port device team_slave_0 removed [ 312.026765][T21277] bridge0: left allmulticast mode [ 312.065628][T21182] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.072814][T21182] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.080614][T21182] bridge_slave_0: entered allmulticast mode [ 312.087120][T21182] bridge_slave_0: entered promiscuous mode [ 312.094026][T21182] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.101410][T21182] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.108777][T21182] bridge_slave_1: entered allmulticast mode [ 312.115642][T21182] bridge_slave_1: entered promiscuous mode [ 312.126648][ T28] audit: type=1326 audit(1774986904.844:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 312.133734][T21182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.167487][T21182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.189273][T21182] team0: Port device team_slave_0 added [ 312.196213][T21182] team0: Port device team_slave_1 added [ 312.232166][ T28] audit: type=1326 audit(1774986904.844:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 312.271174][T21182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.278712][T21182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.307222][ T28] audit: type=1326 audit(1774986904.844:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 312.331422][T21182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.335631][T21289] netlink: 'syz.4.6056': attribute type 10 has an invalid length. [ 312.342904][ T28] audit: type=1326 audit(1774986904.844:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 312.350408][T21289] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6056'. [ 312.382718][T21182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.382736][T21182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.390683][T21289] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 312.415872][ T28] audit: type=1326 audit(1774986904.844:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 312.448743][T21182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.461525][ T28] audit: type=1326 audit(1774986904.844:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 312.487505][ T28] audit: type=1326 audit(1774986904.844:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 312.529994][ T28] audit: type=1326 audit(1774986904.844:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 312.575087][ T28] audit: type=1326 audit(1774986904.844:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d49fbc819 code=0x7ffc0000 [ 312.597830][T21182] hsr_slave_0: entered promiscuous mode [ 312.605139][T21182] hsr_slave_1: entered promiscuous mode [ 312.623988][T21182] debugfs: 'hsr0' already exists in 'hsr' [ 312.645232][T21182] Cannot create hsr debugfs directory [ 312.965798][T21182] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 313.058037][T21182] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 313.071880][T21182] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 313.081620][T21182] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 313.148354][T21182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.163685][T21182] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.173465][T10563] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.180601][T10563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.196928][T10563] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.204117][T10563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.330653][T21182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.504426][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6081'. [ 313.551556][T21182] veth0_vlan: entered promiscuous mode [ 313.570789][T21182] veth1_vlan: entered promiscuous mode [ 313.578794][T21422] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 313.601765][T21182] veth0_macvtap: entered promiscuous mode [ 313.630413][T21182] veth1_macvtap: entered promiscuous mode [ 313.644667][T21182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.663614][T21182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.675619][T19277] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.695449][T19277] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.715280][T19277] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.737556][T19277] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.757219][ T3623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 313.757344][ T4596] Bluetooth: hci0: command 0x1003 tx timeout [ 314.247120][T21452] futex_wake_op: syz.0.6089 tries to shift op by 32; fix this program [ 314.267256][T21476] loop9: detected capacity change from 0 to 512 [ 314.297994][T21476] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.320320][T21476] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.954736][T19282] tipc: Subscription rejected, illegal request [ 315.215015][T21575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6113'. [ 315.526018][T21182] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.567300][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.725010][T21732] loop9: detected capacity change from 0 to 2048 [ 316.761194][T21731] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 316.790345][T21732] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.899907][T21182] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.011352][T21752] tipc: Enabling of bearer rejected, failed to enable media [ 317.184009][T21761] loop2: detected capacity change from 0 to 512 [ 317.203034][T21761] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 317.219994][T21761] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 317.229381][T21761] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 317.238747][T21761] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 317.246848][T21761] System zones: 0-2, 18-18, 34-34 [ 317.252698][T21761] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.6164: bad orphan inode 15 [ 317.263420][T21761] loop2: lost filesystem error report for type 5 error -117 [ 317.263613][T21761] ext4_test_bit(bit=14, block=18) = 1 [ 317.271064][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 317.271083][ C1] EXT4-fs (loop2): initial error at time 1774986909: ext4_orphan_get:1423 [ 317.271115][ C1] EXT4-fs (loop2): last error at time 1774986909: ext4_orphan_get:1423 [ 317.300178][T21761] is_bad_inode(inode)=0 [ 317.304455][T21761] NEXT_ORPHAN(inode)=2264924160 [ 317.309609][T21761] max_ino=32 [ 317.312971][T21761] i_nlink=0 [ 317.316468][T21761] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.6164: corrupted inode contents [ 317.331278][T21761] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 317.331489][T21761] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #15: comm syz.2.6164: mark_inode_dirty error [ 317.352512][T21761] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 317.352714][T21761] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.6164: corrupted inode contents [ 317.374400][T21761] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 317.374671][T21761] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.6164: mark_inode_dirty error [ 317.396204][T21761] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 317.397498][T21761] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.6164: mark inode dirty (error -117) [ 317.419415][T21761] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 317.419581][T21761] EXT4-fs warning (device loop2): ext4_evict_inode:285: xattr delete (err -117) [ 317.442107][T21761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.480507][T21761] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6164: bg 0: block 80: padding at end of block bitmap is not set [ 317.533538][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.099818][T21798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6177'. [ 318.387789][T21802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.397592][T21802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.415038][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6186'. [ 319.515953][T21856] loop9: detected capacity change from 0 to 128 [ 319.555854][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 319.555950][ T28] audit: type=1400 audit(1774986912.274:5048): avc: denied { watch watch_reads } for pid=21855 comm="syz.9.6202" path="/19/file0/file1" dev="loop9" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 320.695110][T21910] loop9: detected capacity change from 0 to 2048 [ 320.785944][T21917] netlink: 'syz.0.6226': attribute type 12 has an invalid length. [ 320.818011][T21917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6226'. [ 320.897441][T21917] netlink: 'syz.0.6226': attribute type 12 has an invalid length. [ 320.897709][T21910] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.947234][T21917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6226'. [ 321.045734][T21182] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.138742][T21953] loop2: detected capacity change from 0 to 2048 [ 322.177864][T21953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.254777][T21953] ext4 filesystem being mounted at /826/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.474699][T21977] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.6241: invalid fast symlink length 39 [ 322.563813][T21977] EXT4-fs (loop2): Remounting filesystem read-only [ 322.682548][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.419669][T21996] bridge_slave_0: left allmulticast mode [ 323.441004][T21996] bridge_slave_0: left promiscuous mode [ 323.457514][T21996] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.780462][T21996] bridge_slave_1: left allmulticast mode [ 323.786151][T21996] bridge_slave_1: left promiscuous mode [ 323.801265][T21996] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.908026][T21996] bond0: (slave bond_slave_0): Releasing backup interface [ 323.923655][T21996] bond0: (slave bond_slave_1): Releasing backup interface [ 323.936578][T21996] team0: Port device team_slave_0 removed [ 323.946510][T21996] team0: Port device team_slave_1 removed [ 323.953945][T21996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.963465][T21996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.972777][T21996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.973672][T22015] netlink: 'syz.4.6261': attribute type 21 has an invalid length. [ 323.980772][T21996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.999117][T21996] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 324.059913][T22015] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.087906][T22015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.095426][T22015] IPv6: NLM_F_CREATE should be set when creating new route [ 324.102693][T22015] IPv6: NLM_F_CREATE should be set when creating new route [ 324.109917][T22015] IPv6: NLM_F_CREATE should be set when creating new route [ 324.336538][T22035] loop2: detected capacity change from 0 to 512 [ 324.344319][T22035] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 324.366974][T22035] EXT4-fs (loop2): 1 truncate cleaned up [ 324.374303][T22035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.442284][ T9243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.058174][T22051] bond1: (slave geneve2): Releasing active interface [ 325.066299][T22055] loop9: detected capacity change from 0 to 128 [ 325.078053][T22055] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 325.092286][T22051] bond2: (slave bridge1): Releasing backup interface [ 325.105012][T22051] bridge1: left promiscuous mode [ 325.110657][T22055] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 325.140991][T22055] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 325.159000][T22055] FAT-fs (loop9): Filesystem has been set read-only [ 325.279576][T22067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6281'. [ 325.311889][T22067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22067 comm=syz.1.6281 [ 325.345596][T22067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6281'. [ 325.484027][T22076] loop9: detected capacity change from 0 to 1024 [ 325.522115][T22076] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.607076][T21182] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.532751][T22239] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6339'. [ 328.569608][T22239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22239 comm=syz.0.6339 [ 328.602320][T22239] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6339'. [ 329.376047][T22285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6349'. [ 329.576007][T22292] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 329.987308][ T28] audit: type=1400 audit(1774986922.704:5049): avc: denied { unmount } for pid=22318 comm="syz.1.6363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 330.030047][ T28] audit: type=1400 audit(1774986922.704:5050): avc: denied { mounton } for pid=22318 comm="syz.1.6363" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.264818][T22327] loop9: detected capacity change from 0 to 512 [ 330.287928][T22327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 330.334260][T22316] syz.4.6362 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 330.347104][T22327] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.6365: iget: bad i_size value: 38620345925642 [ 330.369895][T22327] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 330.370978][T22327] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.6365: couldn't read orphan inode 15 (err -117) [ 330.380305][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 330.380331][ C0] EXT4-fs (loop9): initial error at time 1774986923: ext4_orphan_get:1397: inode 15 [ 330.380363][ C0] EXT4-fs (loop9): last error at time 1774986923: ext4_orphan_get:1397: inode 15 [ 330.473212][T22316] CPU: 0 UID: 0 PID: 22316 Comm: syz.4.6362 Not tainted syzkaller #0 PREEMPT(full) [ 330.473267][T22316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.473278][T22316] Call Trace: [ 330.473285][T22316] [ 330.473293][T22316] __dump_stack+0x1d/0x30 [ 330.473321][T22316] dump_stack_lvl+0x95/0xd0 [ 330.473346][T22316] dump_stack+0x15/0x1b [ 330.473370][T22316] dump_header+0x80/0x240 [ 330.473500][T22316] oom_kill_process+0x295/0x350 [ 330.473525][T22316] out_of_memory+0x97d/0xb80 [ 330.473551][T22316] try_charge_memcg+0x62e/0xa10 [ 330.473591][T22316] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 330.473685][T22316] __swap_cache_prepare_and_add+0x67/0x460 [ 330.473715][T22316] ? alloc_pages_mpol+0x217/0x260 [ 330.473743][T22316] swap_cache_alloc_folio+0xa2/0x120 [ 330.473810][T22316] swap_cluster_readahead+0x26e/0x3d0 [ 330.473850][T22316] swapin_readahead+0xde/0x840 [ 330.473890][T22316] ? __rcu_read_unlock+0x4e/0x70 [ 330.473912][T22316] ? __perf_event_task_sched_in+0xa65/0xad0 [ 330.473940][T22316] ? __list_add_valid_or_report+0x38/0xe0 [ 330.473978][T22316] ? __rcu_read_unlock+0x4e/0x70 [ 330.474001][T22316] ? swap_cache_get_folio+0x26f/0x280 [ 330.474030][T22316] do_swap_page+0x2fe/0x21e0 [ 330.474058][T22316] ? __schedule+0x93c/0xd40 [ 330.474110][T22316] ? __rcu_read_lock+0x36/0x50 [ 330.474132][T22316] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 330.474165][T22316] handle_mm_fault+0xb46/0x3020 [ 330.474321][T22316] ? vma_start_read+0x1c7/0x2c0 [ 330.474357][T22316] do_user_addr_fault+0x62f/0x1050 [ 330.474392][T22316] ? trace_page_fault_user+0x1f/0xe0 [ 330.474421][T22316] exc_page_fault+0x62/0xa0 [ 330.474441][T22316] asm_exc_page_fault+0x26/0x30 [ 330.474468][T22316] RIP: 0033:0x7fea61977978 [ 330.474486][T22316] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 330.474506][T22316] RSP: 002b:00007ffe6ee58210 EFLAGS: 00010246 [ 330.474622][T22316] RAX: 0000000000000000 RBX: 000055557a070500 RCX: 00007fea6197d04e [ 330.474636][T22316] RDX: 00007ffe6ee58260 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.474649][T22316] RBP: 00007fea61c37da0 R08: 0000000000000000 R09: 0000000000000000 [ 330.474662][T22316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000050c1a [ 330.474678][T22316] R13: 00007fea61c35fac R14: 000000000005091b R15: 00007ffe6ee58390 [ 330.474701][T22316] [ 330.474755][T22316] memory: usage 136252kB, limit 307200kB, failcnt 703 [ 330.507372][T22327] loop9: lost filesystem error report for type 5 error -117 [ 330.641852][T22316] memory+swap: usage 105312kB, limit 9007199254740988kB, failcnt 0 [ 330.665867][T22327] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.777271][T22316] kmem: usage 101516kB, limit 9007199254740988kB, failcnt 0 [ 330.784870][T22316] Memory cgroup stats for /syz4: [ 330.785033][T22316] cache 0 [ 330.819047][T22327] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.6365: bg 0: block 5: invalid block bitmap [ 330.831823][T22316] rss 0 [ 330.834603][T22316] shmem 0 [ 330.846279][T22316] mapped_file 0 [ 330.850262][T22327] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 330.863270][T22316] dirty 0 [ 330.866224][T22316] writeback 4096 [ 330.869895][T22327] EXT4-fs (loop9): This should not happen!! Data will be lost [ 330.869895][T22327] [ 330.870159][T22316] workingset_refault_anon 70 [ 330.879954][T22327] EXT4-fs (loop9): Total free blocks count 0 [ 330.893673][T22316] workingset_refault_file 148 [ 330.906990][T22327] EXT4-fs (loop9): Free/Dirty block details [ 330.908006][T22316] swap 798720 [ 330.925618][T22316] swapcached 17997824 [ 330.939548][T22316] pgpgin 333462 [ 330.943567][T22327] EXT4-fs (loop9): free_blocks=0 [ 330.951574][T22316] pgpgout 333461 [ 330.962310][T22327] EXT4-fs (loop9): dirty_blocks=1 [ 330.965261][T22316] pgfault 292978 [ 330.982473][T22327] EXT4-fs (loop9): Block reservation details [ 330.982842][T22316] pgmajfault 56 [ 330.992428][T22316] inactive_anon 4096 [ 331.006085][T22316] active_anon 0 [ 331.009799][T22327] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 331.016218][T22316] inactive_file 0 [ 331.022019][T22316] active_file 0 [ 331.025571][T22316] unevictable 0 [ 331.045222][T22316] hierarchical_memory_limit 314572800 [ 331.066088][T22316] hierarchical_memsw_limit 9223372036854771712 [ 331.086737][T22316] total_cache 0 [ 331.094617][T21182] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 331.106173][T22316] total_rss 0 [ 331.108061][T21182] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.109952][T22316] total_shmem 0 [ 331.122430][T22316] total_mapped_file 0 [ 331.126560][T22316] total_dirty 0 [ 331.130257][T22316] total_writeback 4096 [ 331.134491][T22316] total_workingset_refault_anon 70 [ 331.140114][T22316] total_workingset_refault_file 148 [ 331.145748][T22316] total_swap 798720 [ 331.155203][T22316] total_swapcached 17997824 [ 331.215472][T22316] total_pgpgin 333462 [ 331.257425][T22316] total_pgpgout 333461 [ 331.280505][T22316] total_pgfault 292978 [ 331.298330][T22316] total_pgmajfault 56 [ 331.313018][T22316] total_inactive_anon 4096 [ 331.332731][T22316] total_active_anon 0 [ 331.345454][T22316] total_inactive_file 0 [ 331.366430][T22316] total_active_file 0 [ 331.385934][T22316] total_unevictable 0 [ 331.399869][T22316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6362,pid=22316,uid=0 [ 331.421389][T22316] Memory cgroup out of memory: Killed process 22316 (syz.4.6362) total-vm:96080kB, anon-rss:1228kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 331.687327][T22441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6387'. [ 331.735462][T22441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6387'. [ 332.341485][T22458] cgroup: noprefix used incorrectly [ 332.504691][T22462] netlink: 'syz.9.6397': attribute type 10 has an invalid length. [ 332.512731][T22462] netlink: 84 bytes leftover after parsing attributes in process `syz.9.6397'. [ 332.522007][T22462] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 332.826449][T22494] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6404'. [ 332.849655][T22494] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6404'. [ 334.061144][T22545] netlink: 'syz.0.6433': attribute type 4 has an invalid length. [ 334.225992][T22552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6436'. [ 334.235320][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6436'. [ 334.244610][T22552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6436'. [ 334.253888][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6436'. [ 334.477568][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.485640][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 335.109862][T22592] xt_hashlimit: size too large, truncated to 1048576 [ 335.150832][T22581] loop2: detected capacity change from 0 to 256 [ 335.245691][T22581] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.596651][ T56] tipc: Subscription rejected, illegal request [ 335.635901][ T28] audit: type=1326 audit(1774986928.354:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.2.6471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0cf7c819 code=0x7ffc0000 [ 335.689115][ T28] audit: type=1326 audit(1774986928.394:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.2.6471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ffa0cf7c819 code=0x7ffc0000 [ 335.713357][ T28] audit: type=1326 audit(1774986928.394:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.2.6471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0cf7c819 code=0x7ffc0000 [ 335.740184][ T28] audit: type=1326 audit(1774986928.394:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.2.6471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0cf7c819 code=0x7ffc0000 [ 335.765455][ T28] audit: type=1326 audit(1774986928.394:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.2.6471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ffa0cf7c819 code=0x7ffc0000 [ 335.789492][ T28] audit: type=1326 audit(1774986928.394:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.2.6471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0cf7c819 code=0x7ffc0000 [ 335.813720][ T28] audit: type=1326 audit(1774986928.394:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22609 comm="syz.2.6471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0cf7c819 code=0x7ffc0000 [ 335.890963][T22623] bridge0: entered allmulticast mode [ 335.901544][T22625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6467'. [ 336.037441][T22629] futex_wake_op: syz.1.6465 tries to shift op by 32; fix this program [ 336.398477][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 336.764125][T22654] xt_hashlimit: size too large, truncated to 1048576 [ 336.807415][T22659] __nla_validate_parse: 2 callbacks suppressed [ 336.807434][T22659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6480'. [ 336.897319][T22659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6480'. [ 337.370731][T22692] ================================================================== [ 337.379101][T22692] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 337.387820][T22692] [ 337.390200][T22692] write to 0xffff88810d3c9768 of 8 bytes by task 22693 on cpu 1: [ 337.397934][T22692] shmem_file_splice_read+0x470/0x600 [ 337.403787][T22692] splice_direct_to_actor+0x26e/0x670 [ 337.409270][T22692] do_splice_direct+0x119/0x1a0 [ 337.414131][T22692] do_sendfile+0x382/0x650 [ 337.418590][T22692] __x64_sys_sendfile64+0x105/0x150 [ 337.423983][T22692] x64_sys_call+0x2dc4/0x3020 [ 337.428711][T22692] do_syscall_64+0x12c/0x370 [ 337.433336][T22692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.439424][T22692] [ 337.441850][T22692] write to 0xffff88810d3c9768 of 8 bytes by task 22692 on cpu 0: [ 337.449772][T22692] shmem_file_splice_read+0x470/0x600 [ 337.455221][T22692] splice_direct_to_actor+0x26e/0x670 [ 337.460623][T22692] do_splice_direct+0x119/0x1a0 [ 337.465497][T22692] do_sendfile+0x382/0x650 [ 337.469939][T22692] __x64_sys_sendfile64+0x105/0x150 [ 337.475250][T22692] x64_sys_call+0x2dc4/0x3020 [ 337.479964][T22692] do_syscall_64+0x12c/0x370 [ 337.484663][T22692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.490571][T22692] [ 337.492911][T22692] value changed: 0x000000000000188b -> 0x000000000000188d [ 337.500021][T22692] [ 337.502348][T22692] Reported by Kernel Concurrency Sanitizer on: [ 337.508511][T22692] CPU: 0 UID: 0 PID: 22692 Comm: syz.0.6492 Not tainted syzkaller #0 PREEMPT(full) [ 337.517899][T22692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.527956][T22692] ==================================================================