last executing test programs: 10m24.2029503s ago: executing program 32 (id=3515): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 8m57.817039747s ago: executing program 33 (id=6529): unshare(0x24060400) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x80000000, 0x3) 8m29.196472692s ago: executing program 34 (id=7338): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe00000100000002"], 0x28}}, 0x0) 7m59.746181269s ago: executing program 35 (id=8032): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) fgetxattr(r0, &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0) 7m44.146997951s ago: executing program 36 (id=8537): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1220000, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0, 0x2c5, &(0x7f0000000600)="$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") io_setup(0x1, &(0x7f0000000140)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x183281, 0x4) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x20000108}]) 7m11.446610946s ago: executing program 37 (id=9199): syz_usb_disconnect(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@debug}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 7m10.792776233s ago: executing program 38 (id=9210): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x100000, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x2}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}}}]}, 0x1a0}}, 0x0) 7m10.765779924s ago: executing program 39 (id=9214): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fcntl$lock(r1, 0x7, 0x0) 5m24.46724684s ago: executing program 40 (id=11536): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0x6}, {0x12, 0xd}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "675430b21e10068a34f416d5f8e29549"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x20004000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x29, 0xcf, 0x0, &(0x7f0000000040)) 4m46.920324246s ago: executing program 41 (id=12137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000180)={@empty, @local, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x63, 0x57, 0xa, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x4e20, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x2, 0x100}}}}}}}, 0x0) 4m25.940631564s ago: executing program 42 (id=12880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) 4m11.398349477s ago: executing program 43 (id=13328): syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) statfs(&(0x7f0000000040)='./file2\x00', 0x0) 1m38.750428858s ago: executing program 44 (id=17106): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8949, &(0x7f0000000000)={'bond0\x00', @ifru_names='erspan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4bfb, &(0x7f0000000000)) 1m32.152201037s ago: executing program 45 (id=16947): prlimit64(0x0, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e"], 0x50) 1m10.97161997s ago: executing program 46 (id=17601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2, r0}, 0xc) 54.32880585s ago: executing program 47 (id=17967): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) 32.982162597s ago: executing program 1 (id=18508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r1, &(0x7f0000000340)}, 0x20) 32.88470042s ago: executing program 1 (id=18511): unshare(0x6020400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 32.762672603s ago: executing program 1 (id=18515): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 32.340049395s ago: executing program 1 (id=18527): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 32.339687565s ago: executing program 1 (id=18528): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e1bd33ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2f1, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x4a8e) 32.276966266s ago: executing program 1 (id=18530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) 32.232308108s ago: executing program 48 (id=18530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) 28.481159649s ago: executing program 5 (id=18599): r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) unshare(0x400) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 28.43298475s ago: executing program 5 (id=18601): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0xff, 0x7c}, 0x2c) 28.300059474s ago: executing program 5 (id=18606): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/117, 0x75}], 0x1}, 0x3ff}], 0x1, 0x406, 0x0) 28.145696668s ago: executing program 5 (id=18609): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x24000894) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) file_getattr(r0, 0x0, &(0x7f0000000040), 0x64, 0x1000) 27.72994418s ago: executing program 5 (id=18612): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000280)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r2, 0x1}, 0x8) 27.281220682s ago: executing program 5 (id=18623): timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 27.281086572s ago: executing program 49 (id=18623): timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 16.054126985s ago: executing program 7 (id=18886): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.831897531s ago: executing program 7 (id=18898): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x58, 0x8000, 0x7, 0x4, {{0xf, 0x4, 0x0, 0x2, 0x3c, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@rr={0x7, 0x1f, 0x57, [@multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, @loopback]}, @generic={0x82, 0x8, "7eb6474ca596"}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 15.811871822s ago: executing program 7 (id=18899): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0xe, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000180), 0xf}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) waitid(0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x4, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x5ee) close(0x3) 14.852025448s ago: executing program 3 (id=18928): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 14.815879789s ago: executing program 3 (id=18930): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r0, 0x24}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 14.659263183s ago: executing program 7 (id=18938): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000500), 0xfc, 0x57c, &(0x7f0000000680)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x8005, 0x0, 0x0, 0x1e, 0x0, "ef35bf413db93852f7bda4ae6dddfbd1ce5d29c2eeee09e737e60edf110f5bcb7639c2eb4b78c6df701905b9aafab4af000055a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0xa, 0x1]}) 14.531015747s ago: executing program 3 (id=18943): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x40000008, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x900, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000018}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 14.492220707s ago: executing program 0 (id=18944): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.491827148s ago: executing program 0 (id=18945): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.417320999s ago: executing program 0 (id=18946): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b700000040000000bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a002500000041806aa13e410000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf8707f0d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e9978931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5fea5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87dd4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075fdd88d22230592a790000000000000000000000003527dfd01b47000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7c54d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df96d49f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696ebc2ab3f4b642f36c9006c0067e24a64aa8c53df824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600"/2767], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8000000}, 0x48) 14.41501224s ago: executing program 7 (id=18948): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x300}}) 14.40135167s ago: executing program 3 (id=18949): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000240)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv1}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0xb3) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 13.910598893s ago: executing program 3 (id=18954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcbf2d02ce960ba19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 13.594418452s ago: executing program 7 (id=18963): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) syz_clone(0xa20cd680, 0x0, 0x0, 0x0, 0x0, 0x0) 13.579597452s ago: executing program 50 (id=18963): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) syz_clone(0xa20cd680, 0x0, 0x0, 0x0, 0x0, 0x0) 13.560851943s ago: executing program 0 (id=18965): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}}, 0x20}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 13.560608883s ago: executing program 0 (id=18966): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) 13.364631488s ago: executing program 3 (id=18967): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf}, 0x20) 13.364541118s ago: executing program 51 (id=18967): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf}, 0x20) 13.323235939s ago: executing program 0 (id=18969): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000100)=""/162, 0xa2) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x54, 0x100, 0x0, 0x0) 13.29674337s ago: executing program 52 (id=18969): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000100)=""/162, 0xa2) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x54, 0x100, 0x0, 0x0) 2.657240478s ago: executing program 9 (id=19114): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}, {0x20, 0x3}}, 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.333515657s ago: executing program 9 (id=19118): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0118020003110000280012800b00010065727370616e"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x20004000) 2.19990133s ago: executing program 8 (id=19121): openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0}]) 2.173075571s ago: executing program 6 (id=19123): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000640)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0xffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) 2.080252754s ago: executing program 6 (id=19124): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) get_mempolicy(0x0, 0x0, 0x1, &(0x7f000051f000/0x2000)=nil, 0x2) 1.950554637s ago: executing program 9 (id=19128): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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") 1.778146412s ago: executing program 8 (id=19129): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000040)="d84f7390", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x10002, 0x0, 0x0) 1.749305862s ago: executing program 9 (id=19130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x22810, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.708949483s ago: executing program 8 (id=19131): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) 1.629893846s ago: executing program 8 (id=19132): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000d000)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24040084) 1.4619166s ago: executing program 6 (id=19134): setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r0) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 1.408144112s ago: executing program 6 (id=19135): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 1.320129824s ago: executing program 4 (id=19137): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.290439475s ago: executing program 4 (id=19138): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.030919512s ago: executing program 2 (id=19141): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)='z', 0x1}], 0x1, &(0x7f00000010c0)=ANY=[], 0xa1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)='^', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a00)="e1f68112", 0x4}], 0x1, &(0x7f00000010c0)=ANY=[], 0xc8}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d00)="6798535ce0", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="f184e042e7ef969a98360f5447", 0xd}], 0x1}}], 0x7, 0x2401c444) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 1.009409792s ago: executing program 2 (id=19142): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 956.266064ms ago: executing program 2 (id=19143): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) tkill(r0, 0x29) 947.394294ms ago: executing program 8 (id=19144): socket$inet6_udp(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 908.595825ms ago: executing program 9 (id=19145): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 904.005235ms ago: executing program 6 (id=19146): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x108}, 0x1, 0x0, 0x0, 0x48000}, 0x48090) 866.250996ms ago: executing program 6 (id=19147): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xa1481e, &(0x7f0000000000), 0x1, 0x509, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$inet6(0xffffffffffffffff, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0xffffff56, 0x8) 846.884797ms ago: executing program 4 (id=19148): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804040, &(0x7f0000000000)=ANY=[], 0xf9, 0x1227, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 838.546267ms ago: executing program 8 (id=19149): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lseek(r0, 0x2004, 0x0) 804.810028ms ago: executing program 2 (id=19150): perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x5, 0x2, 0x8, 0x0, 0x0, 0x85, 0xc151c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, @perf_config_ext={0xbab, 0x7f}, 0x628, 0x0, 0x20000008, 0x0, 0x0, 0xfff, 0x1, 0x0, 0x1, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 748.95981ms ago: executing program 2 (id=19151): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 555.480204ms ago: executing program 2 (id=19152): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) fsopen(0x0, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 538.460945ms ago: executing program 4 (id=19153): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x0, 0xff, 0xb}, 0x2c) 355.19453ms ago: executing program 4 (id=19154): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$binfmt_register(r0, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 59.862828ms ago: executing program 4 (id=19155): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x20, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000500)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x60, 0x40012, 0x0, 0x0) 0s ago: executing program 9 (id=19156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) kernel console output (not intermixed with test programs): tlink: 4 bytes leftover after parsing attributes in process `syz.1.17711'. [ 720.049438][T14398] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 720.059902][T14930] erspan0: entered promiscuous mode [ 720.087400][T14930] gretap0: entered promiscuous mode [ 720.101712][T14930] debugfs: 'hsr1' already exists in 'hsr' [ 720.120559][T14930] Cannot create hsr debugfs directory [ 720.136367][T14930] hsr1: entered promiscuous mode [ 720.156737][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17712'. [ 720.313930][T14954] macvlan2: entered promiscuous mode [ 720.333300][T14954] dummy0: entered promiscuous mode [ 720.340056][T14954] macvlan2: entered allmulticast mode [ 720.350084][T14954] dummy0: entered allmulticast mode [ 720.494960][T14398] cgroup: fork rejected by pids controller in /syz7 [ 720.524276][ T28] audit: type=1400 audit(2000000099.758:14216): avc: denied { ioctl } for pid=14972 comm="syz.8.17730" path="socket:[145257]" dev="sockfs" ino=145257 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 720.702987][T14977] loop1: detected capacity change from 0 to 128 [ 720.710121][T14977] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 720.732311][T14977] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 720.973802][T10627] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.016582][T14997] netlink: 'syz.1.17742': attribute type 5 has an invalid length. [ 721.048608][T10627] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.131591][ T28] audit: type=1326 audit(2000000100.360:14217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.1.17748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f171ac8cdd9 code=0x0 [ 721.156777][T10627] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.225407][T10627] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.292330][T15009] lo speed is unknown, defaulting to 1000 [ 721.336326][T10627] bridge_slave_1: left allmulticast mode [ 721.345702][T10627] bridge_slave_1: left promiscuous mode [ 721.352975][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.375071][T10627] bridge_slave_0: left allmulticast mode [ 721.391490][T10627] bridge_slave_0: left promiscuous mode [ 721.400366][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.532858][T10627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.544934][T10627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.555615][T10627] bond0 (unregistering): Released all slaves [ 721.566405][T15031] netlink: 60 bytes leftover after parsing attributes in process `syz.6.17753'. [ 721.588834][T15030] lo speed is unknown, defaulting to 1000 [ 721.855551][T15072] loop1: detected capacity change from 0 to 512 [ 721.863379][T15072] EXT4-fs: Ignoring removed mblk_io_submit option [ 721.870845][T15072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 721.904488][T15072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.905224][T10627] hsr_slave_0: left promiscuous mode [ 721.932084][T15072] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 721.969414][T10627] hsr_slave_1: left promiscuous mode [ 721.993805][T10627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.021323][T10627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.043118][T10627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.044861][T12481] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.050585][T10627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.077068][T10627] dummy0: left allmulticast mode [ 722.082149][T10627] veth1_macvtap: left promiscuous mode [ 722.094282][T10627] veth0_macvtap: left promiscuous mode [ 722.116792][T10627] veth1_vlan: left promiscuous mode [ 722.122247][T10627] veth0_vlan: left promiscuous mode [ 722.201433][T10627] team0 (unregistering): Port device team_slave_1 removed [ 722.213465][T10627] team0 (unregistering): Port device team_slave_0 removed [ 722.260624][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 722.298410][T15009] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.306266][T15009] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.313477][T15009] bridge_slave_0: entered allmulticast mode [ 722.320527][T15009] bridge_slave_0: entered promiscuous mode [ 722.329422][T15009] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.345084][T15009] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.376004][T15009] bridge_slave_1: entered allmulticast mode [ 722.402308][T15009] bridge_slave_1: entered promiscuous mode [ 722.503139][T15009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.517178][T15009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.587051][T15009] team0: Port device team_slave_0 added [ 722.605811][T15009] team0: Port device team_slave_1 added [ 722.739909][T15009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.759664][T15009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.819768][T15009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.839453][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 722.855741][T15009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.867343][T15009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.893653][T15009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.983025][T15137] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17783'. [ 723.013144][T15009] hsr_slave_0: entered promiscuous mode [ 723.023122][T15009] hsr_slave_1: entered promiscuous mode [ 723.362547][T15009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 723.380532][T15009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.393748][T15009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 723.406193][T15009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.422327][T15009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 723.438824][T15009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 723.457228][T15009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 723.489289][T15009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 723.579231][T15009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.605967][T15009] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.625225][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.632451][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.656799][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.663907][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.725050][T15009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 723.907076][T15009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.018413][T15273] loop8: detected capacity change from 0 to 128 [ 724.050156][T15273] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 724.051373][T15277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17811'. [ 724.084728][T15277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17811'. [ 724.117937][T15273] ext4 filesystem being mounted at /999/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.171027][ T28] audit: type=1400 audit(2000000103.406:14218): avc: denied { lock } for pid=15272 comm="syz.8.17810" path="/999/file1/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 724.196475][T15290] loop1: detected capacity change from 0 to 512 [ 724.213252][T15290] EXT4-fs: Ignoring removed oldalloc option [ 724.231255][T15290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 724.249935][ T2270] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 724.271149][T15290] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.17816: iget: bad i_size value: 38620345925642 [ 724.293410][T15009] veth0_vlan: entered promiscuous mode [ 724.317942][T15009] veth1_vlan: entered promiscuous mode [ 724.349245][T15290] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 724.349528][T15290] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.17816: couldn't read orphan inode 15 (err -117) [ 724.358867][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 724.358895][ C1] EXT4-fs (loop1): initial error at time 2000000103: ext4_orphan_get:1397: inode 15 [ 724.358958][ C1] EXT4-fs (loop1): last error at time 2000000103: ext4_orphan_get:1397: inode 15 [ 724.405328][T15290] loop1: lost filesystem error report for type 5 error -117 [ 724.410216][T15009] veth0_macvtap: entered promiscuous mode [ 724.412985][T15290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.423128][T15009] veth1_macvtap: entered promiscuous mode [ 724.447032][T15301] netlink: 'syz.8.17819': attribute type 29 has an invalid length. [ 724.456419][T15301] netlink: 'syz.8.17819': attribute type 29 has an invalid length. [ 724.474907][T15009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.518074][T15009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.531033][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.543755][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.560782][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.574139][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.647919][ T28] audit: type=1400 audit(2000000103.887:14219): avc: denied { share } for pid=15310 comm="syz.8.17822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 724.859250][T15329] netlink: 'syz.0.17829': attribute type 4 has an invalid length. [ 724.909166][T15335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17831'. [ 724.936416][T15335] bond0: ARP target 8.4.0.0 is already present [ 724.945568][T15335] bond0: option arp_ip_target: invalid value (1032) [ 725.118402][T17976] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 725.148785][T17976] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 725.175626][T17976] EXT4-fs (loop1): This should not happen!! Data will be lost [ 725.175626][T17976] [ 725.198164][T17976] EXT4-fs (loop1): Total free blocks count 0 [ 725.217166][T17976] EXT4-fs (loop1): Free/Dirty block details [ 725.225768][T17976] EXT4-fs (loop1): free_blocks=0 [ 725.232135][T17976] EXT4-fs (loop1): dirty_blocks=13068 [ 725.252024][T17976] EXT4-fs (loop1): Block reservation details [ 725.267230][T17976] EXT4-fs (loop1): i_reserved_data_blocks=13068 [ 725.296045][T15366] 9p: Unknown access argument 18446744073709551615: -34 [ 725.308406][ T68] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 725.327639][T12481] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 725.414528][T15374] netlink: 212916 bytes leftover after parsing attributes in process `syz.6.17846'. [ 725.519537][T15386] loop1: detected capacity change from 0 to 512 [ 725.538968][T15386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 725.561678][T15386] System zones: 1-20 [ 725.566981][T15386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.627561][T15395] loop8: detected capacity change from 0 to 2048 [ 725.635418][T15395] EXT4-fs: Ignoring removed nobh option [ 725.682349][T15395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.736361][T15395] ext4 filesystem being mounted at /1007/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.768041][ T2270] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.888946][T15402] lo speed is unknown, defaulting to 1000 [ 725.902657][T12481] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.146520][T15415] lo speed is unknown, defaulting to 1000 [ 726.146705][T15416] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 726.323991][T15412] loop7: detected capacity change from 0 to 256 [ 726.469148][T15419] ------------[ cut here ]------------ [ 726.474662][T15419] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.1.17860/15419 [ 726.484767][T15419] Modules linked in: [ 726.488691][T15419] CPU: 0 UID: 0 PID: 15419 Comm: syz.1.17860 Tainted: G W syzkaller #0 PREEMPT(full) [ 726.499733][T15419] Tainted: [W]=WARN [ 726.503607][T15419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.513743][T15419] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 726.519418][T15419] Code: 8b 05 c1 49 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1e 12 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 10 12 1e 00 90 0f 0b 90 e9 af fa ff ff [ 726.539183][T15419] RSP: 0018:ffffc900015cfdd8 EFLAGS: 00010093 [ 726.545272][T15419] RAX: ffffffff813b1682 RBX: ffff8881017f1100 RCX: ffff8881017f1100 [ 726.553262][T15419] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 726.561252][T15419] RBP: 0000000000000080 R08: ffff8881017f1bf8 R09: 0000000000000000 [ 726.569240][T15419] R10: ffffc900015cfdf0 R11: 0001c900015cfdf0 R12: ffff8881017f1100 [ 726.577229][T15419] R13: ffff8881017f1928 R14: ffff888103831690 R15: 0000000000000080 [ 726.585215][T15419] FS: 0000000000000000(0000) GS:ffff8882ae8fe000(0000) knlGS:0000000000000000 [ 726.594215][T15419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 726.600853][T15419] CR2: 00007f499dfc5d58 CR3: 00000001919ba000 CR4: 00000000003506f0 [ 726.608933][T15419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 726.616930][T15419] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 726.624934][T15419] Call Trace: [ 726.628229][T15419] [ 726.631173][T15419] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 726.636615][T15419] ? __list_add_valid_or_report+0x38/0xe0 [ 726.642408][T15419] do_exit+0xc13/0x1530 [ 726.646613][T15419] ? switch_fpu_return+0xe7/0x1b0 [ 726.651752][T15419] __x64_sys_exit+0x1f/0x20 [ 726.656330][T15419] x64_sys_call+0x301d/0x3020 [ 726.661019][T15419] do_syscall_64+0x12c/0x3b0 [ 726.665623][T15419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.671621][T15419] RIP: 0033:0x7f171ac8cdd9 [ 726.676043][T15419] Code: Unable to access opcode bytes at 0x7f171ac8cdaf. [ 726.683066][T15419] RSP: 002b:00007f17196defd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 726.691492][T15419] RAX: ffffffffffffffda RBX: 00007f171af05fa0 RCX: 00007f171ac8cdd9 [ 726.699490][T15419] RDX: 00007f17196df9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 726.707476][T15419] RBP: 00007f171ad22d69 R08: 0000000000000000 R09: 0000000000000000 [ 726.715456][T15419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.723479][T15419] R13: 00007f171af06038 R14: 00007f171af05fa0 R15: 00007ffc615bd3f8 [ 726.731542][T15419] [ 726.734574][T15419] ---[ end trace 0000000000000000 ]--- [ 726.766370][T15402] netlink: 60 bytes leftover after parsing attributes in process `syz.8.17857'. [ 727.117494][ T28] audit: type=1400 audit(2000000106.359:14220): avc: denied { setopt } for pid=15446 comm="syz.7.17876" lport=41814 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 727.421534][T15471] lo speed is unknown, defaulting to 1000 [ 727.882977][T15471] netlink: 60 bytes leftover after parsing attributes in process `syz.7.17886'. [ 727.940112][ T28] audit: type=1326 audit(2000000107.179:14221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15520 comm="syz.8.17903" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cd96acdd9 code=0x0 [ 728.364894][T15563] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 728.407732][T15566] lo speed is unknown, defaulting to 1000 [ 728.688963][T15614] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15614 comm=syz.6.17924 [ 728.838511][T15633] lo speed is unknown, defaulting to 1000 [ 729.441747][T15704] loop8: detected capacity change from 0 to 128 [ 729.663976][T15720] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 729.685058][T14788] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 729.852161][T15746] loop8: detected capacity change from 0 to 512 [ 729.870246][T15746] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.883364][T15746] ext4 filesystem being mounted at /1033/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.913414][ T2270] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.020246][T15757] loop8: detected capacity change from 0 to 8192 [ 730.039837][T15757] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 730.244643][T15775] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 730.325140][ T49] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.392699][ T49] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.444855][ T49] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.532412][ T49] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.564648][T15800] lo speed is unknown, defaulting to 1000 [ 730.690872][T14786] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 730.717647][ T49] bridge_slave_0: left allmulticast mode [ 730.732689][ T49] bridge_slave_0: left promiscuous mode [ 730.751056][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.821535][ T49] bond_slave_0: left promiscuous mode [ 730.832342][ T49] bond_slave_1: left promiscuous mode [ 730.906679][ C0] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 730.915649][ C0] SELinux: failure in sel_netif_sid_slow(), invalid network interface (3) [ 731.296231][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.351977][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.382200][ T49] bond0 (unregistering): Released all slaves [ 731.506191][T15842] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17985'. [ 731.521775][ T49] tipc: Disabling bearer [ 731.531023][ T49] tipc: Disabling bearer [ 731.536318][ T49] tipc: Left network mode [ 731.710616][ T49] hsr_slave_0: left promiscuous mode [ 731.732556][ T49] hsr_slave_1: left promiscuous mode [ 731.748044][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17974'. [ 731.750205][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.780674][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.799759][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.819456][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.862224][ T49] veth1_macvtap: left promiscuous mode [ 731.881540][ T49] veth0_macvtap: left promiscuous mode [ 731.896438][ T49] veth1_vlan: left promiscuous mode [ 731.911296][ T49] veth0_vlan: left promiscuous mode [ 731.966706][T15887] loop7: detected capacity change from 0 to 512 [ 731.994113][T15887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 732.023552][T15887] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.037528][T15887] EXT4-fs (loop7): shut down requested (1) [ 732.062068][T15009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 732.101022][ T49] team0 (unregistering): Port device team_slave_1 removed [ 732.113358][ T49] team0 (unregistering): Port device team_slave_0 removed [ 732.167686][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 732.256987][T15914] veth1_to_bond: entered allmulticast mode [ 732.266650][T15800] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.279884][T15800] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.290615][T15800] bridge_slave_0: entered allmulticast mode [ 732.301119][T15800] bridge_slave_0: entered promiscuous mode [ 732.312840][T15914] veth1_to_bond: entered promiscuous mode [ 732.322343][T15800] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.331175][T15800] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.340382][T15800] bridge_slave_1: entered allmulticast mode [ 732.351297][T15800] bridge_slave_1: entered promiscuous mode [ 732.363554][T15913] veth1_to_bond: left promiscuous mode [ 732.373473][T15913] veth1_to_bond: left allmulticast mode [ 732.436225][T15800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.453623][T15932] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 732.462939][T15800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.506973][T15927] lo speed is unknown, defaulting to 1000 [ 732.540776][T15800] team0: Port device team_slave_0 added [ 732.561217][ T49] IPVS: stop unused estimator thread 0... [ 732.568136][T15800] team0: Port device team_slave_1 added [ 732.608788][T15800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.632988][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.673813][T15800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.685156][T15800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.695978][T15800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.723420][T15800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.809500][T15957] netlink: 68 bytes leftover after parsing attributes in process `syz.6.18021'. [ 732.853171][T15800] hsr_slave_0: entered promiscuous mode [ 732.869657][T15800] hsr_slave_1: entered promiscuous mode [ 732.879164][T15967] loop7: detected capacity change from 0 to 512 [ 732.884519][T15800] debugfs: 'hsr0' already exists in 'hsr' [ 732.893149][T15800] Cannot create hsr debugfs directory [ 732.963220][ T28] audit: type=1400 audit(2000000112.200:14222): avc: denied { create } for pid=15974 comm="syz.0.18028" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 733.127387][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 733.275889][T16008] netlink: 'syz.6.18035': attribute type 2 has an invalid length. [ 733.302328][T16008] netlink: 196452 bytes leftover after parsing attributes in process `syz.6.18035'. [ 733.335120][T16007] 9pnet: p9_errstr2errno: server reported unknown error  [ 733.398465][T16022] veth1_vlan: left promiscuous mode [ 733.427168][T16022] netlink: 'syz.0.18038': attribute type 1 has an invalid length. [ 733.448966][T16022] netlink: 'syz.0.18038': attribute type 2 has an invalid length. [ 733.470669][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 733.493599][T15800] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 733.513542][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 733.530874][T15800] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 733.551704][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 733.569409][T15800] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 733.581735][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 733.605606][T15800] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 733.657899][T15800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.765943][T15800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.795755][T15800] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.817199][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.824322][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.853204][T17999] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.860347][T17999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.926223][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 734.022180][T15800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.175356][T15800] veth0_vlan: entered promiscuous mode [ 734.187367][T15800] veth1_vlan: entered promiscuous mode [ 734.205330][T15800] veth0_macvtap: entered promiscuous mode [ 734.215378][T15800] veth1_macvtap: entered promiscuous mode [ 734.231170][T15800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.244887][T15800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.260502][ T3629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.284276][ T3629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.295486][ T3629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.313413][ T3629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.480713][T16139] loop5: detected capacity change from 0 to 256 [ 734.629050][ T28] audit: type=1326 audit(2000000113.870:14223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16161 comm="syz.6.18047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9289fbcdd9 code=0x0 [ 734.661362][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18048'. [ 734.998880][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18064'. [ 735.034446][T16229] netlink: 'syz.5.18067': attribute type 1 has an invalid length. [ 735.048684][T16229] netlink: 'syz.5.18067': attribute type 2 has an invalid length. [ 735.089001][T16235] loop1: detected capacity change from 0 to 128 [ 735.101560][T16239] netlink: 68 bytes leftover after parsing attributes in process `syz.5.18069'. [ 735.112514][T16235] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 735.127177][T16235] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 735.174126][ T68] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 735.406426][T16273] loop7: detected capacity change from 0 to 512 [ 735.427272][T16279] netlink: 68 bytes leftover after parsing attributes in process `syz.1.18084'. [ 735.454196][T16273] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 735.509219][T16283] netlink: 'syz.5.18085': attribute type 21 has an invalid length. [ 735.523671][ T68] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 735.635054][T16292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.645196][T16292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.666546][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18088'. [ 736.281718][T16276] lo speed is unknown, defaulting to 1000 [ 736.283878][T16328] loop1: detected capacity change from 0 to 512 [ 736.325852][T16328] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.18095: corrupted in-inode xattr: invalid ea_ino [ 736.379489][T16328] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 736.385464][T16328] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.18095: couldn't read orphan inode 15 (err -117) [ 736.394756][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 736.394775][ C0] EXT4-fs (loop1): initial error at time 2000000115: ext4_iget_extra_inode:5128: inode 15 [ 736.394816][ C0] EXT4-fs (loop1): last error at time 2000000115: ext4_iget_extra_inode:5128: inode 15 [ 736.452407][T16328] loop1: lost filesystem error report for type 5 error -117 [ 736.453048][T16328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.513576][T12481] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.931498][T16400] bridge0: Caught tx_queue_len zero misconfig [ 737.776924][T16453] netlink: 104 bytes leftover after parsing attributes in process `syz.7.18132'. [ 737.872040][ T28] audit: type=1400 audit(2000000117.101:14224): avc: denied { watch_reads } for pid=16460 comm="syz.7.18136" path="/syzcgroup/unified/syz7/file0" dev="cgroup2" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 737.989703][T16465] loop5: detected capacity change from 0 to 512 [ 738.043659][T16465] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.18138: inode has both inline data and extents flags [ 738.125378][T16465] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 738.125566][T16465] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.18138: couldn't read orphan inode 15 (err -117) [ 738.136101][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 738.136119][ C0] EXT4-fs (loop5): initial error at time 2000000117: ext4_orphan_get:1397: inode 15 [ 738.136151][ C0] EXT4-fs (loop5): last error at time 2000000117: ext4_orphan_get:1397: inode 15 [ 738.183368][T16445] loop1: detected capacity change from 0 to 2048 [ 738.191154][T16465] loop5: lost filesystem error report for type 5 error -117 [ 738.193089][T16465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.290807][T15800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.375985][T16477] netlink: 168 bytes leftover after parsing attributes in process `syz.0.18143'. [ 738.474959][T16479] xt_hashlimit: size too large, truncated to 1048576 [ 738.497890][T16445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.591719][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18129'. [ 738.671994][T12481] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.246166][T16509] loop5: detected capacity change from 0 to 256 [ 739.516220][T16529] netlink: 165 bytes leftover after parsing attributes in process `syz.1.18164'. [ 739.559228][T16533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=16533 comm=syz.6.18166 [ 739.865913][T16561] loop7: detected capacity change from 0 to 512 [ 739.887005][T16562] netlink: 'syz.0.18180': attribute type 83 has an invalid length. [ 739.892861][T16561] EXT4-fs: test_dummy_encryption option not supported [ 739.983114][T16568] loop7: detected capacity change from 0 to 512 [ 740.011544][T16568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 740.044185][T16568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.072900][T16568] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.159161][T16568] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.18182: bg 0: block 232: padding at end of block bitmap is not set [ 740.215174][T16568] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 740.221861][T16582] netlink: 'syz.6.18186': attribute type 10 has an invalid length. [ 740.250262][T16582] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.18186'. [ 740.253301][T16568] EXT4-fs (loop7): This should not happen!! Data will be lost [ 740.253301][T16568] [ 740.299696][T16568] EXT4-fs (loop7): Total free blocks count 0 [ 740.317548][T16568] EXT4-fs (loop7): Free/Dirty block details [ 740.336135][T16568] EXT4-fs (loop7): free_blocks=0 [ 740.352405][T16568] EXT4-fs (loop7): dirty_blocks=33 [ 740.373972][T16568] EXT4-fs (loop7): Block reservation details [ 740.390478][T16568] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 740.438175][T15009] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 740.473295][T15009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.631981][T16604] netlink: 60 bytes leftover after parsing attributes in process `syz.7.18195'. [ 740.650684][T16606] netlink: 168 bytes leftover after parsing attributes in process `syz.5.18196'. [ 741.129341][T16618] loop5: detected capacity change from 0 to 512 [ 741.138965][T16618] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 741.168565][T16618] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.18201: inode #1792: comm syz.5.18201: iget: illegal inode # [ 741.184725][T16618] loop5: lost filesystem error report for type 5 error -117 [ 741.184914][T16618] EXT4-fs (loop5): Remounting filesystem read-only [ 741.192257][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 741.192278][ C0] EXT4-fs (loop5): initial error at time 2000000120: ext4_get_journal_inode:5896 [ 741.192306][ C0] EXT4-fs (loop5): last error at time 2000000120: ext4_get_journal_inode:5896 [ 741.230269][T16618] EXT4-fs (loop5): no journal found [ 741.235498][T16618] EXT4-fs (loop5): can't get journal size [ 741.244012][T16618] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 741.279056][T16618] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 741.317829][T16618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.336708][T16618] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 741.344970][T16623] loop7: detected capacity change from 0 to 512 [ 741.371394][T15800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.392057][T16627] netlink: 192 bytes leftover after parsing attributes in process `syz.6.18205'. [ 741.459018][T16631] netlink: 168 bytes leftover after parsing attributes in process `syz.1.18208'. [ 741.535253][T16641] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 741.546988][T16641] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 741.837775][T16660] bridge0: port 3(batadv1) entered blocking state [ 741.863368][T16660] bridge0: port 3(batadv1) entered disabled state [ 741.870475][T16660] batadv1: entered allmulticast mode [ 741.876698][T16660] batadv1: entered promiscuous mode [ 741.944283][T16667] loop1: detected capacity change from 0 to 1024 [ 741.969662][T16667] EXT4-fs: Ignoring removed bh option [ 742.003563][T16667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.078468][T12481] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.170868][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18225'. [ 742.199935][T16666] loop5: detected capacity change from 0 to 2048 [ 742.301694][T16666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.337703][ T68] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 742.346984][ T68] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 742.510795][T15800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.731670][T16704] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 742.753519][T14769] team_slave_0: entered promiscuous mode [ 742.759244][T14769] team_slave_1: entered promiscuous mode [ 742.776980][T16706] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 742.787553][T16704] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 742.806007][T16708] __nla_validate_parse: 1 callbacks suppressed [ 742.806063][T16708] netlink: 168 bytes leftover after parsing attributes in process `syz.6.18238'. [ 742.854208][T16710] netlink: 'syz.0.18240': attribute type 4 has an invalid length. [ 742.936125][T16719] netlink: 'syz.1.18244': attribute type 1 has an invalid length. [ 743.004155][T16727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16727 comm=syz.5.18248 [ 743.143416][T16742] siw: device registration error -23 [ 743.356816][T16761] syzkaller1: entered promiscuous mode [ 743.364254][T16761] syzkaller1: entered allmulticast mode [ 743.894917][T16781] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 744.295335][T16807] netlink: 168 bytes leftover after parsing attributes in process `syz.7.18269'. [ 744.355462][T16811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18273'. [ 744.371138][T16811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18273'. [ 744.582239][T16835] netlink: 168 bytes leftover after parsing attributes in process `syz.1.18295'. [ 744.632872][T16841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18299'. [ 744.655921][T16841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18299'. [ 744.884748][T16866] loop1: detected capacity change from 0 to 128 [ 744.911126][T16866] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 744.959331][T16866] ext4 filesystem being mounted at /256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 745.003324][T16866] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 63: comm syz.1.18309: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 745.026190][T16866] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem [ 745.068626][T12481] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 745.082249][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18315'. [ 745.101462][T16881] netlink: 'syz.6.18315': attribute type 1 has an invalid length. [ 745.111042][T16881] netlink: 'syz.6.18315': attribute type 2 has an invalid length. [ 745.327165][T16911] loop5: detected capacity change from 0 to 8192 [ 745.445500][T14786] IPVS: starting estimator thread 0... [ 745.471733][T15800] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 745.482254][T15800] FAT-fs (loop5): Filesystem has been set read-only [ 745.531979][T16932] sctp: [Deprecated]: syz.1.18330 (pid 16932) Use of int in max_burst socket option deprecated. [ 745.531979][T16932] Use struct sctp_assoc_value instead [ 745.548234][T16922] IPVS: using max 2256 ests per chain, 112800 per kthread [ 745.946666][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18340'. [ 746.385028][T16983] ip6erspan0: entered allmulticast mode [ 746.395803][T16981] lo speed is unknown, defaulting to 1000 [ 746.427099][T16988] loop1: detected capacity change from 0 to 512 [ 746.435300][T16988] EXT4-fs: Ignoring removed i_version option [ 746.459358][T16988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 746.485606][T16988] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.18353: invalid indirect mapped block 4294967295 (level 1) [ 746.516900][T16988] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 746.517129][T16988] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.18353: invalid indirect mapped block 4294967295 (level 1) [ 746.526394][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 746.526419][ C1] EXT4-fs (loop1): initial error at time 2000000125: ext4_free_branches:1023: inode 11 [ 746.526466][ C1] EXT4-fs (loop1): last error at time 2000000125: ext4_free_branches:1023: inode 11 [ 746.567012][T16988] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 746.568773][T16988] EXT4-fs (loop1): 2 truncates cleaned up [ 746.584561][T16988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.645320][T12481] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.895727][T17019] loop7: detected capacity change from 0 to 512 [ 746.922741][T17022] loop5: detected capacity change from 0 to 2048 [ 746.941390][T17019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.977596][T17022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.020226][T17019] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 1869771365 (only 1 groups) [ 747.032888][T17022] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.075665][T17022] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.18368: bg 0: block 345: padding at end of block bitmap is not set [ 747.100410][T15009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.133228][T17022] EXT4-fs (loop5): Remounting filesystem read-only [ 747.164133][ T875] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 8: ext4_ext_map_blocks returned -30 [ 747.238664][T15800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.446692][T17069] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18377'. [ 747.661317][T17091] loop5: detected capacity change from 0 to 1024 [ 747.677739][T17091] EXT4-fs: Ignoring removed mblk_io_submit option [ 747.711624][T17091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 747.757859][T17091] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.832092][T17091] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.18385: lblock 3 mapped to illegal pblock 3 (length 3) [ 747.878996][T17091] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 747.893856][T17091] EXT4-fs (loop5): This should not happen!! Data will be lost [ 747.893856][T17091] [ 747.910458][ T68] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 747.938561][T17112] EXT4-fs error (device loop5): ext4_ext_remove_space:2969: inode #15: comm syz.5.18385: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 747.978503][T17112] EXT4-fs error (device loop5) in ext4_setattr:6120: Corrupt filesystem [ 748.003179][T14786] kernel write not supported for file bpf-prog (pid: 14786 comm: kworker/0:12) [ 748.029408][T17120] loop1: detected capacity change from 0 to 512 [ 748.061018][T17120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.065925][T17122] loop7: detected capacity change from 0 to 512 [ 748.091371][T15800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 748.112705][T17122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 748.139630][T17122] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.162601][T17122] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 748.175880][T12481] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.261165][T15009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.450193][T17172] batadv_slave_1: entered promiscuous mode [ 748.463442][T17167] loop5: detected capacity change from 0 to 2048 [ 748.473237][T17170] batadv_slave_1: left promiscuous mode [ 748.513519][T17167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.576356][T17167] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 748.607397][T17185] loop7: detected capacity change from 0 to 8192 [ 748.686662][T15800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.772230][T15009] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 748.798887][T15009] FAT-fs (loop7): Filesystem has been set read-only [ 749.097069][T17241] veth0_to_bond: Caught tx_queue_len zero misconfig [ 749.202283][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18434'. [ 749.305214][T14778] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 749.320916][T14778] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 749.672977][T17299] netlink: 'syz.0.18454': attribute type 39 has an invalid length. [ 749.686798][T17301] FAT-fs (loop5): unable to read block(12884901888) for building NFS inode [ 749.723507][T17305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18457'. [ 749.759790][T17307] geneve2: entered promiscuous mode [ 749.769624][T17307] geneve2: entered allmulticast mode [ 749.962774][T17335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18471'. [ 749.994829][T17335] bridge_slave_0: Caught tx_queue_len zero misconfig [ 750.502180][T17376] set_capacity_and_notify: 1 callbacks suppressed [ 750.502194][T17376] loop5: detected capacity change from 0 to 1024 [ 750.563784][T17376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.624515][T15800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.434304][T17407] netlink: 'syz.5.18502': attribute type 29 has an invalid length. [ 751.446022][T17407] netlink: 'syz.5.18502': attribute type 29 has an invalid length. [ 751.455687][T17407] netlink: 500 bytes leftover after parsing attributes in process `syz.5.18502'. [ 751.578438][T17406] hsr1: left promiscuous mode [ 751.624664][T17415] program syz.5.18505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 751.695287][T17418] lo speed is unknown, defaulting to 1000 [ 751.858632][T17438] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18514'. [ 752.133236][T17463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18523'. [ 752.277050][T17464] lo speed is unknown, defaulting to 1000 [ 752.397074][ T875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.440769][ T875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.493047][ T875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.560756][ T875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.647989][ T875] bridge_slave_1: left allmulticast mode [ 752.661374][ T875] bridge_slave_1: left promiscuous mode [ 752.672543][ T875] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.689641][ T875] bridge_slave_0: left allmulticast mode [ 752.701583][ T875] bridge_slave_0: left promiscuous mode [ 752.713463][ T875] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.765251][ T875] erspan0 (unregistering): left promiscuous mode [ 752.775671][ T875] gretap0 (unregistering): left promiscuous mode [ 752.820728][ T875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.833472][ T875] bond0 (unregistering): Released all slaves [ 752.864977][T17484] lo speed is unknown, defaulting to 1000 [ 753.026423][ T875] hsr_slave_0: left promiscuous mode [ 753.040425][ T875] hsr_slave_1: left promiscuous mode [ 753.046136][ T875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.053960][ T875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.065419][ T875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.073698][ T875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.089512][ T875] veth1_macvtap: left promiscuous mode [ 753.095146][ T875] veth0_macvtap: left promiscuous mode [ 753.101674][ T875] veth1_vlan: left promiscuous mode [ 753.107021][ T875] veth0_vlan: left promiscuous mode [ 753.210400][ T875] team0 (unregistering): Port device team_slave_1 removed [ 753.222090][ T875] team0 (unregistering): Port device team_slave_0 removed [ 753.260824][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 753.420785][T17532] netlink: 64 bytes leftover after parsing attributes in process `syz.5.18539'. [ 753.563612][T17553] netlink: 399 bytes leftover after parsing attributes in process `syz.5.18545'. [ 753.574904][T17484] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.603183][T17484] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.617971][T17553] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 753.636215][T17484] bridge_slave_0: entered allmulticast mode [ 753.648172][T17553] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 753.661626][T17484] bridge_slave_0: entered promiscuous mode [ 753.673787][T14788] IPVS: starting estimator thread 0... [ 753.679648][ T875] IPVS: stop unused estimator thread 0... [ 753.683086][T17484] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.694040][T17564] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 753.702852][T17484] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.711459][T17484] bridge_slave_1: entered allmulticast mode [ 753.718354][T17484] bridge_slave_1: entered promiscuous mode [ 753.725382][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 753.747065][T17484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.759354][T17484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.788511][T17567] IPVS: using max 2160 ests per chain, 108000 per kthread [ 753.873535][T17484] team0: Port device team_slave_0 added [ 753.881752][T17484] team0: Port device team_slave_1 added [ 753.921109][T17484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.930205][T17484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.957784][T17484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.970355][T17484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.978709][T17484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.006015][T17484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.079892][T17484] hsr_slave_0: entered promiscuous mode [ 754.094416][ T28] audit: type=1326 audit(2000000133.331:14225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.6.18558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289fbcdd9 code=0x7ffc0000 [ 754.126488][T17484] hsr_slave_1: entered promiscuous mode [ 754.137972][T17484] debugfs: 'hsr0' already exists in 'hsr' [ 754.143744][T17484] Cannot create hsr debugfs directory [ 754.149959][ T28] audit: type=1326 audit(2000000133.361:14226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.6.18558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289fbcdd9 code=0x7ffc0000 [ 754.195146][ T28] audit: type=1326 audit(2000000133.361:14227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.6.18558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289fbcdd9 code=0x7ffc0000 [ 754.227176][ T28] audit: type=1326 audit(2000000133.361:14228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.6.18558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9289fbcdd9 code=0x7ffc0000 [ 754.308958][ T28] audit: type=1326 audit(2000000133.361:14229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.6.18558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289fbcdd9 code=0x7ffc0000 [ 754.345670][ T28] audit: type=1326 audit(2000000133.361:14230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.6.18558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289fbcdd9 code=0x7ffc0000 [ 754.371505][ T28] audit: type=1326 audit(2000000133.361:14231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.6.18558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289fbcdd9 code=0x7ffc0000 [ 754.396982][ T28] audit: type=1326 audit(2000000133.361:14232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.6.18558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289fbcdd9 code=0x7ffc0000 [ 754.487495][ T28] audit: type=1326 audit(2000000133.361:14233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.6.18558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9289fbcdd9 code=0x7ffc0000 [ 754.576462][ T28] audit: type=1326 audit(2000000133.361:14234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17585 comm="syz.6.18558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9289fbcdd9 code=0x7ffc0000 [ 754.613383][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 754.780145][T17484] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 754.789381][T17484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 754.808287][T17484] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 754.826089][T17484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 754.840616][T17484] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 754.867024][T17484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 754.893358][T17484] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 754.914137][T17484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.004209][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 755.024933][T17663] loop5: detected capacity change from 0 to 512 [ 755.044004][T17484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.073051][T17663] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.18576: Invalid inode bitmap blk 4 in block_group 0 [ 755.088767][T17663] loop5: lost filesystem error report for type 5 error -117 [ 755.091137][T17663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.122701][T17484] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.152136][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.159294][T10627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.161201][T15800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.196465][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.203593][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.467021][T17484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.501507][T17708] sctp: [Deprecated]: syz.5.18583 (pid 17708) Use of int in maxseg socket option. [ 755.501507][T17708] Use struct sctp_assoc_value instead [ 755.691657][T17484] veth0_vlan: entered promiscuous mode [ 755.706949][T17739] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 755.714366][T17484] veth1_vlan: entered promiscuous mode [ 755.736119][T17484] veth0_macvtap: entered promiscuous mode [ 755.744807][T17484] veth1_macvtap: entered promiscuous mode [ 755.760657][T17484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.779253][T17484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.796300][ T875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.860293][T17756] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 755.900564][T17760] netlink: 'syz.0.18595': attribute type 21 has an invalid length. [ 756.064256][ T875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.074787][ T875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.088949][ T875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.125582][T17770] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18596'. [ 756.251888][T17787] netlink: 116 bytes leftover after parsing attributes in process `syz.3.18600'. [ 756.322750][T17789] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 756.323918][T14769] IPVS: starting estimator thread 0... [ 756.428322][T17813] loop3: detected capacity change from 0 to 1024 [ 756.440251][T17813] EXT4-fs: Ignoring removed bh option [ 756.447349][T17801] IPVS: using max 2256 ests per chain, 112800 per kthread [ 756.453945][T17813] EXT4-fs: inline encryption not supported [ 756.471376][T17813] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 756.485617][T17813] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.18607: lblock 2 mapped to illegal pblock 2 (length 1) [ 756.502634][T17813] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 756.502814][T17813] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.18607: Invalid inode table block 1 in block_group 0 [ 756.511901][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 756.511919][ C0] EXT4-fs (loop3): initial error at time 2000000135: ext4_map_blocks:791: inode 3: block 2 [ 756.511955][ C0] EXT4-fs (loop3): last error at time 2000000135: ext4_map_blocks:791: inode 3: block 2 [ 756.557787][T17813] loop3: lost filesystem error report for type 5 error -117 [ 756.558137][T17813] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 756.576108][T17813] loop3: lost filesystem error report for type 5 error -117 [ 756.577821][T17813] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.18607: mark_inode_dirty error [ 756.603769][T17813] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 756.608887][T17813] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.18607: Failed to acquire dquot type 0 [ 756.631810][T17827] loop5: detected capacity change from 0 to 512 [ 756.645520][T17827] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 756.648767][T17813] loop3: lost filesystem error report for type 5 error -117 [ 756.656087][T17813] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 756.674928][T17813] loop3: lost filesystem error report for type 5 error -117 [ 756.675075][T17813] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.18607: mark_inode_dirty error [ 756.698082][T17813] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 756.698200][T17813] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 756.720565][T17813] EXT4-fs (loop3): 1 orphan inode deleted [ 756.730904][T17827] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.18609: Failed to acquire dquot type 1 [ 756.741009][T17813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.755907][ T3629] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 756.772905][ T3629] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 756.782586][T17827] loop5: lost filesystem error report for type 5 error -5 [ 756.786272][T17827] EXT4-fs (loop5): 1 truncate cleaned up [ 756.793429][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 756.793457][ C0] EXT4-fs (loop5): last error at time 2000000136: ext4_acquire_dquot:7034 [ 756.829044][ T3629] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm kworker/u8:0: lblock 2 mapped to illegal pblock 2 (length 1) [ 756.852502][ T3629] EXT4-fs error (device loop3): ext4_write_dquot:7014: comm kworker/u8:0: Failed to commit dquot type 0 [ 756.875937][T17827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 756.895383][ T3629] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 756.935544][ T3629] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 756.955629][T15800] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz-executor: Failed to acquire dquot type 1 [ 756.971086][T17484] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.983443][T17484] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 757.018646][T17484] loop3: lost filesystem error report for type 5 error -117 [ 757.019026][T17484] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 757.061914][T17484] loop3: lost filesystem error report for type 5 error -117 [ 757.062038][T17484] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 757.097147][T17484] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 757.111404][T16717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 757.346875][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18622'. [ 757.356272][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18622'. [ 757.630115][T17899] lo speed is unknown, defaulting to 1000 [ 757.943112][T17899] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.958494][T17899] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.966196][T17899] bridge_slave_0: entered allmulticast mode [ 757.974344][T17899] bridge_slave_0: entered promiscuous mode [ 757.981633][T17899] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.988865][T17899] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.996854][T17899] bridge_slave_1: entered allmulticast mode [ 758.010486][T17899] bridge_slave_1: entered promiscuous mode [ 758.039525][T17899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.053149][T17899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.080698][T17899] team0: Port device team_slave_0 added [ 758.089819][T17899] team0: Port device team_slave_1 added [ 758.130671][T17899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.139669][T17972] xt_hashlimit: size too large, truncated to 1048576 [ 758.146797][T17899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.187563][T17899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.199283][T17899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.209570][T17899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.276151][T17899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.344423][T17899] hsr_slave_0: entered promiscuous mode [ 758.357942][T17899] hsr_slave_1: entered promiscuous mode [ 758.369463][T17899] debugfs: 'hsr0' already exists in 'hsr' [ 758.384232][T17899] Cannot create hsr debugfs directory [ 758.579165][T18011] loop3: detected capacity change from 0 to 4096 [ 758.600975][T18011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.704927][T17484] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.821842][T17899] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 758.842953][T17899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.864758][T17899] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 758.891436][T17899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 758.910970][T17899] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 758.928661][T17899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 758.943295][T18058] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18058 comm=syz.3.18654 [ 758.958222][T17899] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 758.971529][T17899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.072183][T17899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.092775][T18077] usb usb7: usbfs: process 18077 (syz.3.18657) did not claim interface 0 before use [ 759.174654][T17899] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.194877][T17993] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.201991][T17993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.219966][T17993] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.227064][T17993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.489586][T17899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.532149][T17999] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.613418][T17999] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.693491][T17999] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.947345][T17999] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.998660][T17899] veth0_vlan: entered promiscuous mode [ 760.008519][T17899] veth1_vlan: entered promiscuous mode [ 760.043510][T17899] veth0_macvtap: entered promiscuous mode [ 760.058839][T17899] veth1_macvtap: entered promiscuous mode [ 760.071085][T17899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.080410][T17899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.099255][ T3629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.108363][ T3629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.189216][ T3629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.261140][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.399801][T18169] loop4: detected capacity change from 0 to 128 [ 760.428291][T17999] batadv1: left allmulticast mode [ 760.433502][T17999] batadv1: left promiscuous mode [ 760.449687][T17999] bridge0: port 3(batadv1) entered disabled state [ 760.469254][T17999] bridge_slave_1: left allmulticast mode [ 760.480198][T17999] bridge_slave_1: left promiscuous mode [ 760.486118][T17999] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.498895][T17999] bridge_slave_0: left allmulticast mode [ 760.504772][T17999] bridge_slave_0: left promiscuous mode [ 760.510598][T17999] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.641957][T18196] netlink: 'syz.3.18674': attribute type 6 has an invalid length. [ 760.687211][T17999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.712399][T17999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.734117][T17999] bond0 (unregistering): Released all slaves [ 760.840734][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 760.840751][ T28] audit: type=1400 audit(2000000140.081:14283): avc: denied { bind } for pid=18220 comm="syz.0.18682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 761.342233][T17999] hsr_slave_0: left promiscuous mode [ 761.366080][T17999] hsr_slave_1: left promiscuous mode [ 761.377689][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.390912][ T28] audit: type=1326 audit(2000000140.631:14284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.6.18705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9289fbcdd9 code=0x0 [ 761.394526][T17999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.446770][T17999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.456177][T17999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.463331][T18310] netlink: 88 bytes leftover after parsing attributes in process `syz.0.18708'. [ 761.478986][T17999] veth1_macvtap: left promiscuous mode [ 761.484927][T17999] veth0_macvtap: left promiscuous mode [ 761.490834][T17999] veth1_vlan: left promiscuous mode [ 761.496308][T17999] veth0_vlan: left promiscuous mode [ 761.602145][T17999] team0 (unregistering): Port device team_slave_1 removed [ 761.613000][T17999] team0 (unregistering): Port device team_slave_0 removed [ 761.779149][T18339] loop7: detected capacity change from 0 to 128 [ 761.901425][T17999] IPVS: stop unused estimator thread 0... [ 762.194493][T18388] loop4: detected capacity change from 0 to 1024 [ 762.212840][T18388] EXT4-fs: Ignoring removed mblk_io_submit option [ 762.243010][T18388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.259442][T18388] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.273594][T18388] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 1: comm syz.4.18720: lblock 1 mapped to illegal pblock 1 (length 1) [ 762.280636][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18721'. [ 762.301355][T18388] EXT4-fs (loop4): Remounting filesystem read-only [ 762.341455][T17899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 762.424591][T18419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18723'. [ 762.482058][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 762.679053][T18456] loop4: detected capacity change from 0 to 512 [ 762.725459][T18456] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.18739: invalid indirect mapped block 256 (level 2) [ 762.777356][T18456] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 762.780501][T18456] EXT4-fs (loop4): 2 truncates cleaned up [ 762.784739][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 762.789841][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 762.789860][ C1] EXT4-fs (loop4): initial error at time 2000000142: ext4_free_branches:1023: inode 11 [ 762.789889][ C1] EXT4-fs (loop4): last error at time 2000000142: ext4_free_branches:1023: inode 11 [ 762.821234][T18462] netlink: 'syz.3.18740': attribute type 1 has an invalid length. [ 762.833313][T18456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.890184][T18462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 762.899881][T17899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.137841][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 763.376669][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 764.386335][T18645] netlink: 'syz.4.18759': attribute type 10 has an invalid length. [ 764.438779][T18645] team0: Port device dummy0 added [ 764.462609][T18656] netlink: 'syz.4.18759': attribute type 10 has an invalid length. [ 764.508978][T18656] team0: Port device dummy0 removed [ 764.537376][T18656] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 764.927461][T18699] loop2: detected capacity change from 0 to 7 [ 765.225186][T18713] loop4: detected capacity change from 0 to 256 [ 765.890253][T18772] lo speed is unknown, defaulting to 1000 [ 766.451887][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18817'. [ 766.845348][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18828'. [ 767.706969][T18881] Invalid argument reading file caps for ./file0 [ 767.874392][T18893] loop4: detected capacity change from 0 to 1024 [ 767.895668][T18893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.955547][T18893] IPVS: persistence engine module ip_vs_pe_€ not found [ 767.984636][T17899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.049767][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18864'. [ 768.274626][ T28] audit: type=1326 audit(2000000147.511:14285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18925 comm="syz.0.18871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f499f5acdd9 code=0x0 [ 768.372238][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18874'. [ 768.411600][T18941] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18876'. [ 768.437247][T18946] netlink: 'syz.4.18878': attribute type 2 has an invalid length. [ 768.437697][T18948] netlink: 'syz.3.18879': attribute type 12 has an invalid length. [ 768.445859][T18948] netlink: 'syz.3.18879': attribute type 29 has an invalid length. [ 768.457345][T18946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18878'. [ 768.463605][T18948] netlink: 148 bytes leftover after parsing attributes in process `syz.3.18879'. [ 768.479926][T18948] netlink: 'syz.3.18879': attribute type 1 has an invalid length. [ 768.488153][T18948] netlink: 'syz.3.18879': attribute type 2 has an invalid length. [ 768.496146][T18948] netlink: 15 bytes leftover after parsing attributes in process `syz.3.18879'. [ 768.560552][T18955] netlink: 'syz.4.18882': attribute type 8 has an invalid length. [ 768.571818][T18955] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.579203][T18955] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.638875][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18886'. [ 768.650829][T18964] netlink: 'syz.7.18886': attribute type 5 has an invalid length. [ 768.660747][T18964] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18886'. [ 768.689586][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18888'. [ 768.743016][T18964] geneve2: entered promiscuous mode [ 768.798723][T18964] geneve2: entered allmulticast mode [ 768.805695][ T875] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 768.818215][ T875] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 768.830499][ T875] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 768.842642][ T875] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 768.915860][T18996] lo speed is unknown, defaulting to 1000 [ 769.462596][T19036] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19036 comm=syz.0.18911 [ 770.042153][T19097] loop7: detected capacity change from 0 to 1024 [ 770.094045][T19097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.179437][T19112] loop4: detected capacity change from 0 to 512 [ 770.206277][T19112] EXT4-fs (loop4): 1 truncate cleaned up [ 770.214524][T19112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.238267][T19097] loop7: detected capacity change from 1024 to 64 [ 770.251061][T17899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.261998][T15009] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /157/bus: bad entry in directory: inode out of bounds - offset=0, inode=11778, rec_len=512, size=1024 fake=0 [ 770.310650][T19121] loop3: detected capacity change from 0 to 512 [ 770.366798][T19121] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 770.380376][T19121] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 770.396707][T19121] EXT4-fs (loop3): orphan cleanup on readonly fs [ 770.413095][T19121] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 770.428811][T19121] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 770.435779][T15896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.458552][T19121] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.18949: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 770.481916][T19121] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 770.482196][T19121] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.18949: couldn't read orphan inode 13 (err -117) [ 770.491658][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 770.491673][ C1] EXT4-fs (loop3): last error at time 2000000149: ext4_ext_check_inode:521: inode 13 [ 770.520433][T19121] loop3: lost filesystem error report for type 5 error -117 [ 770.520903][T19121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 770.556098][T19121] lo speed is unknown, defaulting to 1000 [ 770.652911][T19133] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 770.721486][T19098] bio_check_eod: 31572 callbacks suppressed [ 770.721505][T19098] kmmpd-loop7: attempt to access beyond end of device [ 770.721505][T19098] loop7: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 770.761966][T19098] buffer_io_error: 31572 callbacks suppressed [ 770.761996][T19098] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 770.766818][T17484] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 770.791278][T19138] batadv_slave_0: entered promiscuous mode [ 770.795288][T17484] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 770.806878][T19137] batadv_slave_0: left promiscuous mode [ 771.233894][T10627] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.246794][T17484] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.260565][T10627] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 771.289504][T19161] lo speed is unknown, defaulting to 1000 [ 771.331282][T10627] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.344899][T10627] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 771.415266][T10627] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.426985][T10627] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 771.500519][T10627] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.511551][T10627] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 771.580661][T19172] lo speed is unknown, defaulting to 1000 [ 771.663897][T10627] bridge_slave_1: left allmulticast mode [ 771.669708][T10627] bridge_slave_1: left promiscuous mode [ 771.675378][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.684624][T10627] bridge_slave_0: left allmulticast mode [ 771.691756][T10627] bridge_slave_0: left promiscuous mode [ 771.697772][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.791932][T10627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.802051][T10627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.811886][T10627] bond0 (unregistering): Released all slaves [ 771.831281][T19176] lo speed is unknown, defaulting to 1000 [ 771.837091][T19161] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.851652][T19161] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.869845][T19161] bridge_slave_0: entered allmulticast mode [ 771.883376][T19161] bridge_slave_0: entered promiscuous mode [ 771.913413][T19161] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.934411][T19161] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.946901][T19161] bridge_slave_1: entered allmulticast mode [ 771.954821][T19161] bridge_slave_1: entered promiscuous mode [ 772.025898][T19161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.056472][T10627] hsr_slave_0: left promiscuous mode [ 772.072044][T10627] hsr_slave_1: left promiscuous mode [ 772.082484][T10627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.091301][T10627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.101044][T10627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.112923][T10627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.126570][T10627] veth1_macvtap: left promiscuous mode [ 772.132524][T10627] veth0_macvtap: left promiscuous mode [ 772.138810][T10627] veth1_vlan: left promiscuous mode [ 772.144306][T10627] veth0_vlan: left promiscuous mode [ 772.153637][T19219] __nla_validate_parse: 2 callbacks suppressed [ 772.153654][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18974'. [ 772.296813][T10627] team0 (unregistering): Port device team_slave_1 removed [ 772.308858][T10627] team0 (unregistering): Port device team_slave_0 removed [ 772.354791][T19161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.383694][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 772.422076][T19161] team0: Port device team_slave_0 added [ 772.429145][T19161] team0: Port device team_slave_1 added [ 772.447138][T19161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.455476][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.482588][T19161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.511067][T19161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.520307][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.548131][T19161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.631487][T19161] hsr_slave_0: entered promiscuous mode [ 772.637915][T19161] hsr_slave_1: entered promiscuous mode [ 772.703523][T10627] IPVS: stop unused estimator thread 0... [ 772.758589][T19176] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.766019][T19176] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.773274][T19176] bridge_slave_0: entered allmulticast mode [ 772.779963][T19176] bridge_slave_0: entered promiscuous mode [ 772.786742][T19176] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.794788][T19176] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.802043][T19176] bridge_slave_1: entered allmulticast mode [ 772.808903][T19176] bridge_slave_1: entered promiscuous mode [ 772.819924][T19172] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.827194][T19172] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.835812][T19172] bridge_slave_0: entered allmulticast mode [ 772.859445][T19172] bridge_slave_0: entered promiscuous mode [ 772.876665][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 772.884960][T19172] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.894202][T19172] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.902933][T19172] bridge_slave_1: entered allmulticast mode [ 772.910986][T19172] bridge_slave_1: entered promiscuous mode [ 772.926780][T10627] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.964073][T19176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.979044][T19176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.994157][T19172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.005836][T10627] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.038825][T19172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.058929][T19176] team0: Port device team_slave_0 added [ 773.076373][T19176] team0: Port device team_slave_1 added [ 773.093576][T10627] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.115155][T19172] team0: Port device team_slave_0 added [ 773.132158][T19271] loop4: detected capacity change from 0 to 32768 [ 773.144779][T19172] team0: Port device team_slave_1 added [ 773.162857][T19176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.171288][T19176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.186154][T19271] loop4: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 773.199729][T19271] loop4: p2 size 16775168 extends beyond EOD, [ 773.296168][T19176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.313263][T19271] truncated [ 773.322423][T19271] loop4: p6 size 16775168 extends beyond EOD, truncated [ 773.342241][T19271] loop4: p8 size 16775168 extends beyond EOD, truncated [ 773.350973][T19176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.352434][T19271] loop4: p10 size 16775168 extends beyond EOD, truncated [ 773.360651][T19176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.367201][T19271] loop4: p12 size 16775168 extends beyond EOD, [ 773.391601][T19176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.392893][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 773.398566][T19271] truncated [ 773.418107][T19172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.428135][T19172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.430457][T19271] loop4: p14 size 16775168 extends beyond EOD, [ 773.454786][T19172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.455755][T19172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.479733][T19172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.483261][T19271] truncated [ 773.505983][T19172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.523808][T19271] loop4: p16 size 16775168 extends beyond EOD, truncated [ 773.533650][T19271] loop4: p18 size 16775168 extends beyond EOD, truncated [ 773.541017][T10627] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.554204][T19271] loop4: p20 size 16775168 extends beyond EOD, truncated [ 773.576986][T19271] loop4: p22 size 16775168 extends beyond EOD, truncated [ 773.589658][T19271] loop4: p24 size 16775168 extends beyond EOD, truncated [ 773.598495][T19271] loop4: p26 size 16775168 extends beyond EOD, truncated [ 773.606683][T19271] loop4: p28 size 16775168 extends beyond EOD, truncated [ 773.616874][T19271] loop4: p30 size 16775168 extends beyond EOD, truncated [ 773.619578][T19176] hsr_slave_0: entered promiscuous mode [ 773.630927][T19176] hsr_slave_1: entered promiscuous mode [ 773.634183][T19271] loop4: p32 size 16775168 extends beyond EOD, truncated [ 773.637859][T19176] debugfs: 'hsr0' already exists in 'hsr' [ 773.649704][T19271] loop4: p34 size 16775168 extends beyond EOD, truncated [ 773.649959][T19176] Cannot create hsr debugfs directory [ 773.662705][T19271] loop4: p36 size 16775168 extends beyond EOD, truncated [ 773.669701][T19172] hsr_slave_0: entered promiscuous mode [ 773.670202][T19172] hsr_slave_1: entered promiscuous mode [ 773.670635][T19172] debugfs: 'hsr0' already exists in 'hsr' [ 773.670650][T19172] Cannot create hsr debugfs directory [ 773.697309][T19271] loop4: p38 size 16775168 extends beyond EOD, truncated [ 773.705226][T19271] loop4: p40 size 16775168 extends beyond EOD, truncated [ 773.714531][T19271] loop4: p42 size 16775168 extends beyond EOD, truncated [ 773.723522][T19271] loop4: p44 size 16775168 extends beyond EOD, truncated [ 773.732328][T19271] loop4: p46 size 16775168 extends beyond EOD, truncated [ 773.756201][T19271] loop4: p48 size 16775168 extends beyond EOD, truncated [ 773.774029][T19271] loop4: p50 size 16775168 extends beyond EOD, truncated [ 773.781677][T19271] loop4: p50 could not be added: -ENOMEM [ 773.792732][T19271] loop4: p52 size 16775168 extends beyond EOD, truncated [ 773.801317][T19271] loop4: p54 size 16775168 extends beyond EOD, truncated [ 773.811693][T19271] loop4: p56 size 16775168 extends beyond EOD, truncated [ 773.824198][T19271] loop4: p58 size 16775168 extends beyond EOD, truncated [ 773.832748][T19271] loop4: p60 size 16775168 extends beyond EOD, truncated [ 773.841746][T19271] loop4: p62 size 16775168 extends beyond EOD, truncated [ 773.851558][T10627] bridge_slave_1: left allmulticast mode [ 773.851968][T19271] loop4: p64 size 16775168 extends beyond EOD, [ 773.857415][T10627] bridge_slave_1: left promiscuous mode [ 773.857542][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.866149][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad1e400: rx timeout, send abort [ 773.873056][T19271] truncated [ 773.890334][T10627] bridge_slave_0: left allmulticast mode [ 773.891425][T19271] loop4: p66 size 16775168 extends beyond EOD, truncated [ 773.898157][T10627] bridge_slave_0: left promiscuous mode [ 773.908013][T19271] loop4: p68 size 16775168 extends beyond EOD, truncated [ 773.910698][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.921515][T19271] loop4: p70 size 16775168 extends beyond EOD, truncated [ 773.932594][T19271] loop4: p72 size 16775168 extends beyond EOD, truncated [ 773.942623][T19271] loop4: p74 size 16775168 extends beyond EOD, truncated [ 773.951604][T19271] loop4: p76 size 16775168 extends beyond EOD, truncated [ 773.963487][T19271] loop4: p78 size 16775168 extends beyond EOD, truncated [ 773.972698][T19271] loop4: p80 size 16775168 extends beyond EOD, truncated [ 773.981656][T19271] loop4: p82 size 16775168 extends beyond EOD, truncated [ 773.990526][T19271] loop4: p84 size 16775168 extends beyond EOD, truncated [ 773.999519][T19271] loop4: p86 size 16775168 extends beyond EOD, truncated [ 774.009773][T19271] loop4: p88 size 16775168 extends beyond EOD, truncated [ 774.019311][T19271] loop4: p90 size 16775168 extends beyond EOD, truncated [ 774.028672][T19271] loop4: p92 size 16775168 extends beyond EOD, truncated [ 774.036970][T19271] loop4: p94 size 16775168 extends beyond EOD, truncated [ 774.045264][T19271] loop4: p96 size 16775168 extends beyond EOD, truncated [ 774.054276][T19271] loop4: p98 size 16775168 extends beyond EOD, truncated [ 774.063121][T19271] loop4: p100 size 16775168 extends beyond EOD, truncated [ 774.070843][T10627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.078086][T19271] loop4: p102 size 16775168 extends beyond EOD, truncated [ 774.087932][T19271] loop4: p104 size 16775168 extends beyond EOD, truncated [ 774.095635][T10627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.098302][T19271] loop4: p106 size 16775168 extends beyond EOD, truncated [ 774.112264][T10627] bond0 (unregistering): Released all slaves [ 774.114029][T19271] loop4: p108 size 16775168 extends beyond EOD, truncated [ 774.125694][T10627] bond1 (unregistering): Released all slaves [ 774.131883][T10627] bond2 (unregistering): Released all slaves [ 774.134457][T19271] loop4: p110 size 16775168 extends beyond EOD, truncated [ 774.146415][T19271] loop4: p112 size 16775168 extends beyond EOD, truncated [ 774.156198][T19271] loop4: p114 size 16775168 extends beyond EOD, truncated [ 774.166430][T19271] loop4: p116 size 16775168 extends beyond EOD, truncated [ 774.174879][T19271] loop4: p118 size 16775168 extends beyond EOD, truncated [ 774.183318][T19271] loop4: p120 size 16775168 extends beyond EOD, truncated [ 774.192890][T19271] loop4: p122 size 16775168 extends beyond EOD, truncated [ 774.201906][T19271] loop4: p124 size 16775168 extends beyond EOD, truncated [ 774.210521][T19271] loop4: p126 size 16775168 extends beyond EOD, truncated [ 774.221124][T19271] loop4: p128 size 16775168 extends beyond EOD, truncated [ 774.235789][T19271] loop4: p130 size 16775168 extends beyond EOD, truncated [ 774.245631][T19271] loop4: p132 size 16775168 extends beyond EOD, truncated [ 774.255166][T19271] loop4: p134 size 16775168 extends beyond EOD, truncated [ 774.264096][T19271] loop4: p136 size 16775168 extends beyond EOD, truncated [ 774.275699][T19271] loop4: p138 size 16775168 extends beyond EOD, truncated [ 774.285278][T19271] loop4: p139 could not be added: -ENOMEM [ 774.294253][T19271] loop4: p140 size 16775168 extends beyond EOD, truncated [ 774.310403][T19271] loop4: p142 size 16775168 extends beyond EOD, truncated [ 774.320042][T19271] loop4: p144 size 16775168 extends beyond EOD, truncated [ 774.330946][T19271] loop4: p146 size 16775168 extends beyond EOD, truncated [ 774.340827][T19271] loop4: p148 size 16775168 extends beyond EOD, truncated [ 774.350674][T19271] loop4: p150 size 16775168 extends beyond EOD, truncated [ 774.358270][T19161] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 774.367053][T19271] loop4: p152 size 16775168 extends beyond EOD, truncated [ 774.375775][T19161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 774.379413][T19271] loop4: p154 size 16775168 extends beyond EOD, truncated [ 774.382919][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad1e400: abort rx timeout. Force session deactivation [ 774.395754][T19271] loop4: p156 size 16775168 extends beyond EOD, truncated [ 774.421326][T19271] loop4: p158 size 16775168 extends beyond EOD, truncated [ 774.432418][T19271] loop4: p160 size 16775168 extends beyond EOD, truncated [ 774.451638][T19271] loop4: p162 size 16775168 extends beyond EOD, truncated [ 774.465769][T10627] hsr_slave_0: left promiscuous mode [ 774.473958][T19271] loop4: p164 size 16775168 extends beyond EOD, truncated [ 774.493256][T19271] loop4: p166 size 16775168 extends beyond EOD, truncated [ 774.506488][T19271] loop4: p168 size 16775168 extends beyond EOD, truncated [ 774.514627][T10627] hsr_slave_1: left promiscuous mode [ 774.523808][T19271] loop4: p170 size 16775168 extends beyond EOD, truncated [ 774.531997][T10627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.539990][T10627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.549009][T19271] loop4: p172 size 16775168 extends beyond EOD, truncated [ 774.558377][T19271] loop4: p174 size 16775168 extends beyond EOD, truncated [ 774.565864][T10627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.584749][T10627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.592962][T19271] loop4: p176 size 16775168 extends beyond EOD, truncated [ 774.606148][T19271] loop4: p178 size 16775168 extends beyond EOD, truncated [ 774.614028][T10627] veth1_vlan: left promiscuous mode [ 774.621047][T19271] loop4: p180 size 16775168 extends beyond EOD, truncated [ 774.622913][T10627] veth0_vlan: left promiscuous mode [ 774.645255][T19271] loop4: p182 size 16775168 extends beyond EOD, truncated [ 774.654834][T19271] loop4: p184 size 16775168 extends beyond EOD, truncated [ 774.663420][T19271] loop4: p186 size 16775168 extends beyond EOD, truncated [ 774.672258][T19271] loop4: p188 size 16775168 extends beyond EOD, truncated [ 774.680478][T19271] loop4: p190 size 16775168 extends beyond EOD, truncated [ 774.689258][T19271] loop4: p192 size 16775168 extends beyond EOD, truncated [ 774.722701][T19271] loop4: p194 size 16775168 extends beyond EOD, truncated [ 774.741407][T19271] loop4: p196 size 16775168 extends beyond EOD, truncated [ 774.753613][T19271] loop4: p198 size 16775168 extends beyond EOD, truncated [ 774.761897][T19271] loop4: p200 size 16775168 extends beyond EOD, truncated [ 774.774849][T19271] loop4: p202 size 16775168 extends beyond EOD, truncated [ 774.799813][T19271] loop4: p204 size 16775168 extends beyond EOD, truncated [ 774.813682][T10627] team0 (unregistering): Port device team_slave_1 removed [ 774.824710][T10627] team0 (unregistering): Port device team_slave_0 removed [ 774.833930][T19271] loop4: p206 size 16775168 extends beyond EOD, truncated [ 774.844062][T19271] loop4: p208 size 16775168 extends beyond EOD, truncated [ 774.853853][T19271] loop4: p210 size 16775168 extends beyond EOD, truncated [ 774.865194][T19271] loop4: p212 size 16775168 extends beyond EOD, truncated [ 774.883666][T19271] loop4: p214 size 16775168 extends beyond EOD, truncated [ 774.897932][T19161] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 774.905508][T19271] loop4: p216 size 16775168 extends beyond EOD, truncated [ 774.913657][T19161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 774.922361][T19271] loop4: p218 size 16775168 extends beyond EOD, truncated [ 774.930945][T19271] loop4: p220 size 16775168 extends beyond EOD, truncated [ 774.939049][T19271] loop4: p222 size 16775168 extends beyond EOD, truncated [ 774.949766][T19271] loop4: p224 size 16775168 extends beyond EOD, truncated [ 774.959148][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 774.962740][T19271] loop4: p226 size 16775168 extends beyond EOD, truncated [ 774.974708][T19161] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 774.975293][T19271] loop4: p228 size 16775168 extends beyond EOD, truncated [ 774.990140][T19271] loop4: p230 size 16775168 extends beyond EOD, truncated [ 774.992452][T19161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 775.006022][T19271] loop4: p232 size 16775168 extends beyond EOD, truncated [ 775.014754][T19271] loop4: p234 size 16775168 extends beyond EOD, truncated [ 775.023452][T19271] loop4: p236 size 16775168 extends beyond EOD, truncated [ 775.033840][T19271] loop4: p238 size 16775168 extends beyond EOD, truncated [ 775.041159][T19161] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 775.043564][T19271] loop4: p240 size 16775168 extends beyond EOD, truncated [ 775.056113][T19271] loop4: p242 size 16775168 extends beyond EOD, truncated [ 775.059975][T19161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 775.068167][T19271] loop4: p244 size 16775168 extends beyond EOD, truncated [ 775.081588][T19271] loop4: p246 size 16775168 extends beyond EOD, truncated [ 775.091485][T19271] loop4: p248 size 16775168 extends beyond EOD, truncated [ 775.122850][T19271] loop4: p250 size 16775168 extends beyond EOD, truncated [ 775.148791][T19271] loop4: p252 size 16775168 extends beyond EOD, truncated [ 775.163016][T19161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.173877][T19271] loop4: p254 size 16775168 extends beyond EOD, truncated [ 775.186592][T19161] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.203016][T10674] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.210144][T10674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.315259][T10674] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.322453][T10674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.500613][T19335] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.508006][T19335] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.521337][T19335] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 775.824129][T19161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.851008][T19176] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 775.872861][T19176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 775.898231][T19176] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 775.933492][T19176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 775.954109][T19385] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.18992'. [ 775.962183][T19176] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 775.979045][T19385] netlink: zone id is out of range [ 775.989704][T19385] netlink: zone id is out of range [ 776.000985][T19385] netlink: zone id is out of range [ 776.009192][T19176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.012264][T19385] netlink: zone id is out of range [ 776.055689][T19176] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 776.072526][T19342] udevd[19342]: inotify_add_watch(7, /dev/loop4p15, 10) failed: No such file or directory [ 776.084882][ T539] udevd[539]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory [ 776.096076][T19340] udevd[19340]: inotify_add_watch(7, /dev/loop4p20, 10) failed: No such file or directory [ 776.107287][ T538] udevd[538]: inotify_add_watch(7, /dev/loop4p18, 10) failed: No such file or directory [ 776.118684][ T490] udevd[490]: inotify_add_watch(7, /dev/loop4p19, 10) failed: No such file or directory [ 776.130908][ T540] udevd[540]: inotify_add_watch(7, /dev/loop4p25, 10) failed: No such file or directory [ 776.135848][T19338] udevd[19338]: inotify_add_watch(7, /dev/loop4p17, 10) failed: No such file or directory [ 776.154480][T19339] udevd[19339]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory [ 776.167620][T19332] udevd[19332]: inotify_add_watch(7, /dev/loop4p21, 10) failed: No such file or directory [ 776.171555][T19176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 776.186631][ T2704] udevd[2704]: inotify_add_watch(7, /dev/loop4p22, 10) failed: No such file or directory [ 776.197911][T19385] netlink: set zone limit has 8 unknown bytes [ 776.356407][T19172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 776.384954][T19408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18997'. [ 776.405967][T19172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 776.448363][T19172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 776.495619][T19172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.536498][T19172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 776.576162][T19172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.602173][T19172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 776.628667][T19172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 776.860254][T19176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.875609][T19446] netlink: 'syz.4.19003': attribute type 3 has an invalid length. [ 776.903724][T19446] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.19003'. [ 776.979998][T19176] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.999381][T19161] veth0_vlan: entered promiscuous mode [ 777.009042][T19172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.019073][T19161] veth1_vlan: entered promiscuous mode [ 777.030463][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.037554][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.073757][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.080943][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.098624][T19161] veth0_macvtap: entered promiscuous mode [ 777.106131][T19161] veth1_macvtap: entered promiscuous mode [ 777.134095][T19172] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.165157][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.172434][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.201742][T19161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.230045][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.237801][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.281720][T19161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.342602][T13855] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.366803][T13855] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.386080][T13855] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.440003][T13855] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.662212][T19176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.760281][T19172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.963820][T19555] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19555 comm=syz.9.19016 [ 778.079238][T19172] veth0_vlan: entered promiscuous mode [ 778.121096][T19176] veth0_vlan: entered promiscuous mode [ 778.153606][T19172] veth1_vlan: entered promiscuous mode [ 778.181930][T19176] veth1_vlan: entered promiscuous mode [ 778.251472][T19176] veth0_macvtap: entered promiscuous mode [ 778.278685][T19172] veth0_macvtap: entered promiscuous mode [ 778.295213][T19176] veth1_macvtap: entered promiscuous mode [ 778.314776][T19576] loop9: detected capacity change from 0 to 2048 [ 778.326649][T19172] veth1_macvtap: entered promiscuous mode [ 778.373053][T19176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.385363][T19576] loop9: p2 p3 p7 [ 778.403562][T19172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.428434][ T28] audit: type=1326 audit(2000000157.661:14286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.19018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9cc98cdd9 code=0x7ffc0000 [ 778.480530][T19176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.494433][ T28] audit: type=1326 audit(2000000157.661:14287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.19018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9cc98cdd9 code=0x7ffc0000 [ 778.531836][T19172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.576644][T10627] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.589152][ T28] audit: type=1326 audit(2000000157.661:14288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.19018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9cc98cdd9 code=0x7ffc0000 [ 778.594659][T10627] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.640133][ T28] audit: type=1326 audit(2000000157.661:14289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.19018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9cc98cdd9 code=0x7ffc0000 [ 778.683955][T10627] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.691954][ T28] audit: type=1326 audit(2000000157.661:14290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.19018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9cc98cdd9 code=0x7ffc0000 [ 778.712123][T10627] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.741135][ T28] audit: type=1326 audit(2000000157.661:14291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.19018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9cc98cdd9 code=0x7ffc0000 [ 778.804960][ T28] audit: type=1326 audit(2000000157.661:14292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.19018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9cc98cdd9 code=0x7ffc0000 [ 778.806949][T10627] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.846550][ T28] audit: type=1326 audit(2000000157.671:14293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.19018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7ff9cc98cdd9 code=0x7ffc0000 [ 778.874874][ T28] audit: type=1326 audit(2000000157.671:14294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.19018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9cc98cdd9 code=0x7ffc0000 [ 778.898887][T10627] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.899146][T10627] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.899300][T10627] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.934673][T19604] gretap0: entered promiscuous mode [ 778.966235][ T28] audit: type=1326 audit(2000000157.671:14295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.19018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9cc98cdd9 code=0x7ffc0000 [ 779.009214][T19611] netlink: 28 bytes leftover after parsing attributes in process `syz.8.18970'. [ 779.098946][T19623] loop9: detected capacity change from 0 to 512 [ 779.126509][T19623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 779.186598][T19623] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.209413][T19623] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.369369][T19653] macvtap1: entered promiscuous mode [ 779.402609][T19656] loop4: detected capacity change from 0 to 1024 [ 779.497616][T19161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.512586][T19662] netlink: 14 bytes leftover after parsing attributes in process `syz.8.19036'. [ 779.522304][T19657] loop2: detected capacity change from 0 to 4096 [ 779.556606][T19657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.654153][T19172] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.763176][T19678] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.19041'. [ 779.899161][T19707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19050'. [ 779.921217][T19707] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.928538][T19707] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.960599][T19707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19050'. [ 780.016950][T19710] lo speed is unknown, defaulting to 1000 [ 780.089390][T19732] serio: Serial port ptm0 [ 780.182125][T19747] loop8: detected capacity change from 0 to 512 [ 780.212416][T19747] EXT4-fs: Ignoring removed mblk_io_submit option [ 780.239599][T19747] EXT4-fs (loop8): orphan cleanup on readonly fs [ 780.300709][T19747] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 780.342766][T19747] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.19060: attempt to clear invalid blocks 2 len 1 [ 780.358238][T19747] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 780.363909][T19747] EXT4-fs (loop8): Remounting filesystem read-only [ 780.373151][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 780.373174][ C1] EXT4-fs (loop8): initial error at time 2000000159: ext4_clear_blocks:876: inode 13 [ 780.373209][ C1] EXT4-fs (loop8): last error at time 2000000159: ext4_clear_blocks:876: inode 13 [ 780.455076][T19747] EXT4-fs (loop8): 1 truncate cleaned up [ 780.461327][T19747] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 780.634248][T19790] loop9: detected capacity change from 0 to 1024 [ 780.656234][T19790] EXT4-fs: Ignoring removed bh option [ 780.703286][T19790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.784342][T19771] lo speed is unknown, defaulting to 1000 [ 780.816679][T19161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.983662][T19176] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.066678][T19830] sock: sock_set_timeout: `syz.8.19078' (pid 19830) tries to set negative timeout [ 781.150502][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.172083][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.187595][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.201038][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.229108][T19840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.259223][T19838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.279914][T19838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.529273][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.607640][T14757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.731710][T19915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19106'. [ 781.993682][T19942] netlink: 'syz.2.19111': attribute type 1 has an invalid length. [ 782.038521][T19942] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.19111'. [ 782.066125][T19950] loop9: detected capacity change from 0 to 512 [ 782.113078][T19950] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.222986][T19950] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.276101][T19967] netlink: 'syz.6.19116': attribute type 3 has an invalid length. [ 782.322592][T19967] netlink: 'syz.6.19116': attribute type 1 has an invalid length. [ 782.352779][T19161] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.355193][T19967] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.19116'. [ 782.401563][T19945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.429487][T19945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.528907][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.548780][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.575316][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.609188][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.641861][T19986] netlink: 24 bytes leftover after parsing attributes in process `syz.9.19118'. [ 782.704298][T19991] loop4: detected capacity change from 0 to 512 [ 782.741683][T19991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 782.782428][T20000] loop9: detected capacity change from 0 to 512 [ 782.797072][T19991] EXT4-fs (loop4): 1 truncate cleaned up [ 782.820010][T20000] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 782.836377][T19991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.849864][T20000] EXT4-fs (loop9): mount failed [ 783.027599][T20015] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.034892][T20015] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.054250][T20019] netlink: 'syz.9.19130': attribute type 13 has an invalid length. [ 783.073099][T20019] netlink: 'syz.9.19130': attribute type 17 has an invalid length. [ 783.104809][T19991] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 783.133659][T17899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.170692][T20015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.183842][T20024] loop4: detected capacity change from 0 to 512 [ 783.194597][T20015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.204487][T20024] EXT4-fs: Ignoring removed bh option [ 783.239671][T20024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.255613][T20024] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 783.281289][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 783.306912][T17899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.322325][T20019] gretap0: left promiscuous mode [ 783.383466][T20019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.400716][T20019] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.412249][T20019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.433131][T20019] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.440322][T20019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.451676][T20019] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.458784][T20019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.483054][T20019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.493300][T20019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.509363][T20019] veth1_vlan: left promiscuous mode [ 783.515602][T20019] veth0_vlan: left promiscuous mode [ 783.523515][T20019] veth0_vlan: entered promiscuous mode [ 783.534440][T20019] veth1_vlan: entered promiscuous mode [ 783.546862][T20019] veth1_macvtap: left promiscuous mode [ 783.554082][T20019] veth0_macvtap: left promiscuous mode [ 783.561194][T20019] veth0_macvtap: entered promiscuous mode [ 783.574215][T20019] veth1_macvtap: entered promiscuous mode [ 783.586190][T20019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.601005][T20019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 783.614203][T20019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 783.626422][T20019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.639567][T20019] gretap0: entered promiscuous mode [ 783.681999][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 783.682016][ T28] audit: type=1400 audit(2000000162.921:14326): avc: denied { mounton } for pid=20045 comm="syz.2.19142" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 783.740078][T20038] bridge0: port 3(vlan2) entered blocking state [ 783.758655][T20038] bridge0: port 3(vlan2) entered disabled state [ 783.771430][T20038] vlan2: entered allmulticast mode [ 783.782939][T20038] dummy0: entered allmulticast mode [ 783.790618][T20038] vlan2: entered promiscuous mode [ 783.795764][T20038] dummy0: entered promiscuous mode [ 783.961076][ T28] audit: type=1326 audit(2000000163.191:14327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.2.19151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5363ccdd9 code=0x7ffc0000 [ 783.971820][T20060] loop4: detected capacity change from 0 to 8192 [ 784.001444][ T28] audit: type=1326 audit(2000000163.191:14328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.2.19151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff5363ccdd9 code=0x7ffc0000 [ 784.053186][T20060] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 784.086188][ T28] audit: type=1326 audit(2000000163.191:14329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.2.19151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5363ccdd9 code=0x7ffc0000 [ 784.174770][ T28] audit: type=1326 audit(2000000163.191:14330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.2.19151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5363ccdd9 code=0x7ffc0000 [ 784.212336][T20076] lo speed is unknown, defaulting to 1000 [ 784.243714][ T28] audit: type=1326 audit(2000000163.191:14331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.2.19151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff5363ccdd9 code=0x7ffc0000 [ 784.273760][ T9654] IPVS: starting estimator thread 0... [ 784.331862][ T28] audit: type=1326 audit(2000000163.241:14332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.2.19151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5363ccdd9 code=0x7ffc0000 [ 784.367347][T20086] IPVS: using max 2688 ests per chain, 134400 per kthread [ 784.379327][T20090] loop4: detected capacity change from 0 to 512 [ 784.414658][ T28] audit: type=1326 audit(2000000163.241:14333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20070 comm="syz.2.19151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff53638d60e code=0x7ffc0000 [ 784.461911][T20090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.484652][T20090] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.536665][ T28] audit: type=1326 audit(2000000163.241:14334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.2.19151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5363ccdd9 code=0x7ffc0000 [ 784.562238][ T28] audit: type=1326 audit(2000000163.241:14335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.2.19151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff5363ccdd9 code=0x7ffc0000 [ 784.630324][T17899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.686106][T17899] ================================================================== [ 784.694253][T17899] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 784.701839][T17899] [ 784.704182][T17899] read-write to 0xffff888237c266e8 of 1 bytes by task 20058 on cpu 0: [ 784.712358][T17899] folio_add_lru+0xa4/0x1e0 [ 784.716914][T17899] shmem_get_folio_gfp+0x7b0/0xd60 [ 784.722060][T17899] shmem_write_begin+0xfc/0x1f0 [ 784.726940][T17899] generic_perform_write+0x183/0x490 [ 784.732254][T17899] shmem_file_write_iter+0xc5/0xf0 [ 784.737431][T17899] vfs_write+0x5a6/0x9f0 [ 784.741717][T17899] __x64_sys_pwrite64+0xfd/0x150 [ 784.746692][T17899] x64_sys_call+0xa2a/0x3020 [ 784.751328][T17899] do_syscall_64+0x12c/0x3b0 [ 784.756000][T17899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.761946][T17899] [ 784.764288][T17899] read to 0xffff888237c266e8 of 1 bytes by task 17899 on cpu 1: [ 784.771934][T17899] __lru_add_drain_all+0x17e/0x450 [ 784.777066][T17899] lru_add_drain_all+0x10/0x20 [ 784.781865][T17899] invalidate_bdev+0x47/0x70 [ 784.786484][T17899] ext4_put_super+0x610/0x7b0 [ 784.791239][T17899] generic_shutdown_super+0xee/0x220 [ 784.796567][T17899] kill_block_super+0x2a/0x70 [ 784.801282][T17899] ext4_kill_sb+0x42/0x80 [ 784.805636][T17899] deactivate_locked_super+0x75/0x1c0 [ 784.811051][T17899] deactivate_super+0x97/0xa0 [ 784.815782][T17899] cleanup_mnt+0x2bb/0x330 [ 784.820244][T17899] __cleanup_mnt+0x19/0x20 [ 784.824727][T17899] task_work_run+0x130/0x1a0 [ 784.829350][T17899] exit_to_user_mode_loop+0x1f4/0x6f0 [ 784.834754][T17899] do_syscall_64+0x232/0x3b0 [ 784.839376][T17899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.845303][T17899] [ 784.847641][T17899] value changed: 0x19 -> 0x1a [ 784.852430][T17899] [ 784.854762][T17899] Reported by Kernel Concurrency Sanitizer on: [ 784.860928][T17899] CPU: 1 UID: 0 PID: 17899 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 784.872046][T17899] Tainted: [W]=WARN [ 784.875864][T17899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 784.885927][T17899] ================================================================== [ 786.488866][T14788] net_ratelimit: 37 callbacks suppressed [ 786.488886][T14788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.569461][ T9650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.031786][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 787.140180][ T3021] eql: remember to turn off Van-Jacobson compression on your slave devices [ 787.373637][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 787.480112][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 787.607366][ T9654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.247454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.499084][T17999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.509432][T14791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.519335][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.648511][ T9650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.528620][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.689542][ T9654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.768780][ T9659] net_ratelimit: 1 callbacks suppressed [ 791.768797][ T9659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.568684][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.809094][ T9650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.847477][ T9650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog