last executing test programs: 15.506874991s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000001400), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058b51684696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c2e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d9581470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b7200"/643], 0x1, 0x11f7, &(0x7f00000024c0)="$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") open(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x34}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="00009d7c50ae00", @ANYRES16=r4, @ANYBLOB="000226bd7000fbdbdf250100000008000c000200000008000400ffffffff14000600200100000000000000000000000000000b00010064736d61726b00000c0001006e6c383032313100060001002d00000014000500fe8000000000000000000000000000aa080004000200000014000600fe880000000000000000000000000001080008000a010102"], 0x90}, 0x1, 0x0, 0x0, 0x20048841}, 0x4040004) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3ca05800", @ANYRES16=r4, @ANYBLOB="000826bd7000fcdbdf25010000000800020005000000080008000000000008000800ac14140c080002000500000008000700ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x20008004}, 0x20008080) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x28, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xe8e}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00'}, 0x10) 15.420972275s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6000400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403}, 0x20}, 0x1, 0xba01}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) open$dir(0x0, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2000) 14.502012175s ago: executing program 3: accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc0bc5310, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc08c5334, &(0x7f0000000480)) tkill(r0, 0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 14.236606136s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x0, 0xa5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) r5 = socket(0x10, 0x3, 0x9) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000007c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) connect$netlink(r5, &(0x7f00000014c0)=@unspec, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c, 0x0, 0x400}, 0x1c}}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='ext4_collapse_range\x00', r2}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) iopl(0x3) (async) tgkill(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r10, 0xffffffffffffffff, 0x36, 0x0, @val=@perf_event}, 0x40) (async) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) (async) bpf$PROG_LOAD(0x677, 0x0, 0xc) r12 = memfd_create(&(0x7f0000000940)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff@vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaB\x1fj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a\x00$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xbc{\xc6\xf6\xb4#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[|\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8eR1AT\xc4v\xddT1\x1a\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\x02\x00\x00\x00%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}3\x0f\x8fg?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xc6x\xe1\xf4H\xc0\xd9\xea\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ`2\xfa\xeaI\x1a\x13\xc5\xf9h\xdb\xbd\xc2j3\x0e\x83M\xa5\xe97\xd6\xda,\x05\xb2b\xf3\xaa\xbd)%\xa94)\xe7\xe8?\x0f/\xd1nC\xceHu\xa8+\x00\x00\x00\x00\x00\x00\x00\x01znNf\x0f\xe6\xf9\xe0\xe6\xe3\xc2ct\xdb\xd8\xf7\x8fG\xfb\x0f\xf4\xe2IV\xb2\x97p\xc7\xb3\x8d\x02g\xab\x14QV\x16\fbu\xc5\xc6X\x8b\xd4z(\xfb\xf1\xa2\xb3\xfd\xcb\xa1i\'\xd7\xa5\x1bs]\xdb\x9aQYg\f\xd6\xe6K\xbf\xcba\xde\v\xf0\xfc8\xe8T\x7fy\xb2\x94,\xb9\xd5\x16\xf1Q\xceQo]^\xe5\x02JvU\x03\xb7\xa4x\xf4\xe1\xd7\xde\xf8\f\x8c\b\x00\xd0q\xa4:\xa4\xc6\xbc\x13\xf2\x04\x00\x00\x00\x00\x00\x00\x00\x88=\xeeiC\xc6*\x04/\x99\xf1q/\x05\xe0v[\xf1\xd1\x8c\xb4G\x1c\x1c\xf8\xc4\xb77`\xea0|\xa8\xb3\xe2\x04\xa4\'\x8eO\xb7\xea\x1a\xca\x049yl\xfe\xf1\xb6/\xc6\x05G\xce\xbdi\x9d$\taB\xf4?\xaf\x9d\xcbd\xca\x1b\xf2\x10\n!\x86%\xe3\xf0\xcc\xb4\aw$?\xfb\x122\'\"\xabD\x7f\vb:~\xf4W\xe3u_\xdd\x93\xbd\xb1.c\x1a\x9e\x94\xd3\xafA\xcdXW\xe1\xb0\x98\x81\xc9\bX\xa6\x7f~\xfa\xfb\x1a\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x7) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10010, r11, 0x37b0f000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4ce4eaffffffffffb96c391a2913704ee923a40e3dfc1963f22b260e8561ecfb9e6f47f87309f33863da558f8cdeadf30853b161d68cf3f593e6b2dc8a69a6fac6c3d937e92452fbfb0aca97b951083463613be0fdf7dab2c8df56924d32c41f6bcc12e1de219be4e2ff242415aac9058afb4d2ee71099a0e95a734672febd94d0dad0a249", @ANYRESHEX=r13, @ANYBLOB="00000000000000002c001280110001006272696467655f736c617607000000001400058005000a000000000005000c0000000000574ef3047ed385ebfd32684ba774f946451a8f0106043e571cc81a7b80d7c5718bb98e5359d75340f9239fbcf041deb4ae64c9103c6cd589aa2f506548cb572e8d1c116d8cb02af82acf5b6ab494d7403fecc80f7aa6e54816ceb00397576d5a2d3f"], 0x4c}}, 0x0) 14.218259389s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (rerun: 64) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x0, 0x1}, 0xc) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3}, &(0x7f0000000200)=0x8) (async) write$binfmt_elf64(r1, 0x0, 0x40) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="2800000014002101000000000000000002020000", @ANYRES32=r4, @ANYBLOB="080009000000008808000200ac1414aa"], 0x28}, 0x1, 0x300000000000000}, 0x0) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x2, 0x39, 0xfe, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x300000000000000}, 0x0) 14.181325465s ago: executing program 3: r0 = socket(0x10, 0x803, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7fffffff) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'bridge0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_getsetattr(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}}, 0x24}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0), &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 1.30422829s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x1, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xdef7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x33f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8881) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) 1.231327571s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = eventfd2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x0, 0x0) r4 = dup3(r2, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000600)=ANY=[@ANYRES16=r6, @ANYBLOB="a66e2eb55746073a32c5c3", @ANYRESOCT=r1, @ANYBLOB="fd09a8065b076fddc204e1a5afe0c7e33843896dad6f49d02a65b173932a1c23fac9f01f89e2c038484d953df443963028415aefc5e7bdbbd31721d8a5339c7f206fa3b543d69d516f2177843f0a569a90f945fe0f0ec6843bd5ba4e6bf3768d9149b96f8436b6dc7ceec503b9013558a696f2d421694c9b2149e5854d5700abf9dc6c0888551b813f133ad13e58d15abd16eabc89623640acd0721762b58935a35166ea3930d06170b0313dccdc186250ce26d21e679fe6"], 0x36) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc030b2c00db18686158bbcfe8875a060300000023000000000000000000000000ac1414aa89"], 0xfdef) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c040000020301010000000000000000000000000800010001000000"], 0x1c}}, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000400)={0xe62, 0x1, 0x4000, 0xb0e, 0xb, "3123ea7321201340192a02e6307423e34811ed"}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f00000000c0)) setregid(0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="a2", 0x1}, {&(0x7f0000000340)="8bac343f8c8d6dc39be3e50f245eb1f5bfae6d96b7e0af82242762a1f03d5132f05fab97d339e73d44e5092f221b2d37162f9a7445a3450e5225a59a67806792d5ba26346890d1e50ac275b37d835e573e609ce4a85740f067b4898e39cb6424720b199ec396b7795becf502bb99fb2a59c072e7908516e739d092bcdb16bdb8213059f221b214956aeab5ee78b01ab073a9b06fa98955e411f2f685070d3678639b9af59f20c38453ec8f26f209af3438f3c0", 0xb3}], 0x2, 0x0, 0x0, 0x47}, 0x40000000) fadvise64(r0, 0x1000000002, 0x2, 0x4) write$binfmt_script(r6, &(0x7f0000000480)={'#! ', './bus', [{0x20, '\xf9\xb1\'$'}, {0x20, '\xf9\xb1\'$'}, {}, {0x20, '{}:@*'}, {0x20, '!,&'}, {}, {0x20, '^\xb7*][-'}, {0x20, 'syzkaller1\x00'}, {0x20, 'syzkaller1\x00'}, {0x20, 'syzkaller1\x00'}]}, 0x4a) 1.217502573s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6000400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403}, 0x20}, 0x1, 0xba01}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) open$dir(0x0, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2000) 1.206242095s ago: executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x20000000000001ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @multicast}, 0x1c, {0x2, 0x4e22, @remote}, 'bond_slave_0\x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r5, &(0x7f0000000740)=[{&(0x7f00000007c0)=""/208, 0xd0}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000640)=""/231, 0xe7}, {&(0x7f00000005c0)=""/37, 0x25}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x5, 0x6, 0x0) r6 = signalfd4(r1, &(0x7f0000000000)={[0x10001]}, 0x8, 0x80000) sendto$inet_nvme_pdu(r6, &(0x7f0000000040)=@data_h2c={{0x6, 0x7, 0x18, 0xc, 0x5}, 0x0, 0x400, 0x9, 0x2, "d5c9ce07"}, 0x80, 0x0, 0x0, 0x0) 1.199991805s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000240)='./file0\x00', 0x6912fe, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x40, 0xfffff00c}, {0x6}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 1.175038759s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e80000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x6000000, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYBLOB], 0x34}}, 0x0) 1.161487492s ago: executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000500)={0x42, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) (async) sendmsg$tipc(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r3 = dup3(r0, r1, 0x0) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={&(0x7f0000001540)="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", &(0x7f0000000200)="2a2f4b1c378b9169d2933e14fb27285c45f4cd7eff95b6bc2b0676209daffd849fb618ac0989ed5f774aea106140e5a82231dfdf4460f93b578a34ea27c4ebafaa1b387af8297fa17b5b36d7788de1ae5b"}}, &(0x7f00000001c0)) r4 = gettid() (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x14) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=""/4096, 0x10f, 0x1000, 0x1, 0x401}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x58, 0x0, 0x0, 0x0, &(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x1, {0x0, r8}}) (async) io_uring_enter(r5, 0x2d7e, 0x0, 0x0, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001700000000000000470000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r10}, 0x10) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xc1) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.109162179s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000018000000000000000013d8cc32207a787200000002000000"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000180), r3) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x60, 0x1, 0x0, @mcast1, @loopback, 0x1, 0x0, 0x3441, 0x9}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @initdev}, &(0x7f00000004c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRES32=r10, @ANYBLOB="000000000000000014001680100001800c000500ffef24ebbeaa8395be5650e5a8420ae78b058f0385b818879a01ffff020000000800040000000000"], 0x3c}}, 0x4000010) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@mcast2, 0x0}, &(0x7f0000000440)=0x14) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006700000000000000a50000001000814b9bd9eb2a79f7e618"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r14}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001c00070c000000000000000007000000", @ANYRES32=r13, @ANYBLOB="800000000a000200bbbbbbbbbbbb0000060005000100e700"], 0x30}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="a0020000", @ANYRES16=0x0, @ANYBLOB="000425bd7000f7dbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400028000000100000001006c625f686173685f737461747300000000000000000000000000000000000000000003000b0000000000040002000000000007000000000008000100", @ANYRESHEX=r0, @ANYBLOB="3c09008038000100000001006e6f746966795f70656572735f696e74657276616c0000000000000000000000500003000300007b570000000400098d183b08000100", @ANYRES32=r13, @ANYBLOB="080102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB], 0x2a0}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="bd370000e0d49010c2f556b0cd159d4e1941549285c18679ffe6", @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000050002000a000000"], 0x1c}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.079748414s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000240)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x5c}, {0x6}]}, 0x10) r1 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) 882.936254ms ago: executing program 4: socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20000483, &(0x7f00000000c0)={[{@dioread_lock}, {@stripe={'stripe', 0x3d, 0x6}}, {@abort}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@dax}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4aa, &(0x7f0000000740)="$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") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 818.302424ms ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6000400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403}, 0x20}, 0x1, 0xba01}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) open$dir(0x0, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 777.05679ms ago: executing program 4: unshare(0x62040200) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea1101650005000000", 0x29}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0xfffe, &(0x7f00000001c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63720000000000"], 0xfdef) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r1 = syz_io_uring_setup(0x3, 0x0, 0x0, &(0x7f0000003580)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000002c0)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd9) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @private=0xa010102}, 0x10) ppoll(&(0x7f00000000c0)=[{r3, 0x64a2}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="30000000d708010300000000fffffff30000000007000240000000000500037ae5a2aab435c962800800014000000000"], 0x30}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000200)='E', 0xfffffffffffffdef, 0x15, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001e00)={'macsec0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 760.668063ms ago: executing program 1: r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x344b, 0x40, 0x0, 0xfffffffc}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/159, 0x9f}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/159, 0x9f}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 718.32432ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = eventfd2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x0, 0x0) r4 = dup3(r2, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000600)=ANY=[@ANYRES16=r6, @ANYBLOB="a66e2eb55746073a32c5c3", @ANYRESOCT=r1, @ANYBLOB="fd09a8065b076fddc204e1a5afe0c7e33843896dad6f49d02a65b173932a1c23fac9f01f89e2c038484d953df443963028415aefc5e7bdbbd31721d8a5339c7f206fa3b543d69d516f2177843f0a569a90f945fe0f0ec6843bd5ba4e6bf3768d9149b96f8436b6dc7ceec503b9013558a696f2d421694c9b2149e5854d5700abf9dc6c0888551b813f133ad13e58d15abd16eabc89623640acd0721762b58935a35166ea3930d06170b0313dccdc186250ce26d21e679fe6"], 0x36) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc030b2c00db18686158bbcfe8875a060300000023000000000000000000000000ac1414aa89"], 0xfdef) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c040000020301010000000000000000000000000800010001000000"], 0x1c}}, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000400)={0xe62, 0x1, 0x4000, 0xb0e, 0xb, "3123ea7321201340192a02e6307423e34811ed"}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f00000000c0)) setregid(0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="a2", 0x1}, {&(0x7f0000000340)="8bac343f8c8d6dc39be3e50f245eb1f5bfae6d96b7e0af82242762a1f03d5132f05fab97d339e73d44e5092f221b2d37162f9a7445a3450e5225a59a67806792d5ba26346890d1e50ac275b37d835e573e609ce4a85740f067b4898e39cb6424720b199ec396b7795becf502bb99fb2a59c072e7908516e739d092bcdb16bdb8213059f221b214956aeab5ee78b01ab073a9b06fa98955e411f2f685070d3678639b9af59f20c38453ec8f26f209af3438f3c0", 0xb3}], 0x2, 0x0, 0x0, 0x47}, 0x40000000) fadvise64(r0, 0x1000000002, 0x2, 0x4) write$binfmt_script(r6, &(0x7f0000000480)={'#! ', './bus', [{0x20, '\xf9\xb1\'$'}, {0x20, '\xf9\xb1\'$'}, {}, {0x20, '{}:@*'}, {0x20, '!,&'}, {}, {0x20, '^\xb7*][-'}, {0x20, 'syzkaller1\x00'}, {0x20, 'syzkaller1\x00'}, {0x20, 'syzkaller1\x00'}]}, 0x4a) 700.590732ms ago: executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x15, 0x0, 0x0, 0xa83}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r2) 355.234895ms ago: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230310000700600000000200"]) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80005520, 0x0) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80005520, 0x0) r1 = socket(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4880) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@setlink={0x30, 0x13, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x40, 0x2000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x56a6}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x8038550a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x1, 0x700, 0x5e90, 0x6, {{0x19, 0x4, 0x2, 0x2c, 0x64, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast2, @multicast2, {[@generic={0x86, 0xd, "fd833aea80f372c9ff2719"}, @ssrr={0x89, 0x13, 0xf8, [@dev, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0xcb, 0x1, 0x4, [{@rand_addr=0x64010102, 0x5}, {@local, 0xd5e2}, {@multicast2, 0xb3}, {@private=0xa010100, 0x3}, {@multicast2, 0xc9b}]}, @noop]}}}}}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000380), 0x8, 0xdb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000340)) 298.706754ms ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000240)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x5c}, {0x6}]}, 0x10) r1 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) 159.792065ms ago: executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000069000b00000000200c00000000000000000000000800010002"], 0x20}}, 0x0) 148.947617ms ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000018000000000000000013d8cc32207a787200000002000000"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000180), r3) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x60, 0x1, 0x0, @mcast1, @loopback, 0x1, 0x0, 0x3441, 0x9}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @initdev}, &(0x7f00000004c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRES32=r10, @ANYBLOB="000000000000000014001680100001800c000500ffef24ebbeaa8395be5650e5a8420ae78b058f0385b818879a01ffff020000000800040000000000"], 0x3c}}, 0x4000010) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@mcast2, 0x0}, &(0x7f0000000440)=0x14) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006700000000000000a50000001000814b9bd9eb2a79f7e618"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r14}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001c00070c000000000000000007000000", @ANYRES32=r13, @ANYBLOB="800000000a000200bbbbbbbbbbbb0000060005000100e700"], 0x30}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="a0020000", @ANYRES16=0x0, @ANYBLOB="000425bd7000f7dbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="2401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400028000000100000001006c625f686173685f737461747300000000000000000000000000000000000000000003000b0000000000040002000000000007000000000008000100", @ANYRESHEX=r0, @ANYBLOB="3c09008038000100000001006e6f746966795f70656572735f696e74657276616c0000000000000000000000500003000300007b570000000400098d183b08000100", @ANYRES32=r13, @ANYBLOB="080102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB], 0x2a0}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="bd370000e0d49010c2f556b0cd159d4e1941549285c18679ffe6", @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000050002000a000000"], 0x1c}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 115.579462ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4c6, &(0x7f0000000100)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002080)={0xffffffffffffffff, 0x0, &(0x7f00000020c0)=""/4088, 0xc26bfe8e8f6baca8}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000002040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3f, 0x7ffc1ffb}]}) recvmsg(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) bpf$BPF_PROG_TEST_RUN(0x21, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000003c0)={[{@errors_remount}, {@nodiscard}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x77}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@sysvgroups}, {@grpid}, {@data_journal}]}, 0x14, 0x4e8, &(0x7f0000001100)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001403000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000007c000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a7c31de7910d1ed4065a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3503680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dacfeb47479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3de8726c2a61ec45c19f97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9bdce38c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4af05c28308241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5490f6589880ed6eea7b9c670012be05e7de0940313c5870786554df2623d58f5ace92d028f2c71a6ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77962a2cd8a104e16b77d5f7f13b1640d43e11801140caf1a8b1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b905fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf34117a82a96b2ced73abb8e4bb718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000001762e5f5a3a0bc33fdbe28a5ffc83f2f08544eb2794e7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f85d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d801002653c4d9818708e27c89b552d3fcd11ebce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff2a8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4000000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782ae57773e0d8b0ab900edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0bd91e328b6a6f732a91f0e2e9120be61e58c79d497247d278888901d44bf77ff246605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c2d0836395fe39f0e11c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc71300000000000021000000b12f0ec0412268860027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b50f3ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861ddb54684cb73e7aeefae47fa09fd88e6043bd52ae84c1bb0c8a6b769f952283a1f4e3842edb3d42c68a2102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e81163bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4c4b51b1f922a44ec675203bf8d1548e49262727c3de6daab3b4ed15aa99802e45d0620617e839b5237ddfcf103c91e61d174e3be6c9fd47398797e3b814e751ff31ecb42de6dd9d6b88121aaa680c236a303914e00150e1ec3f144ebc28287d5b51cfb8cabb844d12b140767d0fc24425590024b2e431722392489e3d43b3e31438a0138988083c47c61384d54e9a40fba01cac6e59ec82edc764840fe551c1d57442970cd8e59b9f41094e158c0a1ee855d8515599685486c2a21fa1c107531a0db8306441e8408b34aa90e9736e672d74cb8e78f8bdb93a23d024fc200796836ab396911a56231e953efad6cd83db32ffc595d970108e9547ea0000002730d5d1b70fe8b458ac1651135037b6cb9c8053299f77ab84c5b9fd2f764c3caa9c69377c397d310ddc7bc4bfa165def7b49e28ef196ae263b6829a8419d8860f56c86c288964ac4bc19839d96ff24b981c3a4fd6f93a000000ea9d6b06dafae4c91177"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) r3 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000019c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001980)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xfffffffffffff67c, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x800]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, 0x0, 0x0, @inherit={0x58, 0x0}, @devid=r5}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f00000001c0)) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) 112.456883ms ago: executing program 2: accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc0bc5310, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc08c5334, &(0x7f0000000480)) tkill(r0, 0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 65.22625ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = eventfd2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x0, 0x0) r4 = dup3(r2, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000600)=ANY=[@ANYRES16=r6, @ANYBLOB="a66e2eb55746073a32c5c3", @ANYRESOCT=r1, @ANYBLOB="fd09a8065b076fddc204e1a5afe0c7e33843896dad6f49d02a65b173932a1c23fac9f01f89e2c038484d953df443963028415aefc5e7bdbbd31721d8a5339c7f206fa3b543d69d516f2177843f0a569a90f945fe0f0ec6843bd5ba4e6bf3768d9149b96f8436b6dc7ceec503b9013558a696f2d421694c9b2149e5854d5700abf9dc6c0888551b813f133ad13e58d15abd16eabc89623640acd0721762b58935a35166ea3930d06170b0313dccdc186250ce26d21e679fe6"], 0x36) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc030b2c00db18686158bbcfe8875a060300000023000000000000000000000000ac1414aa89"], 0xfdef) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c040000020301010000000000000000000000000800010001000000"], 0x1c}}, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000400)={0xe62, 0x1, 0x4000, 0xb0e, 0xb, "3123ea7321201340192a02e6307423e34811ed"}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f00000000c0)) setregid(0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="a2", 0x1}, {&(0x7f0000000340)="8bac343f8c8d6dc39be3e50f245eb1f5bfae6d96b7e0af82242762a1f03d5132f05fab97d339e73d44e5092f221b2d37162f9a7445a3450e5225a59a67806792d5ba26346890d1e50ac275b37d835e573e609ce4a85740f067b4898e39cb6424720b199ec396b7795becf502bb99fb2a59c072e7908516e739d092bcdb16bdb8213059f221b214956aeab5ee78b01ab073a9b06fa98955e411f2f685070d3678639b9af59f20c38453ec8f26f209af3438f3c0", 0xb3}], 0x2, 0x0, 0x0, 0x47}, 0x40000000) fadvise64(r0, 0x1000000002, 0x2, 0x4) write$binfmt_script(r6, &(0x7f0000000480)={'#! ', './bus', [{0x20, '\xf9\xb1\'$'}, {0x20, '\xf9\xb1\'$'}, {}, {0x20, '{}:@*'}, {0x20, '!,&'}, {}, {0x20, '^\xb7*][-'}, {0x20, 'syzkaller1\x00'}, {0x20, 'syzkaller1\x00'}, {0x20, 'syzkaller1\x00'}]}, 0x4a) 29.415685ms ago: executing program 2: r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000020400181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) preadv2(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1, 0xffffffff, 0x9, 0x1) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01030000000000000000050000000e0001006e657464657673696d0008000f0002"], 0x34}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000580)="04fe9771816ee16d7308bf78789b9d2a4b7b23004fa1e9972e7efa2e6d4f8facf42cc7ffd79a63e4f522517d50939932b85684263e8460872f63acaa4cfad7101dba3c6b1770bd420e3e8763a320ac39b2d5c807138a14a3a1a143fe56586a4b28359432de1ef68579cf4ba8f6e41a5afa644aaab08054718abf3fc1bb6230c1d4a058fdff7616205b8d5e5cdb1673140b2290fb04f7008726", 0x99}, {&(0x7f0000000700)="0393242b68fc5c527a6d2bfb20d88deac168b7349182426d1c8d1a1a7ef3d02db8fa3bf49dcc909d76bf5728c9f2e4371b8388334fa4a7fc19e979c5ad2af8a12e4da434cd734094eaff2b50ff0d835fd875481e6f0af406cc45cc232a146559e54b06a9afc7b114f26afe45bf47167a9f5aa24d3b3e547ad33f9828e9323668914cee69e3afca7cd223fc2ef7bd7d5b55467cd14227dad1fa2b2108d7099d6f141b6ebeddd5", 0xa6}, {&(0x7f00000017c0)="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", 0x1007}], 0x3}}], 0x1, 0x20040004) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r7, &(0x7f0000000240)="2338dcfa67c78a50095e74401b6cc0914ab28f7554d2f66e4932ccbd9df4aa717439252e20a2196296f5328f0800000000d05807f47d5d5db836f81553dae5", 0xfffffd5f) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000300)={0xf049, 0x0, 0x2, 0x1f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) syz_io_uring_setup(0x57ab, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040)) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x3ddfdbff, 0x80}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0xd) close(r8) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60) getsockopt$nfc_llcp(r9, 0x118, 0x2, &(0x7f0000000240)=""/12, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) 0s ago: executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socketpair(0x0, 0x1, 0xfffe, &(0x7f0000000000)) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63720000000000"], 0xfdef) (async) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000003580)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000002c0)) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd9) (rerun: 32) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x14, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101001) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000a6"]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001e00)={'macsec0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) kernel console output (not intermixed with test programs): utor.0'. [ 33.074660][ T3637] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 33.151206][ T3100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.291720][ T3675] loop2: detected capacity change from 0 to 1024 [ 33.306903][ T3675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.310243][ T3677] loop4: detected capacity change from 0 to 2364 [ 33.329453][ T3677] isofs: isofs_export_get_parent(): child directory not normalized! [ 33.457402][ T3699] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 33.469564][ T3699] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 33.471556][ T3698] loop3: detected capacity change from 0 to 1024 [ 33.483149][ T3699] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.518166][ T3698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.612351][ T3724] loop1: detected capacity change from 0 to 256 [ 33.742560][ T3734] loop4: detected capacity change from 0 to 8192 [ 33.861353][ T3738] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 33.892431][ T3740] loop1: detected capacity change from 0 to 2048 [ 33.899836][ T3740] EXT4-fs: Ignoring removed bh option [ 33.905287][ T3740] ext4: Unknown parameter 'noacl' [ 34.212744][ T3100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.284242][ T3749] loop2: detected capacity change from 0 to 512 [ 34.291975][ T3749] EXT4-fs: Ignoring removed nobh option [ 34.298230][ T3749] ext2: Unknown parameter 'appraise_type' [ 34.305391][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.567550][ T3779] loop2: detected capacity change from 0 to 1024 [ 34.587001][ T3779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.612314][ T3100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.629188][ T3788] loop0: detected capacity change from 0 to 1024 [ 34.646155][ T3788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.670002][ T3793] loop2: detected capacity change from 0 to 256 [ 34.670247][ T3786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 34.695664][ T3786] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 34.712462][ T3793] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097162) [ 34.770778][ T3803] 9pnet_virtio: no channels available for device [ 34.951450][ T3826] loop4: detected capacity change from 0 to 1024 [ 34.966682][ T3826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.994849][ T3113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.026892][ T3827] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 35.066759][ T3848] loop4: detected capacity change from 0 to 164 [ 35.069785][ T3850] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.1'. [ 35.297756][ T3856] loop1: detected capacity change from 0 to 256 [ 35.454590][ T3102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.580584][ T3868] 9pnet_virtio: no channels available for device [ 35.672524][ T3873] loop3: detected capacity change from 0 to 1024 [ 35.687195][ T3873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.739215][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.782697][ T3884] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 35.810116][ T3892] loop2: detected capacity change from 0 to 1024 [ 35.819813][ T3892] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.830858][ T3892] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 35.834179][ C1] hrtimer: interrupt took 18296 ns [ 35.839570][ T3892] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.850464][ T3892] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 35.864865][ T3892] EXT4-fs (loop2): 1 orphan inode deleted [ 35.881039][ T3892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.895990][ T3897] loop0: detected capacity change from 0 to 1024 [ 35.936726][ T3897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.098302][ T3906] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 36.199168][ T3906] loop4: detected capacity change from 0 to 2364 [ 36.232473][ T3906] isofs: isofs_export_get_parent(): child directory not normalized! [ 36.236941][ T3912] 9pnet_virtio: no channels available for device [ 36.380857][ T3920] loop4: detected capacity change from 0 to 1024 [ 36.419259][ T3920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.476699][ T3113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.488603][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 36.488688][ T29] audit: type=1400 audit(2000000010.300:1738): avc: denied { create } for pid=3925 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.612817][ T3934] loop4: detected capacity change from 0 to 164 [ 36.661630][ T29] audit: type=1400 audit(2000000010.470:1739): avc: denied { cpu } for pid=3940 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.697391][ T3102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.857808][ T29] audit: type=1400 audit(2000000010.670:1740): avc: denied { write } for pid=3945 comm="syz-executor.0" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 36.902116][ T29] audit: type=1400 audit(2000000010.690:1741): avc: denied { open } for pid=3945 comm="syz-executor.0" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.028990][ T3961] loop0: detected capacity change from 0 to 1024 [ 37.046151][ T3961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.105718][ T3102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.199791][ T3969] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 37.229796][ T3969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 37.262097][ T29] audit: type=1400 audit(2000000011.070:1742): avc: denied { create } for pid=3968 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.282764][ T3969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 37.371621][ T3977] loop0: detected capacity change from 0 to 512 [ 37.389191][ T3977] EXT4-fs: Ignoring removed bh option [ 37.400836][ T3977] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 37.417468][ T3977] EXT4-fs (loop0): 1 truncate cleaned up [ 37.427706][ T3977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.443365][ T29] audit: type=1400 audit(2000000011.250:1743): avc: denied { mounton } for pid=3975 comm="syz-executor.0" path="/root/syzkaller-testdir1644452816/syzkaller.9j9OoK/43/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.514276][ T3977] loop0: detected capacity change from 512 to 64 [ 37.530279][ T3977] syz-executor.0: attempt to access beyond end of device [ 37.530279][ T3977] loop0: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 37.543892][ T3977] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 37.555053][ T3977] Buffer I/O error on device loop0, logical block 36 [ 37.604505][ T3977] syz-executor.0: attempt to access beyond end of device [ 37.604505][ T3977] loop0: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 37.618120][ T3977] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 37.629275][ T3977] Buffer I/O error on device loop0, logical block 36 [ 37.644980][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 37.664999][ T29] audit: type=1400 audit(2000000011.480:1744): avc: denied { ioctl } for pid=3975 comm="syz-executor.0" path="/root/syzkaller-testdir1644452816/syzkaller.9j9OoK/43/file0/memory.events" dev="loop0" ino=19 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.696058][ T3993] loop3: detected capacity change from 0 to 164 [ 37.710439][ T3993] syz-executor.3: attempt to access beyond end of device [ 37.710439][ T3993] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 37.728911][ T3977] syz-executor.0: attempt to access beyond end of device [ 37.728911][ T3977] loop0: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 37.742863][ T3977] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 37.754198][ T3977] Buffer I/O error on device loop0, logical block 255 [ 37.762249][ T3993] syz-executor.3: attempt to access beyond end of device [ 37.762249][ T3993] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.777232][ T3993] syz-executor.3: attempt to access beyond end of device [ 37.777232][ T3993] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.791066][ T3993] syz-executor.3: attempt to access beyond end of device [ 37.791066][ T3993] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.806636][ T3993] syz-executor.3: attempt to access beyond end of device [ 37.806636][ T3993] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.821172][ T3977] syz-executor.0: attempt to access beyond end of device [ 37.821172][ T3977] loop0: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 37.834935][ T3977] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 37.846168][ T3977] Buffer I/O error on device loop0, logical block 253 [ 37.852928][ T3977] Buffer I/O error on device loop0, logical block 254 [ 37.863485][ T29] audit: type=1400 audit(2000000011.660:1745): avc: denied { mounton } for pid=3975 comm="syz-executor.0" path="/root/syzkaller-testdir1644452816/syzkaller.9j9OoK/43/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.892361][ T3993] syz-executor.3: attempt to access beyond end of device [ 37.892361][ T3993] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.907017][ T29] audit: type=1400 audit(2000000011.700:1746): avc: denied { write } for pid=3975 comm="syz-executor.0" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 37.930833][ T29] audit: type=1400 audit(2000000011.720:1747): avc: denied { shutdown } for pid=3985 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.962083][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 37.983506][ T3977] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 37.994704][ T3977] Buffer I/O error on device loop0, logical block 37 [ 37.994716][ T3977] Buffer I/O error on device loop0, logical block 38 [ 37.994725][ T3977] Buffer I/O error on device loop0, logical block 39 [ 37.994734][ T3977] Buffer I/O error on device loop0, logical block 40 [ 37.994871][ T3977] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 37.994917][ T3977] Buffer I/O error on device loop0, logical block 249 [ 38.040197][ T3102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.528443][ T4009] loop3: detected capacity change from 0 to 1024 [ 38.575130][ T4009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.581496][ T4021] loop0: detected capacity change from 0 to 164 [ 38.620708][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.630434][ T4021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 38.744779][ T4036] loop0: detected capacity change from 0 to 164 [ 38.755061][ T4035] process 'syz-executor.3' launched '/dev/fd/5' with NULL argv: empty string added [ 38.800451][ T4041] loop3: detected capacity change from 0 to 1024 [ 38.826726][ T4041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.878012][ T3100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.204349][ T4065] loop2: detected capacity change from 0 to 1024 [ 39.215914][ T4065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.237422][ T3100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.625642][ T4094] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 39.638707][ T3178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3178 comm=kworker/0:3 [ 39.652996][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.701188][ T4101] atomic_op ffff88811aa4e928 conn xmit_atomic 0000000000000000 [ 39.717031][ T4105] loop3: detected capacity change from 0 to 1024 [ 39.743239][ T4105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.096503][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.136349][ T4122] loop2: detected capacity change from 0 to 164 [ 40.155585][ T4126] loop4: detected capacity change from 0 to 164 [ 40.165530][ T4128] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 40.189179][ T4130] loop3: detected capacity change from 0 to 512 [ 40.196629][ T4130] EXT4-fs: Ignoring removed bh option [ 40.202201][ T4130] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 40.214356][ T4130] EXT4-fs (loop3): 1 truncate cleaned up [ 40.220453][ T4130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.274816][ T4130] loop3: detected capacity change from 512 to 64 [ 40.282676][ T4130] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 40.295864][ T4130] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 40.307942][ T4130] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 40.319532][ T4130] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 40.332025][ T4130] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 40.343262][ T4130] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 40.369690][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.528416][ T4149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 40.540096][ T4149] devtmpfs: Unknown parameter 'nr_inodes4Cp%O9u7' [ 40.551871][ T4151] loop0: detected capacity change from 0 to 1024 [ 40.558788][ T4149] wg2: entered promiscuous mode [ 40.563671][ T4149] wg2: entered allmulticast mode [ 40.576124][ T4151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.600580][ T3102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.645394][ T4155] loop0: detected capacity change from 0 to 1024 [ 40.655618][ T4155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.684100][ T3102] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.796365][ T4168] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 40.817766][ T4173] loop3: detected capacity change from 0 to 512 [ 40.824971][ T4173] EXT4-fs: Ignoring removed bh option [ 40.830583][ T4173] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 40.839829][ T4173] EXT4-fs (loop3): 1 truncate cleaned up [ 40.845806][ T4173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.894226][ T4173] loop3: detected capacity change from 512 to 64 [ 40.901960][ T4173] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 40.915441][ T4173] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 40.926626][ T4173] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 40.937843][ T4173] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 40.949534][ T4173] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 40.960758][ T4173] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 40.987781][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.036609][ T4181] loop2: detected capacity change from 0 to 128 [ 41.046343][ T4181] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 41.055630][ T4181] FAT-fs (loop2): FAT read failed (blocknr 255) [ 41.067066][ T4185] loop4: detected capacity change from 0 to 1024 [ 41.086436][ T4185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.105659][ T4181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 41.116150][ T3113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.135752][ T4193] loop2: detected capacity change from 0 to 1024 [ 41.146245][ T4193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.179048][ T4198] loop3: detected capacity change from 0 to 164 [ 41.192691][ T3100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.269056][ T4205] loop3: detected capacity change from 0 to 512 [ 41.277137][ T4209] loop4: detected capacity change from 0 to 512 [ 41.284456][ T4209] EXT4-fs: Ignoring removed bh option [ 41.286529][ T4205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.293760][ T4209] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 41.302364][ T4205] ext4 filesystem being mounted at /root/syzkaller-testdir1465844435/syzkaller.0BN6Yr/71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.319978][ T4213] loop2: detected capacity change from 0 to 164 [ 41.334107][ T4209] EXT4-fs (loop4): 1 truncate cleaned up [ 41.337823][ T4205] vxcan1: entered promiscuous mode [ 41.340288][ T4209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.345022][ T4205] vxcan1: entered allmulticast mode [ 41.365312][ T4205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.427662][ T4209] loop4: detected capacity change from 512 to 64 [ 41.436763][ T4209] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 41.456113][ T4209] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 41.473449][ T4209] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 41.487106][ T4209] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 41.498608][ T4209] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 41.510797][ T4209] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 41.526462][ T4216] 9pnet_fd: Insufficient options for proto=fd [ 41.554972][ T3113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.607109][ T4227] loop4: detected capacity change from 0 to 1024 [ 41.614910][ T4227] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 41.688287][ T4232] loop3: detected capacity change from 0 to 1024 [ 41.700129][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 41.700159][ T29] audit: type=1400 audit(2000000015.510:1850): avc: denied { create } for pid=4233 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 41.728220][ T4232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.753925][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.802138][ T29] audit: type=1326 audit(2000000015.610:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 41.826601][ T29] audit: type=1326 audit(2000000015.610:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 41.852515][ T29] audit: type=1326 audit(2000000015.610:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 41.865741][ T4239] loop3: detected capacity change from 0 to 1024 [ 41.876538][ T29] audit: type=1326 audit(2000000015.610:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 41.906802][ T29] audit: type=1326 audit(2000000015.610:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 41.930790][ T29] audit: type=1326 audit(2000000015.670:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 41.954829][ T29] audit: type=1326 audit(2000000015.670:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 41.974505][ T4239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.978955][ T29] audit: type=1326 audit(2000000015.670:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 42.015396][ T29] audit: type=1326 audit(2000000015.670:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4238 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f59760bb0e3 code=0x7ffc0000 [ 42.056912][ T4243] loop4: detected capacity change from 0 to 1024 [ 42.085599][ T4243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.106232][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.122670][ T3113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.208578][ T4254] loop3: detected capacity change from 0 to 512 [ 42.225985][ T4254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.238645][ T4254] ext4 filesystem being mounted at /root/syzkaller-testdir1465844435/syzkaller.0BN6Yr/78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.267940][ T4254] vxcan1: entered promiscuous mode [ 42.273216][ T4254] vxcan1: entered allmulticast mode [ 42.289376][ T4265] loop4: detected capacity change from 0 to 512 [ 42.297187][ T4265] EXT4-fs: Ignoring removed bh option [ 42.303271][ T4265] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 42.307747][ T4254] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.324070][ T4265] EXT4-fs (loop4): 1 truncate cleaned up [ 42.330826][ T4265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.352880][ T4270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 42.366031][ T4270] devtmpfs: Unknown parameter 'nr_inodes4Cp%O9u7' [ 42.378382][ T4272] loop3: detected capacity change from 0 to 1024 [ 42.385515][ T4270] wg2: entered promiscuous mode [ 42.390381][ T4270] wg2: entered allmulticast mode [ 42.405447][ T4272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.414252][ T4265] loop4: detected capacity change from 512 to 64 [ 42.431531][ T4265] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 42.443621][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.444391][ T4265] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 42.463724][ T4265] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 42.474975][ T4265] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 42.486433][ T4265] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 42.497859][ T4265] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 42.520360][ T4275] 9pnet_fd: Insufficient options for proto=fd [ 42.531255][ T4277] loop3: detected capacity change from 0 to 164 [ 42.534034][ T4279] loop2: detected capacity change from 0 to 1024 [ 42.546827][ T4277] Unable to read rock-ridge attributes [ 42.554460][ T4277] Unable to read rock-ridge attributes [ 42.561610][ T4279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.575148][ T3113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.582476][ T4277] Unable to read rock-ridge attributes [ 42.590295][ T4277] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 42.685490][ T3100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.726384][ T4291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 42.741147][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 42.870782][ T4303] loop4: detected capacity change from 0 to 1024 [ 42.885487][ T4303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.909064][ T3113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.394943][ T4315] loop3: detected capacity change from 0 to 1024 [ 43.405563][ T4315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.526641][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.585949][ T4320] loop3: detected capacity change from 0 to 1024 [ 43.605627][ T4320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.823160][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.735568][ T4343] loop2: detected capacity change from 0 to 1024 [ 44.745782][ T4343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.778653][ T3100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.863347][ T4354] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.2'. [ 44.953392][ T4360] loop2: detected capacity change from 0 to 1024 [ 44.966423][ T4360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.054330][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 45.185213][ T4371] loop2: detected capacity change from 0 to 1024 [ 45.359175][ T4381] loop2: detected capacity change from 0 to 1024 [ 45.462780][ T50] tipc: Subscription rejected, illegal request [ 45.463191][ T4392] loop2: detected capacity change from 0 to 2048 [ 45.477306][ T4392] EXT4-fs: Ignoring removed bh option [ 45.482747][ T4392] ext4: Unknown parameter 'noacl' [ 45.498326][ T4390] loop3: detected capacity change from 0 to 8192 [ 45.506172][ T4390] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.623952][ T4406] loop2: detected capacity change from 0 to 1024 [ 45.645521][ T4408] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 45.653612][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 45.738567][ T4418] loop3: detected capacity change from 0 to 1024 [ 45.823766][ T4425] loop2: detected capacity change from 0 to 1024 [ 45.937946][ T4436] loop2: detected capacity change from 0 to 2048 [ 45.945405][ T4436] EXT4-fs: Ignoring removed bh option [ 45.950770][ T4436] ext4: Unknown parameter 'noacl' [ 46.012000][ T4442] loop2: detected capacity change from 0 to 1024 [ 46.137904][ T4449] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.170382][ T4451] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 46.181698][ T4451] batman_adv: batadv0: Adding interface: team0 [ 46.188055][ T4451] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.213432][ T4451] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 46.972642][ T4459] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 47.035203][ T4463] loop3: detected capacity change from 0 to 1024 [ 47.110603][ T29] kauditd_printk_skb: 763 callbacks suppressed [ 47.110615][ T29] audit: type=1326 audit(2000000020.920:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 47.147602][ T4467] loop2: detected capacity change from 0 to 1024 [ 47.154878][ T4469] loop3: detected capacity change from 0 to 2048 [ 47.156710][ T29] audit: type=1326 audit(2000000020.950:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 47.162505][ T4469] EXT4-fs: Ignoring removed bh option [ 47.185224][ T29] audit: type=1326 audit(2000000020.950:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 47.190574][ T4469] ext4: Unknown parameter 'noacl' [ 47.219794][ T29] audit: type=1326 audit(2000000020.950:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 47.243780][ T29] audit: type=1326 audit(2000000020.950:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 47.267853][ T29] audit: type=1326 audit(2000000020.950:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 47.291877][ T29] audit: type=1326 audit(2000000020.950:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 47.291904][ T29] audit: type=1326 audit(2000000020.950:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 47.339903][ T29] audit: type=1326 audit(2000000020.950:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 47.339924][ T29] audit: type=1326 audit(2000000020.950:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0414cab0e3 code=0x7ffc0000 [ 47.730306][ T4485] tap0: tun_chr_ioctl cmd 1074025673 [ 48.161889][ T4500] dvmrp0: entered allmulticast mode [ 48.246164][ T4503] loop3: detected capacity change from 0 to 1024 [ 48.349841][ T4512] loop3: detected capacity change from 0 to 2048 [ 48.357077][ T4512] EXT4-fs: Ignoring removed bh option [ 48.362454][ T4512] ext4: Unknown parameter 'noacl' [ 49.325915][ T4531] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 49.335283][ T4531] 0XD: renamed from gretap0 (while UP) [ 49.342534][ T4531] 0XD: entered allmulticast mode [ 49.348197][ T4531] A link change request failed with some changes committed already. Interface 40XD may have been left with an inconsistent configuration, please check. [ 49.381048][ T4535] loop2: detected capacity change from 0 to 512 [ 49.388787][ T4535] EXT4-fs: Ignoring removed bh option [ 49.395383][ T4535] EXT4-fs error (device loop2): __ext4_iget:4906: inode #15: block 1803188595: comm syz-executor.2: invalid block [ 49.408981][ T4535] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 49.412160][ T4540] loop3: detected capacity change from 0 to 1024 [ 49.491369][ T4548] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 49.501039][ T4544] loop2: detected capacity change from 0 to 2048 [ 49.507427][ T4548] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 49.515332][ T4544] EXT4-fs: Ignoring removed bh option [ 49.535021][ T4544] ext4: Unknown parameter 'noacl' [ 49.540817][ T4548] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 50.001521][ T4569] loop3: detected capacity change from 0 to 164 [ 50.108262][ T4579] loop3: detected capacity change from 0 to 1024 [ 50.222617][ T4586] loop3: detected capacity change from 0 to 2048 [ 50.229782][ T4586] EXT4-fs: Ignoring removed bh option [ 50.235193][ T4586] ext4: Unknown parameter 'noacl' [ 50.486718][ T4601] loop3: detected capacity change from 0 to 512 [ 50.493937][ T4601] EXT4-fs: Ignoring removed bh option [ 50.499861][ T4601] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 50.509254][ T4601] EXT4-fs (loop3): 1 truncate cleaned up [ 50.554467][ T4601] loop3: detected capacity change from 512 to 64 [ 50.562561][ T4601] bio_check_eod: 6241 callbacks suppressed [ 50.562575][ T4601] syz-executor.3: attempt to access beyond end of device [ 50.562575][ T4601] loop3: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 50.582283][ T4601] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 50.593493][ T4601] buffer_io_error: 55 callbacks suppressed [ 50.593503][ T4601] Buffer I/O error on device loop3, logical block 36 [ 50.607711][ T4601] syz-executor.3: attempt to access beyond end of device [ 50.607711][ T4601] loop3: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 50.621420][ T4601] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 50.632686][ T4601] Buffer I/O error on device loop3, logical block 36 [ 50.632733][ T4601] syz-executor.3: attempt to access beyond end of device [ 50.632733][ T4601] loop3: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 50.653045][ T4601] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 50.653070][ T4601] Buffer I/O error on device loop3, logical block 255 [ 50.653830][ T4601] syz-executor.3: attempt to access beyond end of device [ 50.653830][ T4601] loop3: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 50.684885][ T4601] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 50.684911][ T4601] Buffer I/O error on device loop3, logical block 253 [ 50.684975][ T4601] Buffer I/O error on device loop3, logical block 254 [ 50.685139][ T4601] syz-executor.3: attempt to access beyond end of device [ 50.685139][ T4601] loop3: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 50.685162][ T4601] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 50.685187][ T4601] Buffer I/O error on device loop3, logical block 37 [ 50.685214][ T4601] Buffer I/O error on device loop3, logical block 38 [ 50.685224][ T4601] Buffer I/O error on device loop3, logical block 39 [ 50.685234][ T4601] Buffer I/O error on device loop3, logical block 40 [ 50.685255][ T4601] syz-executor.3: attempt to access beyond end of device [ 50.685255][ T4601] loop3: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 50.685276][ T4601] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 50.685299][ T4601] Buffer I/O error on device loop3, logical block 249 [ 50.800706][ T4609] loop3: detected capacity change from 0 to 164 [ 50.859407][ T4613] loop2: detected capacity change from 0 to 1024 [ 50.993711][ T4621] loop2: detected capacity change from 0 to 2048 [ 51.000973][ T4621] EXT4-fs: Ignoring removed bh option [ 51.006465][ T4621] ext4: Unknown parameter 'noacl' [ 51.854121][ T4638] loop2: detected capacity change from 0 to 8192 [ 51.963351][ T4648] loop3: detected capacity change from 0 to 1024 [ 52.163939][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 52.164010][ T29] audit: type=1400 audit(2000000025.970:2725): avc: denied { write } for pid=4662 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.216768][ T29] audit: type=1400 audit(2000000026.030:2726): avc: denied { read } for pid=4662 comm="syz-executor.3" path="socket:[8228]" dev="sockfs" ino=8228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.267562][ T29] audit: type=1400 audit(2000000026.080:2727): avc: denied { listen } for pid=4662 comm="syz-executor.3" lport=45021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.288484][ T29] audit: type=1400 audit(2000000026.080:2728): avc: denied { nlmsg_read } for pid=4662 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.309392][ T29] audit: type=1400 audit(2000000026.080:2729): avc: denied { accept } for pid=4662 comm="syz-executor.3" lport=45021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.330270][ T29] audit: type=1400 audit(2000000026.080:2730): avc: denied { setopt } for pid=4662 comm="syz-executor.3" lport=45021 faddr=fc00:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 52.750269][ T29] audit: type=1400 audit(2000000026.560:2731): avc: denied { unmount } for pid=3100 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.846261][ T4672] loop2: detected capacity change from 0 to 2048 [ 52.853990][ T4672] EXT4-fs: Ignoring removed bh option [ 52.859483][ T4672] ext4: Unknown parameter 'noacl' [ 53.031949][ T4678] loop3: detected capacity change from 0 to 8192 [ 53.361979][ T4688] loop3: detected capacity change from 0 to 1024 [ 53.539645][ T4702] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 53.672528][ T4704] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 53.680252][ T4703] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 54.454403][ T4715] loop3: detected capacity change from 0 to 8192 [ 54.565980][ T4719] loop2: detected capacity change from 0 to 512 [ 54.586426][ T4719] ext4 filesystem being mounted at /root/syzkaller-testdir237500431/syzkaller.dVSnJY/114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.605483][ T29] audit: type=1400 audit(2000000028.420:2732): avc: denied { rename } for pid=4718 comm="syz-executor.2" name="file2" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.632546][ T4719] syz-executor.2 (4719) used greatest stack depth: 10408 bytes left [ 54.670686][ T4724] batman_adv: batadv0: Removing interface: team0 [ 54.682041][ T4724] team0 (unregistering): Port device team_slave_0 removed [ 54.692561][ T4724] team0 (unregistering): Port device team_slave_1 removed [ 54.721216][ T29] audit: type=1400 audit(2000000028.530:2733): avc: denied { write } for pid=4728 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.773204][ T29] audit: type=1400 audit(2000000028.580:2734): avc: denied { bind } for pid=4728 comm="syz-executor.2" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.800097][ T4724] syz-executor.3 (4724) used greatest stack depth: 10248 bytes left [ 54.937357][ T4735] loop3: detected capacity change from 0 to 2048 [ 54.945455][ T4735] EXT4-fs: Ignoring removed bh option [ 54.951013][ T4735] ext4: Unknown parameter 'noacl' [ 55.627249][ T4729] syz-executor.2 (4729) used greatest stack depth: 10056 bytes left [ 55.653229][ T4743] loop2: detected capacity change from 0 to 512 [ 55.662204][ T4743] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 55.670378][ T4743] EXT4-fs (loop2): 1 truncate cleaned up [ 55.778427][ T4750] loop3: detected capacity change from 0 to 8192 [ 55.789273][ T4751] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 55.866937][ T4753] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 56.192299][ T4777] loop3: detected capacity change from 0 to 2048 [ 56.199470][ T4777] EXT4-fs: Ignoring removed bh option [ 56.205463][ T4777] ext4: Unknown parameter 'noacl' [ 56.384620][ T4783] loop3: detected capacity change from 0 to 8192 [ 56.457148][ T4785] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 56.465444][ T4785] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 56.577086][ T4794] loop2: detected capacity change from 0 to 1024 [ 56.751925][ T4800] loop2: detected capacity change from 0 to 256 [ 56.762262][ T4800] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 56.770150][ T4800] FAT-fs (loop2): Filesystem has been set read-only [ 56.807521][ T4810] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.3'. [ 56.968414][ T4813] loop2: detected capacity change from 0 to 2048 [ 56.975871][ T4813] EXT4-fs: Ignoring removed bh option [ 56.981285][ T4813] ext4: Unknown parameter 'noacl' [ 57.144400][ T4821] loop2: detected capacity change from 0 to 512 [ 57.151523][ T4821] EXT4-fs: Ignoring removed bh option [ 57.157294][ T4821] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 57.166645][ T4821] EXT4-fs (loop2): 1 truncate cleaned up [ 57.224215][ T4821] loop2: detected capacity change from 512 to 64 [ 57.231626][ T4821] syz-executor.2: attempt to access beyond end of device [ 57.231626][ T4821] loop2: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 57.246577][ T4821] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 57.257777][ T4821] buffer_io_error: 3 callbacks suppressed [ 57.257785][ T4821] Buffer I/O error on device loop2, logical block 36 [ 57.271583][ T4821] syz-executor.2: attempt to access beyond end of device [ 57.271583][ T4821] loop2: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 57.285346][ T4821] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 57.296572][ T4821] Buffer I/O error on device loop2, logical block 36 [ 57.303276][ T4821] syz-executor.2: attempt to access beyond end of device [ 57.303276][ T4821] loop2: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 57.316942][ T4821] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 57.328239][ T4821] Buffer I/O error on device loop2, logical block 255 [ 57.335682][ T4821] syz-executor.2: attempt to access beyond end of device [ 57.335682][ T4821] loop2: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 57.349418][ T4821] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 57.360726][ T4821] Buffer I/O error on device loop2, logical block 253 [ 57.367479][ T4821] Buffer I/O error on device loop2, logical block 254 [ 57.374269][ T4821] syz-executor.2: attempt to access beyond end of device [ 57.374269][ T4821] loop2: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 57.387933][ T4821] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 57.399162][ T4821] Buffer I/O error on device loop2, logical block 37 [ 57.405923][ T4821] Buffer I/O error on device loop2, logical block 38 [ 57.412640][ T4821] Buffer I/O error on device loop2, logical block 39 [ 57.419350][ T4821] Buffer I/O error on device loop2, logical block 40 [ 57.426200][ T4821] syz-executor.2: attempt to access beyond end of device [ 57.426200][ T4821] loop2: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 57.439844][ T4821] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 57.451139][ T4821] Buffer I/O error on device loop2, logical block 249 [ 57.533617][ T4825] loop2: detected capacity change from 0 to 1764 [ 57.541255][ T4825] iso9660: Unknown parameter 'moda' [ 57.598676][ T4825] Unknown options in mask 5 [ 57.604547][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 57.604560][ T29] audit: type=1400 audit(2000000031.420:2741): avc: denied { create } for pid=4824 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.659164][ T4827] loop2: detected capacity change from 0 to 1024 [ 57.690969][ T29] audit: type=1400 audit(2000000031.500:2742): avc: denied { create } for pid=4826 comm="syz-executor.2" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.712455][ T29] audit: type=1400 audit(2000000031.500:2743): avc: denied { read append open } for pid=4826 comm="syz-executor.2" path="/root/syzkaller-testdir237500431/syzkaller.dVSnJY/126/file0/memory.events" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.741740][ T29] audit: type=1400 audit(2000000031.500:2744): avc: denied { write } for pid=4826 comm="syz-executor.2" name="memory.events" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.840214][ T4853] loop2: detected capacity change from 0 to 512 [ 57.848674][ T4853] EXT4-fs: Ignoring removed bh option [ 57.854295][ T4853] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 57.856216][ T4850] loop3: detected capacity change from 0 to 2048 [ 57.863628][ T4853] EXT4-fs (loop2): 1 truncate cleaned up [ 57.871089][ T4850] EXT4-fs: Ignoring removed bh option [ 57.878482][ T29] audit: type=1400 audit(2000000031.690:2745): avc: denied { mounton } for pid=4852 comm="syz-executor.2" path="/root/syzkaller-testdir237500431/syzkaller.dVSnJY/128/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.880137][ T4850] ext4: Unknown parameter 'noacl' [ 57.954481][ T4853] loop2: detected capacity change from 512 to 64 [ 57.962531][ T4853] syz-executor.2: attempt to access beyond end of device [ 57.962531][ T4853] loop2: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 57.976339][ T4853] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 57.988830][ T4853] syz-executor.2: attempt to access beyond end of device [ 57.988830][ T4853] loop2: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 58.002428][ T4853] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 58.013643][ T4853] syz-executor.2: attempt to access beyond end of device [ 58.013643][ T4853] loop2: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 58.027275][ T4853] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 58.038570][ T29] audit: type=1400 audit(2000000031.850:2746): avc: denied { ioctl } for pid=4852 comm="syz-executor.2" path="/root/syzkaller-testdir237500431/syzkaller.dVSnJY/128/file0/memory.events" dev="loop2" ino=19 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.069016][ T4853] syz-executor.2: attempt to access beyond end of device [ 58.069016][ T4853] loop2: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 58.082797][ T4853] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 58.094090][ T4853] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 58.105942][ T4853] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 58.128266][ T29] audit: type=1400 audit(2000000031.940:2747): avc: denied { unlink } for pid=3100 comm="syz-executor.2" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.201409][ T4865] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 58.227944][ T29] audit: type=1326 audit(2000000032.040:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 58.252002][ T29] audit: type=1326 audit(2000000032.040:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 58.279960][ T29] audit: type=1326 audit(2000000032.040:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f0414cab0a9 code=0x7ffc0000 [ 58.282458][ T4869] loop2: detected capacity change from 0 to 1024 [ 58.330839][ T4875] loop3: detected capacity change from 0 to 1024 [ 58.488440][ T4892] loop2: detected capacity change from 0 to 2048 [ 58.495855][ T4892] EXT4-fs: Ignoring removed bh option [ 58.501922][ T4892] ext4: Unknown parameter 'noacl' [ 58.518927][ T4900] loop3: detected capacity change from 0 to 512 [ 58.526611][ T4900] EXT4-fs: Ignoring removed bh option [ 58.532261][ T4900] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 58.542043][ T4900] EXT4-fs (loop3): 1 truncate cleaned up [ 58.594196][ T4900] loop3: detected capacity change from 512 to 64 [ 58.602034][ T4900] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 58.614685][ T4900] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 58.625938][ T4900] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 58.637249][ T4900] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 58.648590][ T4900] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 58.659784][ T4900] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 58.921259][ T4920] loop3: detected capacity change from 0 to 1024 [ 59.168805][ T4937] loop3: detected capacity change from 0 to 2048 [ 59.176519][ T4937] EXT4-fs: Ignoring removed bh option [ 59.182049][ T4937] ext4: Unknown parameter 'noacl' [ 59.408543][ T4947] loop3: detected capacity change from 0 to 512 [ 59.415574][ T4947] EXT4-fs: Ignoring removed bh option [ 59.421156][ T4947] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 59.430393][ T4947] EXT4-fs (loop3): 1 truncate cleaned up [ 59.474286][ T4947] loop3: detected capacity change from 512 to 64 [ 59.482196][ T4947] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 59.494840][ T4947] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 59.505990][ T4947] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 59.517225][ T4947] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 59.528556][ T4947] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 59.539741][ T4947] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 59.639847][ T4955] loop3: detected capacity change from 0 to 136 [ 59.646485][ T4955] iso9660: Bad value for 'gid' [ 59.697105][ T4955] loop3: detected capacity change from 0 to 136 [ 59.760505][ T4965] tmpfs: Bad value for 'mpol' [ 59.800170][ T4967] loop3: detected capacity change from 0 to 1024 [ 60.008218][ T4980] loop3: detected capacity change from 0 to 512 [ 60.016646][ T4980] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 60.030033][ T4980] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 60.044937][ T4980] syz-executor.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 60.060142][ T4980] CPU: 0 PID: 4980 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00330-g7c16f0a4ed1c #0 [ 60.070718][ T4980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 60.081181][ T4980] Call Trace: [ 60.084446][ T4980] [ 60.087377][ T4980] dump_stack_lvl+0xf2/0x150 [ 60.091949][ T4980] dump_stack+0x15/0x20 [ 60.096133][ T4980] warn_alloc+0x145/0x1b0 [ 60.100442][ T4980] ? __vmalloc_node_range_noprof+0x8c/0xef0 [ 60.106316][ T4980] ? audit_log_end+0x1ce/0x1e0 [ 60.111078][ T4980] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 60.117046][ T4980] __vmalloc_node_range_noprof+0xac/0xef0 [ 60.122756][ T4980] ? avc_denied+0xf1/0x110 [ 60.127149][ T4980] ? slow_avc_audit+0xf9/0x140 [ 60.131892][ T4980] ? xskq_create+0x36/0xd0 [ 60.136286][ T4980] vmalloc_user_noprof+0x59/0x70 [ 60.141263][ T4980] ? xskq_create+0x79/0xd0 [ 60.145656][ T4980] xskq_create+0x79/0xd0 [ 60.150085][ T4980] xsk_init_queue+0x82/0xd0 [ 60.154578][ T4980] xsk_setsockopt+0x409/0x520 [ 60.159289][ T4980] ? __pfx_xsk_setsockopt+0x10/0x10 [ 60.164482][ T4980] __sys_setsockopt+0x1d8/0x250 [ 60.169409][ T4980] __x64_sys_setsockopt+0x66/0x80 [ 60.174419][ T4980] x64_sys_call+0x1183/0x2d70 [ 60.179108][ T4980] do_syscall_64+0xc9/0x1c0 [ 60.183634][ T4980] ? clear_bhb_loop+0x55/0xb0 [ 60.188290][ T4980] ? clear_bhb_loop+0x55/0xb0 [ 60.193051][ T4980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.198921][ T4980] RIP: 0033:0x7f59760bb0a9 [ 60.203318][ T4980] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 60.222984][ T4980] RSP: 002b:00007f59754350c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.231434][ T4980] RAX: ffffffffffffffda RBX: 00007f59761f1f80 RCX: 00007f59760bb0a9 [ 60.239385][ T4980] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 60.247355][ T4980] RBP: 00007f597612a074 R08: 000000000000001c R09: 0000000000000000 [ 60.255400][ T4980] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 60.263386][ T4980] R13: 000000000000000b R14: 00007f59761f1f80 R15: 00007fff5d6ac208 [ 60.271423][ T4980] [ 60.274528][ T4980] Mem-Info: [ 60.277645][ T4980] active_anon:343 inactive_anon:16107 isolated_anon:0 [ 60.277645][ T4980] active_file:3225 inactive_file:10573 isolated_file:0 [ 60.277645][ T4980] unevictable:0 dirty:34 writeback:0 [ 60.277645][ T4980] slab_reclaimable:2687 slab_unreclaimable:13172 [ 60.277645][ T4980] mapped:18542 shmem:502 pagetables:548 [ 60.277645][ T4980] sec_pagetables:0 bounce:0 [ 60.277645][ T4980] kernel_misc_reclaimable:0 [ 60.277645][ T4980] free:1909865 free_pcp:7441 free_cma:0 [ 60.322583][ T4980] Node 0 active_anon:1372kB inactive_anon:64428kB active_file:12900kB inactive_file:42292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74168kB dirty:136kB writeback:0kB shmem:2008kB writeback_tmp:0kB kernel_stack:2848kB pagetables:2192kB sec_pagetables:0kB all_unreclaimable? no [ 60.350575][ T4980] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 60.377366][ T4980] lowmem_reserve[]: 0 2874 7852 0 [ 60.382426][ T4980] Node 0 DMA32 free:2957056kB boost:0kB min:4144kB low:7084kB high:10024kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2960692kB mlocked:0kB bounce:0kB free_pcp:3636kB local_pcp:96kB free_cma:0kB [ 60.410977][ T4980] lowmem_reserve[]: 0 0 4978 0 [ 60.415753][ T4980] Node 0 Normal free:4667044kB boost:0kB min:7180kB low:12276kB high:17372kB reserved_highatomic:0KB active_anon:1372kB inactive_anon:64428kB active_file:12900kB inactive_file:42292kB unevictable:0kB writepending:128kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:26128kB local_pcp:20604kB free_cma:0kB [ 60.446305][ T4980] lowmem_reserve[]: 0 0 0 0 [ 60.450839][ T4980] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 60.463532][ T4980] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 720*4096kB (M) = 2957056kB [ 60.475438][ T4984] loop2: detected capacity change from 0 to 512 [ 60.479715][ T4980] Node 0 Normal: 379*4kB (UM) 241*8kB (UM) 75*16kB (UM) 64*32kB (UM) 70*64kB (UME) 52*128kB (UME) 41*256kB (UME) 18*512kB (UME) 7*1024kB (UM) 3*2048kB (UE) 1127*4096kB (UM) = 4667044kB [ 60.488941][ T4984] EXT4-fs: Ignoring removed bh option [ 60.504383][ T4980] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 60.504404][ T4980] 14365 total pagecache pages [ 60.504410][ T4980] 7 pages in swap cache [ 60.504415][ T4980] Free swap = 124412kB [ 60.504421][ T4980] Total swap = 124996kB [ 60.504427][ T4980] 2097051 pages RAM [ 60.504431][ T4980] 0 pages HighMem/MovableOnly [ 60.504436][ T4980] 78486 pages reserved [ 60.549577][ T4984] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 60.559171][ T4984] EXT4-fs (loop2): 1 truncate cleaned up [ 60.594247][ T4984] loop2: detected capacity change from 512 to 64 [ 60.601988][ T4984] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 60.616794][ T4984] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 60.628689][ T4984] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 60.640236][ T4984] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 60.652537][ T4984] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 60.663742][ T4984] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 61.474281][ T4996] loop3: detected capacity change from 0 to 256 [ 61.550755][ T4999] loop3: detected capacity change from 0 to 512 [ 61.623702][ T5001] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 61.752571][ T5030] 9pnet_virtio: no channels available for device [ 62.009430][ T3208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.057298][ T3208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.111004][ T3208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.147406][ T5065] chnl_net:caif_netlink_parms(): no params data found [ 62.158973][ T3208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.192913][ T5065] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.200049][ T5065] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.207506][ T5065] bridge_slave_0: entered allmulticast mode [ 62.213828][ T5065] bridge_slave_0: entered promiscuous mode [ 62.221083][ T5065] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.228203][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.235400][ T5065] bridge_slave_1: entered allmulticast mode [ 62.241683][ T5065] bridge_slave_1: entered promiscuous mode [ 62.258359][ T5065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.271057][ T5065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.296285][ T5065] team0: Port device team_slave_0 added [ 62.302172][ T3208] bridge_slave_1: left allmulticast mode [ 62.308016][ T3208] bridge_slave_1: left promiscuous mode [ 62.313672][ T3208] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.321336][ T3208] bridge_slave_0: left allmulticast mode [ 62.327261][ T3208] bridge_slave_0: left promiscuous mode [ 62.332899][ T3208] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.396341][ T3208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.406544][ T3208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.416755][ T3208] bond0 (unregistering): Released all slaves [ 62.424517][ T5065] team0: Port device team_slave_1 added [ 62.439698][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.446714][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.472653][ T5065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.484002][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.491000][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.517022][ T5065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.540897][ T5065] hsr_slave_0: entered promiscuous mode [ 62.546865][ T5065] hsr_slave_1: entered promiscuous mode [ 62.552828][ T5065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.560503][ T5065] Cannot create hsr debugfs directory [ 62.567681][ T3208] hsr_slave_0: left promiscuous mode [ 62.573276][ T3208] hsr_slave_1: left promiscuous mode [ 62.579055][ T3208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.586491][ T3208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.593942][ T3208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.601343][ T3208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.610449][ T3208] veth1_macvtap: left promiscuous mode [ 62.615998][ T3208] veth0_macvtap: left promiscuous mode [ 62.621543][ T3208] veth1_vlan: left promiscuous mode [ 62.626755][ T3208] veth0_vlan: left promiscuous mode [ 62.697487][ T3208] team0 (unregistering): Port device team_slave_1 removed [ 62.707963][ T3208] team0 (unregistering): Port device team_slave_0 removed [ 62.728372][ T5084] loop3: detected capacity change from 0 to 4096 [ 62.746212][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 62.746226][ T29] audit: type=1400 audit(2000000036.560:3091): avc: denied { write } for pid=5083 comm="syz-executor.3" path="socket:[9654]" dev="sockfs" ino=9654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.777473][ T29] audit: type=1400 audit(2000000036.560:3092): avc: denied { nlmsg_read } for pid=5083 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.905675][ T5093] loop3: detected capacity change from 0 to 2048 [ 62.913158][ T5093] EXT4-fs: Ignoring removed bh option [ 62.918603][ T5093] ext4: Unknown parameter 'noacl' [ 62.995369][ T5098] loop2: detected capacity change from 0 to 256 [ 63.051986][ T29] audit: type=1400 audit(2000000036.860:3093): avc: denied { ioctl } for pid=5101 comm="syz-executor.3" path="socket:[9687]" dev="sockfs" ino=9687 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.133808][ T5065] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.142616][ T5065] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.151793][ T5065] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.160797][ T5065] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.167331][ T5115] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.205251][ T5065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.217328][ T5065] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.227745][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.234941][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.246330][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.253384][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.327655][ T5065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.407179][ T5065] veth0_vlan: entered promiscuous mode [ 63.418822][ T5065] veth1_vlan: entered promiscuous mode [ 63.437766][ T5065] veth0_macvtap: entered promiscuous mode [ 63.445687][ T5065] veth1_macvtap: entered promiscuous mode [ 63.458138][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.468629][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.478474][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.488962][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.498797][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.509363][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.519198][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.529632][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.541518][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.552039][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.562897][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.572745][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.583220][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.593116][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.603595][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.613416][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.623872][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.635290][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.645339][ T5065] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.654041][ T5065] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.662910][ T5065] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.671698][ T5065] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.982836][ T5139] loop2: detected capacity change from 0 to 4096 [ 64.105205][ T29] audit: type=1326 audit(2000000037.920:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5147 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0414cab0a9 code=0x0 [ 64.206981][ T29] audit: type=1400 audit(2000000038.020:3095): avc: denied { read } for pid=5147 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.243285][ T5154] loop3: detected capacity change from 0 to 2048 [ 64.250657][ T5154] EXT4-fs: Ignoring removed bh option [ 64.256176][ T5154] ext4: Unknown parameter 'noacl' [ 64.485963][ T29] audit: type=1400 audit(2000000038.300:3096): avc: denied { connect } for pid=5163 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.526161][ T29] audit: type=1326 audit(2000000038.340:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 64.550264][ T29] audit: type=1326 audit(2000000038.340:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 64.574337][ T29] audit: type=1326 audit(2000000038.340:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 64.598365][ T29] audit: type=1326 audit(2000000038.340:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5167 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59760bb0a9 code=0x7ffc0000 [ 64.607453][ T5173] loop3: detected capacity change from 0 to 4096 [ 64.631963][ T5173] EXT4-fs mount: 63 callbacks suppressed [ 64.631976][ T5173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.676542][ T3124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.926983][ T5183] chnl_net:caif_netlink_parms(): no params data found [ 64.960281][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.967364][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.974678][ T5183] bridge_slave_0: entered allmulticast mode [ 64.981156][ T5183] bridge_slave_0: entered promiscuous mode [ 64.987858][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.994940][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.002212][ T5183] bridge_slave_1: entered allmulticast mode [ 65.008658][ T5183] bridge_slave_1: entered promiscuous mode [ 65.027034][ T5183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.037555][ T5183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.059035][ T5183] team0: Port device team_slave_0 added [ 65.065453][ T5183] team0: Port device team_slave_1 added [ 65.079592][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.087115][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.113089][ T5183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.124895][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.131822][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.157883][ T5183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.184632][ T5183] hsr_slave_0: entered promiscuous mode [ 65.190683][ T5183] hsr_slave_1: entered promiscuous mode [ 65.196551][ T5183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.204085][ T5183] Cannot create hsr debugfs directory [ 65.259077][ T5183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.967320][ T5211] loop2: detected capacity change from 0 to 136 [ 66.219714][ T3128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.230022][ T3128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.343031][ T3128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.353383][ T3128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.408108][ T3128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.418496][ T3128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.517354][ T3128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.527687][ T3128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.557196][ T5233] netlink: set zone limit has 8 unknown bytes [ 66.576729][ T5214] chnl_net:caif_netlink_parms(): no params data found [ 66.591803][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 66.637059][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.644120][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.651335][ T5214] bridge_slave_0: entered allmulticast mode [ 66.658029][ T5214] bridge_slave_0: entered promiscuous mode [ 66.665897][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.672990][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.680170][ T5214] bridge_slave_1: entered allmulticast mode [ 66.686701][ T5214] bridge_slave_1: entered promiscuous mode [ 66.721858][ T3128] bridge_slave_1: left allmulticast mode [ 66.727529][ T3128] bridge_slave_1: left promiscuous mode [ 66.733220][ T3128] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.740852][ T3128] bridge_slave_0: left allmulticast mode [ 66.746716][ T3128] bridge_slave_0: left promiscuous mode [ 66.752449][ T3128] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.801495][ T3128] dvmrp0 (unregistering): left allmulticast mode [ 66.856941][ T3128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.867036][ T3128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.877265][ T3128] bond0 (unregistering): Released all slaves [ 66.888195][ T5214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.897355][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.904576][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.911781][ T5219] bridge_slave_0: entered allmulticast mode [ 66.918146][ T5219] bridge_slave_0: entered promiscuous mode [ 66.929162][ T5214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.938339][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.945445][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.952707][ T5219] bridge_slave_1: entered allmulticast mode [ 66.959111][ T5219] bridge_slave_1: entered promiscuous mode [ 66.985873][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.001211][ T5214] team0: Port device team_slave_0 added [ 67.007980][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.018011][ T5214] team0: Port device team_slave_1 added [ 67.035364][ T3128] hsr_slave_0: left promiscuous mode [ 67.040863][ T3128] hsr_slave_1: left promiscuous mode [ 67.046333][ T5248] loop3: detected capacity change from 0 to 8192 [ 67.052796][ T3128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.060252][ T3128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.067812][ T3128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.075300][ T3128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.083811][ T3128] veth1_macvtap: left promiscuous mode [ 67.089377][ T3128] veth0_macvtap: left promiscuous mode [ 67.094928][ T3128] veth1_vlan: left promiscuous mode [ 67.100164][ T3128] veth0_vlan: left promiscuous mode [ 67.191371][ T3128] team0 (unregistering): Port device team_slave_1 removed [ 67.201231][ T3128] team0 (unregistering): Port device team_slave_0 removed [ 67.243961][ T5219] team0: Port device team_slave_0 added [ 67.250274][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.257265][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.283321][ T5214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.295729][ T5219] team0: Port device team_slave_1 added [ 67.306094][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.313037][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.339039][ T5214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.357403][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.364381][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.390270][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.401995][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.408962][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.434842][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.458519][ T5214] hsr_slave_0: entered promiscuous mode [ 67.464681][ T5214] hsr_slave_1: entered promiscuous mode [ 67.485724][ T5219] hsr_slave_0: entered promiscuous mode [ 67.491616][ T5219] hsr_slave_1: entered promiscuous mode [ 67.497499][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.505126][ T5219] Cannot create hsr debugfs directory [ 67.647664][ T3128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.707193][ T3128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.746926][ T3128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.808746][ T3128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.855763][ T3128] bridge_slave_1: left allmulticast mode [ 67.861408][ T3128] bridge_slave_1: left promiscuous mode [ 67.867158][ T3128] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.874930][ T3128] bridge_slave_0: left allmulticast mode [ 67.880599][ T3128] bridge_slave_0: left promiscuous mode [ 67.886269][ T3128] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.966498][ T3128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.982437][ T3128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.992609][ T3128] bond0 (unregistering): Released all slaves [ 68.106164][ T3128] hsr_slave_0: left promiscuous mode [ 68.111930][ T3128] hsr_slave_1: left promiscuous mode [ 68.117612][ T3128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.125180][ T3128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.132700][ T3128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.140158][ T3128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.149213][ T3128] veth1_macvtap: left promiscuous mode [ 68.154725][ T3128] veth0_macvtap: left promiscuous mode [ 68.160281][ T3128] veth1_vlan: left promiscuous mode [ 68.165550][ T3128] veth0_vlan: left promiscuous mode [ 68.234771][ T3128] team0 (unregistering): Port device team_slave_1 removed [ 68.245926][ T3128] team0 (unregistering): Port device team_slave_0 removed [ 68.447819][ T5276] chnl_net:caif_netlink_parms(): no params data found [ 68.477561][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.484747][ T5276] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.492071][ T5276] bridge_slave_0: entered allmulticast mode [ 68.498771][ T5276] bridge_slave_0: entered promiscuous mode [ 68.505543][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.512617][ T5276] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.519906][ T5276] bridge_slave_1: entered allmulticast mode [ 68.526478][ T5276] bridge_slave_1: entered promiscuous mode [ 68.543837][ T5276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.556046][ T5276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.573791][ T5276] team0: Port device team_slave_0 added [ 68.580815][ T5276] team0: Port device team_slave_1 added [ 68.594286][ T5276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.601226][ T5276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.627226][ T5276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.639081][ T5276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.646086][ T5276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.672142][ T5276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.696375][ T5276] hsr_slave_0: entered promiscuous mode [ 68.702409][ T5276] hsr_slave_1: entered promiscuous mode [ 68.708278][ T5276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.715876][ T5276] Cannot create hsr debugfs directory [ 69.837230][ T5183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.137733][ T5183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.207071][ T5183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.269399][ T3128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.291143][ T5183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.299415][ T5183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.307955][ T5183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.318881][ T3128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.329739][ T5183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.363641][ T5183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.375735][ T5183] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.387090][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.394214][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.402487][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.409613][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.422068][ T3128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.439464][ T5183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.449874][ T5183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.503492][ T5183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.517758][ T3128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.565591][ T5183] veth0_vlan: entered promiscuous mode [ 70.573653][ T5183] veth1_vlan: entered promiscuous mode [ 70.589012][ T5183] veth0_macvtap: entered promiscuous mode [ 70.600353][ T5183] veth1_macvtap: entered promiscuous mode [ 70.611670][ T3128] bridge_slave_1: left allmulticast mode [ 70.617411][ T3128] bridge_slave_1: left promiscuous mode [ 70.622999][ T3128] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.630633][ T3128] bridge_slave_0: left allmulticast mode [ 70.636282][ T3128] bridge_slave_0: left promiscuous mode [ 70.641848][ T3128] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.650280][ T3128] bridge_slave_1: left allmulticast mode [ 70.655917][ T3128] bridge_slave_1: left promiscuous mode [ 70.661516][ T3128] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.668974][ T3128] bridge_slave_0: left allmulticast mode [ 70.674620][ T3128] bridge_slave_0: left promiscuous mode [ 70.680228][ T3128] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.886568][ T3128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.896750][ T3128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.906739][ T3128] bond0 (unregistering): Released all slaves [ 70.915503][ T3128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.926715][ T3128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.936417][ T3128] bond0 (unregistering): Released all slaves [ 70.950486][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.960992][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.970997][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.981485][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.991289][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.001723][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.012517][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.022096][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.032731][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.042633][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.053083][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.062903][ T5183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.073297][ T5183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.083905][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.094015][ T5183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.102762][ T5183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.111471][ T5183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.120193][ T5183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.145049][ T5214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.157241][ T5214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.166248][ T5214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.176304][ T5214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.199660][ T3128] hsr_slave_0: left promiscuous mode [ 71.205713][ T3128] hsr_slave_1: left promiscuous mode [ 71.212033][ T3128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.219643][ T3128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.227715][ T3128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.235158][ T3128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.245115][ T3128] hsr_slave_0: left promiscuous mode [ 71.250716][ T3128] hsr_slave_1: left promiscuous mode [ 71.258240][ T3128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.265647][ T3128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.273254][ T3128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.280780][ T3128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.292633][ T3128] veth1_macvtap: left promiscuous mode [ 71.298203][ T3128] veth0_macvtap: left promiscuous mode [ 71.303716][ T3128] veth1_vlan: left promiscuous mode [ 71.308935][ T3128] veth0_vlan: left promiscuous mode [ 71.315344][ T3128] veth1_macvtap: left promiscuous mode [ 71.321060][ T3128] veth0_macvtap: left promiscuous mode [ 71.326673][ T3128] veth1_vlan: left promiscuous mode [ 71.331881][ T3128] veth0_vlan: left promiscuous mode [ 71.480374][ T3128] team0 (unregistering): Port device team_slave_1 removed [ 71.493438][ T3128] team0 (unregistering): Port device team_slave_0 removed [ 71.618135][ T3128] team0 (unregistering): Port device team_slave_1 removed [ 71.632014][ T3128] team0 (unregistering): Port device team_slave_0 removed [ 71.707902][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.718919][ T5214] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.730451][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.737524][ T3177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.748350][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.755416][ T3177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.774017][ T5214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.784421][ T5214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.835306][ T5214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.870764][ T5219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.880774][ T5219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.889447][ T5219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.898459][ T5219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.930964][ T5214] veth0_vlan: entered promiscuous mode [ 71.940639][ T5214] veth1_vlan: entered promiscuous mode [ 71.966268][ T5214] veth0_macvtap: entered promiscuous mode [ 71.974128][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.983722][ T5214] veth1_macvtap: entered promiscuous mode [ 71.998809][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.009339][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.019171][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.029734][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.040573][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.050938][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.070906][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.081466][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.091311][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.101758][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.112422][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.124056][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.131134][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.141041][ T910] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.148122][ T910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.152419][ T5214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.167858][ T5214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.176556][ T5214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.185400][ T5214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.225503][ T5323] tap0: tun_chr_ioctl cmd 1074025673 [ 72.266749][ T5276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.275472][ T5276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.282458][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 72.282469][ T29] audit: type=1400 audit(2000000046.090:3104): avc: denied { write } for pid=5329 comm="syz-executor.2" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.286357][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.320562][ T5276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.322560][ T5276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.401703][ T5276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.421849][ T5276] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.435449][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.436094][ T5334] loop1: detected capacity change from 0 to 8192 [ 72.442729][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.468204][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.475266][ T5340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.486691][ T5219] veth0_vlan: entered promiscuous mode [ 72.499464][ T5219] veth1_vlan: entered promiscuous mode [ 72.518157][ T5276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.538916][ T5219] veth0_macvtap: entered promiscuous mode [ 72.546820][ T5219] veth1_macvtap: entered promiscuous mode [ 72.558723][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.569509][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.579359][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.589897][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.599757][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.610180][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.621270][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.631528][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.642043][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.651893][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.662322][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.672219][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.682746][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.693474][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.704329][ T5219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.713073][ T5219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.721900][ T5219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.730673][ T5219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.748893][ T5276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.882866][ T5368] loop1: detected capacity change from 0 to 4096 [ 72.890200][ T5276] veth0_vlan: entered promiscuous mode [ 72.902789][ T5276] veth1_vlan: entered promiscuous mode [ 72.912733][ T5368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.938386][ T5276] veth0_macvtap: entered promiscuous mode [ 72.946110][ T5276] veth1_macvtap: entered promiscuous mode [ 72.956539][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.967067][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.976899][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.987328][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.997221][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.007742][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.017638][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.028086][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.040343][ T5276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.048237][ T5183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.051078][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.067793][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.077617][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.088136][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.097976][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.097992][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.098002][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.098028][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.099818][ T5276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.102938][ T5276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.103033][ T5276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.103066][ T5276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.103098][ T5276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.237463][ T5381] loop1: detected capacity change from 0 to 512 [ 73.262787][ T5381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.277733][ T5381] ext4 filesystem being mounted at /root/syzkaller-testdir2799593644/syzkaller.kC8N6g/9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.397178][ T5183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.618905][ T5400] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.700241][ T5403] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 36, id = 0 [ 73.721036][ T5402] loop4: detected capacity change from 0 to 512 [ 73.738736][ T5402] EXT4-fs: Ignoring removed bh option [ 73.749905][ T5402] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 73.762211][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 73.764501][ T5402] EXT4-fs (loop4): 1 truncate cleaned up [ 73.778783][ T5402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.803589][ T5417] loop0: detected capacity change from 0 to 256 [ 73.854250][ T5402] loop4: detected capacity change from 512 to 64 [ 73.861947][ T5402] bio_check_eod: 20 callbacks suppressed [ 73.861956][ T5402] syz-executor.4: attempt to access beyond end of device [ 73.861956][ T5402] loop4: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 73.869407][ T5417] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 202) [ 73.881299][ T5402] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 36) [ 73.881330][ T5402] buffer_io_error: 55 callbacks suppressed [ 73.881405][ T5402] Buffer I/O error on device loop4, logical block 36 [ 73.890067][ T5417] FAT-fs (loop0): Filesystem has been set read-only [ 73.939775][ T5276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.983689][ T5421] loop0: detected capacity change from 0 to 128 [ 73.991227][ T5421] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 74.111075][ T29] audit: type=1400 audit(2000000047.920:3105): avc: denied { read } for pid=5440 comm="syz-executor.4" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 74.135859][ T5441] autofs4:pid:5441:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.11), cmd(0xc018937e) [ 74.142279][ T29] audit: type=1400 audit(2000000047.950:3106): avc: denied { ioctl } for pid=5440 comm="syz-executor.4" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 74.148991][ T5441] autofs4:pid:5441:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 74.355461][ T5454] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.640383][ T5462] loop1: detected capacity change from 0 to 512 [ 74.650091][ T5462] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 74.665275][ T5462] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 74.678021][ T5462] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.717847][ T29] audit: type=1400 audit(2000000048.530:3107): avc: denied { map } for pid=5461 comm="syz-executor.1" path="/root/syzkaller-testdir2799593644/syzkaller.kC8N6g/12/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.756377][ T5183] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 74.769842][ T29] audit: type=1400 audit(2000000048.530:3108): avc: denied { execute } for pid=5461 comm="syz-executor.1" path="/root/syzkaller-testdir2799593644/syzkaller.kC8N6g/12/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.832298][ T29] audit: type=1326 audit(2000000048.640:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5420 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eadd400a9 code=0x7fc00000 [ 74.913966][ T5421] syz-executor.0 (5421) used greatest stack depth: 7344 bytes left [ 74.944953][ T5469] loop0: detected capacity change from 0 to 2048 [ 75.054955][ T5473] loop0: detected capacity change from 0 to 512 [ 75.062117][ T5473] EXT4-fs: Ignoring removed bh option [ 75.067857][ T5473] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 75.077041][ T5473] EXT4-fs (loop0): 1 truncate cleaned up [ 75.082965][ T5473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.115087][ T5476] loop4: detected capacity change from 0 to 512 [ 75.122732][ T5476] EXT4-fs (loop4): first meta block group too large: 16711680 (group descriptor block count 1) [ 75.133225][ T5473] loop0: detected capacity change from 512 to 64 [ 75.153164][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.189110][ T5476] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 75.648709][ T29] audit: type=1400 audit(2000000049.460:3110): avc: denied { create } for pid=5496 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 75.669847][ T29] audit: type=1400 audit(2000000049.460:3111): avc: denied { setattr } for pid=5496 comm="syz-executor.2" name="file0" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 75.669874][ T29] audit: type=1400 audit(2000000049.460:3112): avc: denied { write } for pid=5496 comm="syz-executor.2" name="file0" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 75.669897][ T29] audit: type=1400 audit(2000000049.460:3113): avc: denied { open } for pid=5496 comm="syz-executor.2" path="/root/syzkaller-testdir1465069922/syzkaller.GTKEbM/7/file0" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 75.788627][ T5499] loop2: detected capacity change from 0 to 2048 [ 75.796130][ T5499] EXT4-fs: Ignoring removed bh option [ 75.801523][ T5499] ext4: Unknown parameter 'noacl' [ 75.825553][ T5503] loop1: detected capacity change from 0 to 8192 [ 76.032984][ T5510] loop1: detected capacity change from 0 to 4096 [ 76.042084][ T5510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.126230][ T5183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.221436][ T5520] team0: entered promiscuous mode [ 76.226661][ T5520] team_slave_0: entered promiscuous mode [ 76.232634][ T5520] team_slave_1: entered promiscuous mode [ 76.255165][ T5520] syz_tun: entered promiscuous mode [ 76.265160][ T5519] syz_tun: left promiscuous mode [ 76.270153][ T5519] team0: left promiscuous mode [ 76.275039][ T5519] team_slave_0: left promiscuous mode [ 76.280451][ T5519] team_slave_1: left promiscuous mode [ 76.357213][ T5534] loop0: detected capacity change from 0 to 512 [ 76.365161][ T5534] EXT4-fs: Ignoring removed bh option [ 76.370781][ T5534] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 76.384641][ T5534] EXT4-fs (loop0): 1 truncate cleaned up [ 76.394030][ T5534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.457353][ T5539] loop4: detected capacity change from 0 to 8192 [ 76.464191][ T5534] loop0: detected capacity change from 512 to 64 [ 76.499659][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.613207][ T5547] loop0: detected capacity change from 0 to 4096 [ 76.621931][ T5547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.662108][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.684021][ T5558] loop4: detected capacity change from 0 to 512 [ 76.691374][ T5558] EXT4-fs: Ignoring removed bh option [ 76.706549][ T5558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.719212][ T5558] ext4 filesystem being mounted at /root/syzkaller-testdir2156956222/syzkaller.hEosm1/16/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.756435][ T5276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.998272][ T5585] loop4: detected capacity change from 0 to 512 [ 77.011591][ T5585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.025163][ T5585] ext4 filesystem being mounted at /root/syzkaller-testdir2156956222/syzkaller.hEosm1/19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.082151][ T5276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.138121][ T5596] loop2: detected capacity change from 0 to 8192 [ 77.191239][ T5603] loop4: detected capacity change from 0 to 4096 [ 77.200420][ T5603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.232779][ T5276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.281550][ T5606] loop1: detected capacity change from 0 to 8192 [ 77.467903][ T5620] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 77.558088][ T29] kauditd_printk_skb: 910 callbacks suppressed [ 77.558101][ T29] audit: type=1326 audit(2000000051.370:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a7dc0a9 code=0x7ffc0000 [ 77.589985][ T29] audit: type=1326 audit(2000000051.400:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f9a7dc0a9 code=0x7ffc0000 [ 77.614073][ T29] audit: type=1326 audit(2000000051.400:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a7dc0a9 code=0x7ffc0000 [ 77.638191][ T29] audit: type=1326 audit(2000000051.400:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a7dc0a9 code=0x7ffc0000 [ 77.662335][ T29] audit: type=1326 audit(2000000051.400:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f9a7dc0a9 code=0x7ffc0000 [ 77.692105][ T29] audit: type=1326 audit(2000000051.500:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f9a7dc0a9 code=0x7ffc0000 [ 77.716265][ T29] audit: type=1326 audit(2000000051.500:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f9a7d9827 code=0x7ffc0000 [ 77.740264][ T29] audit: type=1326 audit(2000000051.500:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f9a79f4e9 code=0x7ffc0000 [ 77.764475][ T29] audit: type=1326 audit(2000000051.500:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f9a7d9827 code=0x7ffc0000 [ 77.788422][ T29] audit: type=1326 audit(2000000051.500:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f9a79f4e9 code=0x7ffc0000 [ 77.901516][ T5648] loop0: detected capacity change from 0 to 4096 [ 77.910155][ T5651] loop4: detected capacity change from 0 to 8192 [ 77.927028][ T5648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.944693][ T5660] loop2: detected capacity change from 0 to 512 [ 77.952275][ T5660] EXT4-fs: Ignoring removed nobh option [ 77.970390][ T5660] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 77.979152][ T5660] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz-executor.2: attempt to clear invalid blocks 2 len 1 [ 77.993520][ T5660] EXT4-fs (loop2): Remounting filesystem read-only [ 78.001012][ T5660] EXT4-fs (loop2): 1 truncate cleaned up [ 78.007357][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.010860][ T5660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.030771][ T5660] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 78.039914][ T5660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.070803][ T5670] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 78.103764][ T5670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.120922][ T5670] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 78.164341][ T5670] SELinux: Context system_u:object_r is not valid (left unmapped). [ 78.207815][ T3128] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.345564][ T28] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.507122][ T5697] loop0: detected capacity change from 0 to 4096 [ 78.527756][ T5697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.573534][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.752994][ T5703] loop1: detected capacity change from 0 to 8192 [ 78.951018][ T5728] loop1: detected capacity change from 0 to 4096 [ 78.960173][ T5728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.005089][ T5183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.046373][ T5732] loop0: detected capacity change from 0 to 512 [ 79.055964][ T5734] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.058589][ T5732] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 79.079880][ T5732] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 79.093496][ T5732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.149178][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.202455][ T5754] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.248763][ T5755] loop0: detected capacity change from 0 to 8192 [ 79.266815][ T5761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=5761 comm=syz-executor.2 [ 79.279924][ T5761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=5761 comm=syz-executor.2 [ 79.293101][ T5761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=5761 comm=syz-executor.2 [ 79.306109][ T5761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=5761 comm=syz-executor.2 [ 79.319070][ T5761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=5761 comm=syz-executor.2 [ 79.332073][ T5761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=5761 comm=syz-executor.2 [ 79.345066][ T5761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=5761 comm=syz-executor.2 [ 79.358003][ T5761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5761 comm=syz-executor.2 [ 79.478770][ T5767] loop0: detected capacity change from 0 to 4096 [ 79.489200][ T5767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.525923][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.598172][ T5770] loop0: detected capacity change from 0 to 8192 [ 80.159698][ T5800] loop4: detected capacity change from 0 to 1024 [ 80.178586][ T5800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.193379][ T5804] loop1: detected capacity change from 0 to 4096 [ 80.202467][ T5804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.310541][ T5183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.352973][ T5276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.409925][ T5816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.478226][ T5825] veth1_macvtap: left promiscuous mode [ 80.579375][ T5835] loop2: detected capacity change from 0 to 128 [ 80.588319][ T5835] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.600501][ T5835] ext4 filesystem being mounted at /root/syzkaller-testdir1465069922/syzkaller.GTKEbM/30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.656591][ T5214] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.688550][ T5842] loop0: detected capacity change from 0 to 4096 [ 80.692484][ T5844] loop2: detected capacity change from 0 to 256 [ 80.703164][ T5842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.707990][ T5844] FAT-fs (loop2): Directory bread(block 64) failed [ 80.722316][ T5844] FAT-fs (loop2): Directory bread(block 65) failed [ 80.728893][ T5844] FAT-fs (loop2): Directory bread(block 66) failed [ 80.735433][ T5844] FAT-fs (loop2): Directory bread(block 67) failed [ 80.742107][ T5844] FAT-fs (loop2): Directory bread(block 68) failed [ 80.748636][ T5844] FAT-fs (loop2): Directory bread(block 69) failed [ 80.755210][ T5844] FAT-fs (loop2): Directory bread(block 70) failed [ 80.761727][ T5844] FAT-fs (loop2): Directory bread(block 71) failed [ 80.768709][ T5844] FAT-fs (loop2): Directory bread(block 72) failed [ 80.775683][ T5844] FAT-fs (loop2): Directory bread(block 73) failed [ 80.783100][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.858645][ T5849] loop0: detected capacity change from 0 to 1024 [ 80.875836][ T5849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.987174][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.306692][ T5877] loop1: detected capacity change from 0 to 4096 [ 81.316640][ T5877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.359213][ T5183] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.604920][ T5892] loop4: detected capacity change from 0 to 512 [ 81.613433][ T5892] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.620308][ T5892] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 81.635465][ T5892] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block [ 81.648576][ T5892] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 81.657287][ T5892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.670517][ T5892] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 81.685265][ T5892] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block [ 81.706586][ T5276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.049827][ T5917] 9pnet_virtio: no channels available for device [ 82.141019][ T5920] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.344273][ T5922] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 82.351344][ T5920] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 82.376658][ T5936] loop0: detected capacity change from 0 to 512 [ 82.385375][ T5936] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 5: invalid block bitmap [ 82.398191][ T5936] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 82.407387][ T5936] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 3 (level 2) [ 82.421435][ T5936] EXT4-fs (loop0): 1 orphan inode deleted [ 82.427232][ T5936] EXT4-fs (loop0): 1 truncate cleaned up [ 82.427675][ T5936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.481404][ T5219] EXT4-fs error (device loop0): ext4_lookup:1854: inode #17: comm syz-executor.0: iget: bad extended attribute block 6904 [ 82.481667][ T5219] EXT4-fs error (device loop0): ext4_lookup:1854: inode #17: comm syz-executor.0: iget: bad extended attribute block 6904 [ 82.536438][ T5944] ================================================================== [ 82.544521][ T5944] BUG: KCSAN: data-race in n_tty_write / tty_set_termios [ 82.551529][ T5944] [ 82.553830][ T5944] read-write to 0xffff888118c66d14 of 4 bytes by task 5945 on cpu 0: [ 82.561955][ T5944] tty_set_termios+0x1a2/0x8b0 [ 82.566694][ T5944] set_termios+0x365/0x4e0 [ 82.571087][ T5944] tty_mode_ioctl+0x391/0x5d0 [ 82.575752][ T5944] n_tty_ioctl_helper+0x8d/0x240 [ 82.580688][ T5944] n_tty_ioctl+0xfd/0x200 [ 82.585001][ T5944] tty_ioctl+0x886/0xbe0 [ 82.589247][ T5944] __se_sys_ioctl+0xd3/0x150 [ 82.593828][ T5944] __x64_sys_ioctl+0x43/0x50 [ 82.598398][ T5944] x64_sys_call+0x1581/0x2d70 [ 82.603054][ T5944] do_syscall_64+0xc9/0x1c0 [ 82.607544][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.613418][ T5944] [ 82.615717][ T5944] read to 0xffff888118c66d14 of 4 bytes by task 5944 on cpu 1: [ 82.623241][ T5944] n_tty_write+0xa0/0xb90 [ 82.627580][ T5944] file_tty_write+0x386/0x690 [ 82.632256][ T5944] tty_write+0x28/0x30 [ 82.636413][ T5944] vfs_write+0x78f/0x900 [ 82.640651][ T5944] ksys_write+0xeb/0x1b0 [ 82.644876][ T5944] __x64_sys_write+0x42/0x50 [ 82.649531][ T5944] x64_sys_call+0x27ef/0x2d70 [ 82.654189][ T5944] do_syscall_64+0xc9/0x1c0 [ 82.658669][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.664542][ T5944] [ 82.666843][ T5944] value changed: 0x00008a3b -> 0x0000001f [ 82.672537][ T5944] [ 82.674927][ T5944] Reported by Kernel Concurrency Sanitizer on: [ 82.681069][ T5944] CPU: 1 PID: 5944 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00330-g7c16f0a4ed1c #0 [ 82.691458][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 82.701490][ T5944] ================================================================== [ 82.710502][ T29] kauditd_printk_skb: 825 callbacks suppressed 2033/05/18 03:34:16 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 82.710513][ T29] audit: type=1400 audit(2000000056.520:4859): avc: denied { write } for pid=3073 comm="syz-fuzzer" path="pipe:[607]" dev="pipefs" ino=607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 82.775361][ T5219] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.