last executing test programs: 13.226724801s ago: executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0x0, "fffffffffffff1ff"}) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001a80)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000980), &(0x7f0000000080)=0x8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYRES32=0x0], 0x44, 0x2f5, &(0x7f0000000b40)="$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") 13.118768668s ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000cc0)='./file0\x00', 0x800714, &(0x7f0000000c40)={[{@quota}]}, 0x1, 0x485, &(0x7f0000001040)="$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") r1 = open(0x0, 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x4000) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:lost_found_t:s0\x00', 0x404043000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="8ec1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd73742880", 0x31}, {&(0x7f0000000340)="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", 0x217}, {&(0x7f0000000740)="1b3b351333f3a3b13679144b7cd873d2ed55c75dde5829aceff19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1da5b2411d093471a30c77ca0d06d1576a43cbd422dd9fc5aeeef4a0a53a5d93a9b5b000bba7223848aa6b97abe164077f7737311f187ffdfefdae072f6c3d59bf3a7d1565", 0x91}], 0x3}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x10) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 12.939587706s ago: executing program 3: madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f00005b9000/0x3000)=nil, &(0x7f00008b3000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}) 12.789617689s ago: executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) 12.774008541s ago: executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x2000400) setsockopt$SO_J1939_ERRQUEUE(r0, 0x29, 0x36, 0x0, 0x0) 12.761592113s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) io_uring_setup(0x168e, &(0x7f0000000000)) pipe(&(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x2) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe, 0x1fc, 0x8000000000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) 3.040163642s ago: executing program 0: r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) mq_timedsend(r0, 0x0, 0x0, 0x1, &(0x7f0000000000)={r1, r2+10000000}) mq_timedsend(r0, &(0x7f00000007c0)="f9", 0x1, 0x0, 0x0) r3 = mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x883, 0x82, &(0x7f0000000040)={0x1, 0x5, 0x2, 0x8}) r4 = socket$inet(0x2, 0x3, 0xd9) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) mq_timedsend(r3, &(0x7f0000000380)="44371b30a7f8dbc540fa08c05b", 0xd, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000780)={[0x2720fdf6]}, &(0x7f0000000800), &(0x7f0000000880), 0x8) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = getpgrp(0x0) r7 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f00000000c0)) mq_notify(r3, &(0x7f0000000580)={0x0, 0x28, 0x1, @thr={&(0x7f0000000440)="c3e115da5ad0be5b59b1700872bbc13d8374bdb1a297173f4207b6b89e5056259f6bc6fe286cc5015b5cfc5743cd49151141bfa9fadd7f35ecff1fca7b9f100b27bbdaaef6b14450e5c7d87dfa38138a6584b75ccf6392c3d67e253b8699e4650029b9d32e30bd10cf38ba412d41d73f", &(0x7f00000004c0)="6586345d0164418f013b93fd2cb0d31dd3082801dbd71800336ed52fad764a7edbe5511908d27e9b6367c8c1930eb187f15b34f8cd900aa236765b654b05a5f8c64b4bea9f2f7eac9d61c0e86c879b4c197ea2017239177a675b5cf25c60096e3b5aaee5a0c67a8ceaf58f2483ba9660507453f6d23b1bc1ffe4a237e955cd3a4dfe97eb569eb884d8409685c74887d0"}}) mq_notify(r0, &(0x7f00000003c0)={0x0, 0x37, 0x2, @tid=r7}) syz_io_uring_setup(0x7db5, &(0x7f00000005c0)={0x0, 0x21d9, 0x2, 0x1, 0x3d6}, &(0x7f0000000640), &(0x7f0000000680)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) r8 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r8, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000032340)=""/102375, 0x18fe7, 0x0, 0x0) 2.176511285s ago: executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.860345203s ago: executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x20002) write$sndseq(r1, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.319350587s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000300)={0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x400b, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 1.206680534s ago: executing program 0: r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) mq_timedsend(r0, 0x0, 0x0, 0x1, &(0x7f0000000000)={r1, r2+10000000}) mq_timedsend(r0, &(0x7f00000007c0)="f9", 0x1, 0x0, 0x0) r3 = mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x883, 0x82, &(0x7f0000000040)={0x1, 0x5, 0x2, 0x8}) r4 = socket$inet(0x2, 0x3, 0xd9) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) mq_timedsend(r3, &(0x7f0000000380)="44371b30a7f8dbc540fa08c05b", 0xd, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000780)={[0x2720fdf6]}, &(0x7f0000000800), &(0x7f0000000880), 0x8) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = getpgrp(0x0) r7 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f00000000c0)) mq_notify(r3, &(0x7f0000000580)={0x0, 0x28, 0x1, @thr={&(0x7f0000000440)="c3e115da5ad0be5b59b1700872bbc13d8374bdb1a297173f4207b6b89e5056259f6bc6fe286cc5015b5cfc5743cd49151141bfa9fadd7f35ecff1fca7b9f100b27bbdaaef6b14450e5c7d87dfa38138a6584b75ccf6392c3d67e253b8699e4650029b9d32e30bd10cf38ba412d41d73f", &(0x7f00000004c0)="6586345d0164418f013b93fd2cb0d31dd3082801dbd71800336ed52fad764a7edbe5511908d27e9b6367c8c1930eb187f15b34f8cd900aa236765b654b05a5f8c64b4bea9f2f7eac9d61c0e86c879b4c197ea2017239177a675b5cf25c60096e3b5aaee5a0c67a8ceaf58f2483ba9660507453f6d23b1bc1ffe4a237e955cd3a4dfe97eb569eb884d8409685c74887d0"}}) mq_notify(r0, &(0x7f00000003c0)={0x0, 0x37, 0x2, @tid=r7}) syz_io_uring_setup(0x7db5, &(0x7f00000005c0)={0x0, 0x21d9, 0x2, 0x1, 0x3d6}, &(0x7f0000000640), &(0x7f0000000680)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) r8 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r8, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000032340)=""/102375, 0x18fe7, 0x0, 0x0) 1.178852069s ago: executing program 4: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000080007000000000018000180140002006e657464657673696d30000000000000080006"], 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRES32=r4, @ANYRES16=r5], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e7", 0x1, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.141943134s ago: executing program 4: open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="b0fef28adda655a00a8ce0bb7d504206000000000000001abe0a88f67472c3cd975c9884ae01084df2b7f556e2a043b74efe85a30267", 0x36}], 0x1}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000340)={{0x80, 0x40}, {0x1, 0xea}, 0x40000, 0x4, 0x4}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newspdinfo={0x1c, 0x24, 0x800, 0x70bd25, 0x25dfdbfb, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) r10 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.013410154s ago: executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@abs={0x1e}, 0x6e, 0x0}}], 0x2, 0x6e) 1.000407926s ago: executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000f51000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000c70000/0x4000)=nil) mremap(&(0x7f0000ee7000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000c9c000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 988.665028ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}], 0x18, 0xe000}, 0x5}], 0x1, 0x8000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 344.663747ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) 286.527037ms ago: executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$VT_GETSTATE(r0, 0x4b65, 0x0) 263.38994ms ago: executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7fffffff}]}) sched_setattr(0x0, &(0x7f0000000140)={0x82}, 0x0) 255.634021ms ago: executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0}) accept$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000013000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000000080002400000000208000340000000310900010073797a30000000000900394473797a3200057000140000001100010000000000000000000000000a2252c824d937e66a9bc6897b85d4ccc81aa619752f25a2bcff9e6c3debdb8175ac7bdb595efbbb473529c53f5e6b5b46e8c405a582f35120a07d988f074696d09ccc1e68fe2858d8752711f1"], 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) socket(0x27, 0x4, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x280, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'wg0\x00', {}, {}, 0x6c, 0x0, 0x28}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) iopl(0x3) r8 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000002c0)={[0xffeffffffffffff6]}, 0x0, 0x0, 0x8) tkill(r8, 0x26) semtimedop(0xffffffffffffffff, &(0x7f0000000040)=[{0x2, 0x0, 0x1800}, {0x3, 0x1, 0x1800}, {0x4, 0xffff, 0x1800}, {0x0, 0x6}], 0x4, &(0x7f0000000080)={0x77359400}) get_mempolicy(0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x3) 241.234183ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 224.834426ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x6, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f040e00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0x1092, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 208.345889ms ago: executing program 4: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0x9, 0x43000000}, {0x2}, {}]}]}}, &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xc8, 0x0, 0x8000, 0x0, r0, 0x4000000}, 0x48) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x9, 0xfff, 0x4007}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}, 0x1, 0x0, 0x0, 0x43810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf5d13517f53f45a6, &(0x7f00000002c0)={[{@data_journal}, {@minixdf}]}, 0x0, 0x4e6, &(0x7f0000000840)="$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") r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x1000}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0xfffe, 0x1003}, 0x4) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8002}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 176.962223ms ago: executing program 2: rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000080)="2437460f1c2bdfd5c4a2f10027460f38e7418f69d8909ca3000810ffa5c43b3be5c436fe0d4e486df513bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 139.271449ms ago: executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x1000)=nil) 109.309274ms ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000100f1ff0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000080)='MS{O', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) mq_timedsend(r0, 0x0, 0x0, 0x1, &(0x7f0000000000)={r1, r2+10000000}) mq_timedsend(r0, &(0x7f00000007c0)="f9", 0x1, 0x0, 0x0) r3 = mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x883, 0x82, &(0x7f0000000040)={0x1, 0x5, 0x2, 0x8}) r4 = socket$inet(0x2, 0x3, 0xd9) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) mq_timedsend(r3, &(0x7f0000000380)="44371b30a7f8dbc540fa08c05b", 0xd, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000780)={[0x2720fdf6]}, &(0x7f0000000800), &(0x7f0000000880), 0x8) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = getpgrp(0x0) r7 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f00000000c0)) mq_notify(r3, &(0x7f0000000580)={0x0, 0x28, 0x1, @thr={&(0x7f0000000440)="c3e115da5ad0be5b59b1700872bbc13d8374bdb1a297173f4207b6b89e5056259f6bc6fe286cc5015b5cfc5743cd49151141bfa9fadd7f35ecff1fca7b9f100b27bbdaaef6b14450e5c7d87dfa38138a6584b75ccf6392c3d67e253b8699e4650029b9d32e30bd10cf38ba412d41d73f", &(0x7f00000004c0)="6586345d0164418f013b93fd2cb0d31dd3082801dbd71800336ed52fad764a7edbe5511908d27e9b6367c8c1930eb187f15b34f8cd900aa236765b654b05a5f8c64b4bea9f2f7eac9d61c0e86c879b4c197ea2017239177a675b5cf25c60096e3b5aaee5a0c67a8ceaf58f2483ba9660507453f6d23b1bc1ffe4a237e955cd3a4dfe97eb569eb884d8409685c74887d0"}}) mq_notify(r0, &(0x7f00000003c0)={0x0, 0x37, 0x2, @tid=r7}) syz_io_uring_setup(0x7db5, &(0x7f00000005c0)={0x0, 0x21d9, 0x2, 0x1, 0x3d6}, &(0x7f0000000640), &(0x7f0000000680)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0xffffffffffffffff, 0x0, 0x0) r8 = semget$private(0x0, 0x4, 0x0) semctl$IPC_RMID(r8, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000032340)=""/102375, 0x18fe7, 0x0, 0x0) 55.329152ms ago: executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x14, 0x0, 0x34, {[@noop]}}}], 0x18}, 0x0) 0s ago: executing program 2: open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="b0fef28adda655a00a8ce0bb7d504206000000000000001abe0a88f67472c3cd975c9884ae01084df2b7f556e2a043b74efe85a30267", 0x36}], 0x1}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000340)={{0x80, 0x40}, {0x1, 0xea}, 0x40000, 0x4, 0x4}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newspdinfo={0x1c, 0x24, 0x800, 0x70bd25, 0x25dfdbfb, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) r10 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): 074] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.067081][ T6097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.075822][ T6097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.085643][ T6097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.107386][ T11] hsr_slave_0: left promiscuous mode [ 67.112910][ T11] hsr_slave_1: left promiscuous mode [ 67.118571][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.126134][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.133906][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.141435][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.150399][ T11] veth1_macvtap: left promiscuous mode [ 67.155978][ T11] veth0_macvtap: left promiscuous mode [ 67.161496][ T11] veth1_vlan: left promiscuous mode [ 67.166763][ T11] veth0_vlan: left promiscuous mode [ 67.239414][ T11] team0 (unregistering): Port device team_slave_1 removed [ 67.249205][ T11] team0 (unregistering): Port device team_slave_0 removed [ 67.311731][ T6097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.326850][ T6097] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.336831][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.343896][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.356129][ T3178] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.363225][ T3178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.387926][ T6097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.446542][ T6097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.508905][ T6097] veth0_vlan: entered promiscuous mode [ 67.518656][ T6097] veth1_vlan: entered promiscuous mode [ 67.529951][ T6153] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.544803][ T6097] veth0_macvtap: entered promiscuous mode [ 67.561467][ T6097] veth1_macvtap: entered promiscuous mode [ 67.571771][ T6097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.582262][ T6097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.592098][ T6097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.602543][ T6097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.612332][ T6097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.622763][ T6097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.632572][ T6097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.643013][ T6097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.654604][ T6097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.674485][ T6097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.684949][ T6097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.694975][ T6097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.705512][ T6097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.715311][ T6097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.725865][ T6097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.735808][ T6097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.746230][ T6097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.756961][ T6097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.766955][ T6097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.775737][ T6097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.784520][ T6097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.793306][ T6097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.861113][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.871183][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.293408][ T6183] loop0: detected capacity change from 0 to 256 [ 68.302096][ T6183] FAT-fs (loop0): Unrecognized mount option "nontmtail=0" or missing value [ 68.449053][ T6196] Process accounting resumed [ 69.000024][ T6219] loop4: detected capacity change from 0 to 256 [ 69.007384][ T6219] FAT-fs (loop4): Unrecognized mount option "nontmtail=0" or missing value [ 69.096028][ T6221] loop4: detected capacity change from 0 to 256 [ 69.106927][ T29] audit: type=1326 audit(2000000031.140:16605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcba2d24ea9 code=0x0 [ 69.946081][ T6224] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.221258][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.265940][ T6240] loop4: detected capacity change from 0 to 512 [ 70.287215][ T6240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.300076][ T6240] ext4 filesystem being mounted at /root/syzkaller-testdir116248533/syzkaller.bARayd/24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.318760][ T29] audit: type=1400 audit(2000000032.350:16606): avc: denied { setattr } for pid=6239 comm="syz-executor.4" path="/root/syzkaller-testdir116248533/syzkaller.bARayd/24/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.319273][ T6230] chnl_net:caif_netlink_parms(): no params data found [ 70.350417][ T6240] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz-executor.4: corrupted inode contents [ 70.368989][ T6240] EXT4-fs (loop4): Remounting filesystem read-only [ 70.376344][ T6240] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -5) [ 70.392344][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.399627][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.408284][ T6230] bridge_slave_0: entered allmulticast mode [ 70.413683][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.414689][ T6230] bridge_slave_0: entered promiscuous mode [ 70.430982][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.438112][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.445337][ T6230] bridge_slave_1: entered allmulticast mode [ 70.451630][ T6230] bridge_slave_1: entered promiscuous mode [ 70.470435][ T6230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.481076][ T6230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.500783][ T6230] team0: Port device team_slave_0 added [ 70.507488][ T6230] team0: Port device team_slave_1 added [ 70.524143][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.531226][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.557323][ T6230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.568925][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.576132][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.602050][ T6230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.626386][ T6230] hsr_slave_0: entered promiscuous mode [ 70.632505][ T6230] hsr_slave_1: entered promiscuous mode [ 70.638408][ T6230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.645980][ T6230] Cannot create hsr debugfs directory [ 70.710011][ T6265] xt_bpf: check failed: parse error [ 70.742185][ T6267] loop4: detected capacity change from 0 to 8192 [ 70.749775][ T6267] FAT-fs (loop4): Unrecognized mount option "cgroup.controllers" or missing value [ 70.918398][ T29] audit: type=1400 audit(2000000032.950:16607): avc: denied { read } for pid=6272 comm="syz-executor.4" laddr=::1 lport=37694 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.020173][ T6278] loop4: detected capacity change from 0 to 512 [ 71.046784][ T6278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.059336][ T6278] ext4 filesystem being mounted at /root/syzkaller-testdir116248533/syzkaller.bARayd/37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.078416][ T29] audit: type=1400 audit(2000000033.110:16608): avc: denied { map } for pid=6277 comm="syz-executor.4" path="/root/syzkaller-testdir116248533/syzkaller.bARayd/37/file0/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.111771][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.176434][ T6285] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.238714][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.404221][ T6290] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.427374][ T6292] loop4: detected capacity change from 0 to 2048 [ 71.437398][ T6292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.439804][ T6296] loop0: detected capacity change from 0 to 128 [ 71.444041][ T6292] ext4: Unknown parameter 'nomblk_io_submitbarrier' [ 71.534201][ T29] audit: type=1400 audit(2000000033.560:16609): avc: denied { read } for pid=6305 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.590433][ T6310] loop0: detected capacity change from 0 to 8192 [ 71.598356][ T6310] FAT-fs (loop0): Unrecognized mount option "cgroup.controllers" or missing value [ 71.618567][ T29] audit: type=1400 audit(2000000033.650:16610): avc: denied { setopt } for pid=6313 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.658480][ T6316] sctp: [Deprecated]: syz-executor.4 (pid 6316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.658480][ T6316] Use struct sctp_sack_info instead [ 71.721787][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.762811][ T6326] loop0: detected capacity change from 0 to 2048 [ 71.770960][ T6326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.777618][ T6326] ext4: Unknown parameter 'nomblk_io_submitbarrier' [ 71.921111][ T6338] RDS: rds_bind could not find a transport for 0:0:80::ffff:ffff, load rds_tcp or rds_rdma? [ 71.922038][ T29] audit: type=1400 audit(2000000033.950:16611): avc: denied { bind } for pid=6337 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.964002][ T6340] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.060630][ T6342] sctp: [Deprecated]: syz-executor.0 (pid 6342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.060630][ T6342] Use struct sctp_sack_info instead [ 72.206000][ T29] audit: type=1400 audit(2000000034.240:16612): avc: denied { setopt } for pid=6351 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.234666][ T6354] loop0: detected capacity change from 0 to 512 [ 72.242375][ T6354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.251541][ T6354] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.259187][ T6354] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 72.274060][ T6354] Quota error (device loop0): write_blk: dquota write failed [ 72.281535][ T6354] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 72.291457][ T6354] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz-executor.0: Failed to acquire dquot type 1 [ 72.303901][ T6354] EXT4-fs (loop0): 1 truncate cleaned up [ 72.310003][ T6354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.334493][ T6097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.422766][ T6357] loop0: detected capacity change from 0 to 8192 [ 72.465367][ T6357] loop0: p1 p4 [ 72.468856][ T6357] loop0: p1 size 8388608 extends beyond EOD, truncated [ 72.476565][ T6357] loop0: p4 start 4278190080 is beyond EOD, truncated [ 72.607617][ T6367] loop0: detected capacity change from 0 to 128 [ 72.615652][ T29] audit: type=1400 audit(2000000034.650:16613): avc: denied { map } for pid=6366 comm="syz-executor.0" path="/root/syzkaller-testdir3470554142/syzkaller.F4WsIJ/36/bus" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.717366][ T6371] loop0: detected capacity change from 0 to 256 [ 72.748522][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.798061][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.858083][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.902690][ T6374] loop4: detected capacity change from 0 to 1024 [ 72.910545][ T6374] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 72.921562][ T6374] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 72.931235][ T6374] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.942780][ T6374] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz-executor.4: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 72.961111][ T6374] EXT4-fs (loop4): no journal found [ 72.966358][ T6374] EXT4-fs (loop4): can't get journal size [ 72.972296][ T55] bridge_slave_1: left allmulticast mode [ 72.972907][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.978000][ T55] bridge_slave_1: left promiscuous mode [ 72.996010][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.003735][ T55] bridge_slave_0: left allmulticast mode [ 73.009426][ T55] bridge_slave_0: left promiscuous mode [ 73.015009][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.031140][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.108347][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.118513][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.128442][ T55] bond0 (unregistering): Released all slaves [ 73.196326][ T6383] RDS: rds_bind could not find a transport for 0:0:80::ffff:ffff, load rds_tcp or rds_rdma? [ 73.268716][ T55] hsr_slave_0: left promiscuous mode [ 73.275637][ T55] hsr_slave_1: left promiscuous mode [ 73.281462][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.289017][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.301987][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.306790][ T6385] sctp: [Deprecated]: syz-executor.4 (pid 6385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.306790][ T6385] Use struct sctp_sack_info instead [ 73.309597][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.335685][ T55] veth1_macvtap: left promiscuous mode [ 73.341165][ T55] veth0_macvtap: left promiscuous mode [ 73.346837][ T55] veth1_vlan: left promiscuous mode [ 73.352059][ T55] veth0_vlan: left promiscuous mode [ 73.432889][ T55] team0 (unregistering): Port device team_slave_1 removed [ 73.442793][ T55] team0 (unregistering): Port device team_slave_0 removed [ 73.562904][ T6230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.571584][ T6394] loop0: detected capacity change from 0 to 128 [ 73.572952][ T6230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.587543][ T6230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.608260][ T6230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.639749][ T6396] loop4: detected capacity change from 0 to 1024 [ 73.665903][ T6396] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 73.677987][ T6230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.690762][ T6230] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.701111][ T3185] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.708214][ T3185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.719454][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.726525][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.763076][ T6230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.773451][ T6230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.843094][ T6414] loop0: detected capacity change from 0 to 512 [ 73.856398][ T6413] loop4: detected capacity change from 0 to 2048 [ 73.863398][ T6413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.863896][ T6414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.870102][ T6413] ext4: Unknown parameter 'nomblk_io_submitbarrier' [ 73.890266][ T6414] ext4 filesystem being mounted at /root/syzkaller-testdir3470554142/syzkaller.F4WsIJ/44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.908685][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.917972][ T6414] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #19: comm syz-executor.0: corrupted inode contents [ 73.941531][ T6414] EXT4-fs (loop0): Remounting filesystem read-only [ 73.949497][ T6414] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -5) [ 73.982177][ T6097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.992000][ T6230] veth0_vlan: entered promiscuous mode [ 73.995373][ T6422] sctp: [Deprecated]: syz-executor.4 (pid 6422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.995373][ T6422] Use struct sctp_sack_info instead [ 74.002015][ T6230] veth1_vlan: entered promiscuous mode [ 74.037313][ T6230] veth0_macvtap: entered promiscuous mode [ 74.044879][ T6230] veth1_macvtap: entered promiscuous mode [ 74.058127][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.068643][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.078554][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.088999][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.098921][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.109347][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.119153][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.129597][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.140327][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.149675][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.160151][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.169966][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.180462][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.190268][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.200760][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.210562][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.221102][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.231693][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.244634][ T6230] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.253375][ T6230] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.262149][ T6230] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.270871][ T6230] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.282688][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.310898][ T6434] loop0: detected capacity change from 0 to 128 [ 74.332709][ T6437] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.471728][ T6451] loop4: detected capacity change from 0 to 512 [ 74.486414][ T6449] loop0: detected capacity change from 0 to 8192 [ 74.498507][ T6451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.505382][ T6455] loop3: detected capacity change from 0 to 512 [ 74.511168][ T6451] ext4 filesystem being mounted at /root/syzkaller-testdir116248533/syzkaller.bARayd/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.532220][ T6455] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.542242][ T6455] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.545327][ T6449] loop0: p1 p4 [ 74.550952][ T6455] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 248: padding at end of block bitmap is not set [ 74.552032][ T6449] loop0: p1 size 8388608 extends beyond EOD, truncated [ 74.567452][ T6455] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 1 [ 74.575064][ T6451] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #19: comm syz-executor.4: corrupted inode contents [ 74.586072][ T6455] EXT4-fs (loop3): 1 truncate cleaned up [ 74.598966][ T6451] EXT4-fs (loop4): Remounting filesystem read-only [ 74.604420][ T6455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.610432][ T6449] loop0: p4 start 4278190080 is beyond EOD, truncated [ 74.629156][ T6451] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -5) [ 74.649086][ T6230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.661825][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.751487][ T6470] loop0: detected capacity change from 0 to 128 [ 74.860288][ T6480] loop0: detected capacity change from 0 to 512 [ 74.872219][ T6480] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 74.886281][ T6480] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 74.902607][ T6480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.928145][ T6097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.947653][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 75.030233][ T6508] Process accounting resumed [ 75.193669][ T6510] loop0: detected capacity change from 0 to 1024 [ 75.205626][ T6510] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 75.526161][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 75.526173][ T29] audit: type=1400 audit(2000000037.560:16620): avc: denied { override_creds } for pid=6533 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.577803][ T6540] loop0: detected capacity change from 0 to 1024 [ 75.596302][ T6540] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 75.679440][ T6557] syzkaller1: entered promiscuous mode [ 75.684989][ T6557] syzkaller1: entered allmulticast mode [ 75.765604][ T29] audit: type=1400 audit(2000000037.800:16621): avc: denied { getopt } for pid=6559 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.997729][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.060405][ T29] audit: type=1400 audit(2000000038.090:16622): avc: denied { getopt } for pid=6587 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.241955][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.273151][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.700538][ T29] audit: type=1400 audit(2000000038.730:16623): avc: denied { bind } for pid=6604 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.724922][ T6605] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.442350][ T6620] loop0: detected capacity change from 0 to 1024 [ 77.456986][ T6620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.474432][ T29] audit: type=1400 audit(2000000039.500:16624): avc: denied { execute } for pid=6619 comm="syz-executor.0" path="/root/syzkaller-testdir3470554142/syzkaller.F4WsIJ/97/file1/cpuacct.usage_percpu_user" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.506373][ T6097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.571122][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.591576][ T29] audit: type=1400 audit(2000000040.620:16625): avc: denied { watch watch_reads } for pid=6644 comm="syz-executor.0" path="/proc/6644" dev="proc" ino=19685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 78.834164][ T29] audit: type=1400 audit(2000000040.860:16626): avc: denied { read } for pid=6660 comm="syz-executor.0" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 78.857870][ T29] audit: type=1400 audit(2000000040.860:16627): avc: denied { open } for pid=6660 comm="syz-executor.0" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 78.949812][ T6673] loop0: detected capacity change from 0 to 1024 [ 78.966547][ T6673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.980757][ T29] audit: type=1400 audit(2000000041.010:16628): avc: denied { read write } for pid=6672 comm="syz-executor.0" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.004097][ T29] audit: type=1400 audit(2000000041.010:16629): avc: denied { open } for pid=6672 comm="syz-executor.0" path="/root/syzkaller-testdir3470554142/syzkaller.F4WsIJ/117/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.035674][ T6097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.231519][ T6700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=584 sclass=netlink_route_socket pid=6700 comm=syz-executor.0 [ 79.245025][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.254485][ T6700] netlink: 'syz-executor.0': attribute type 18 has an invalid length. [ 79.360064][ T6704] loop4: detected capacity change from 0 to 1024 [ 79.367710][ T6704] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 79.378658][ T6704] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 79.388408][ T6704] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.399093][ T6704] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz-executor.4: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 79.417710][ T6704] EXT4-fs (loop4): no journal found [ 79.422911][ T6704] EXT4-fs (loop4): can't get journal size [ 79.429245][ T6704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.429721][ T6605] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.478990][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.500084][ T6605] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.541494][ T6605] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.591339][ T6605] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.602091][ T6605] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.612696][ T6605] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.623500][ T6605] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.748243][ T6723] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.768551][ T6721] loop3: detected capacity change from 0 to 512 [ 79.788836][ T6721] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 1 [ 79.801123][ T6721] EXT4-fs (loop3): 1 truncate cleaned up [ 79.807213][ T6721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.819763][ T6721] ext4 filesystem being mounted at /root/syzkaller-testdir1880125983/syzkaller.M3aHrl/20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.885528][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.894816][ T6730] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.954199][ T6740] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.008566][ T6740] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.078571][ T6740] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.132474][ T6740] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.140986][ T6750] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.181775][ T6740] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.192721][ T6740] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.203446][ T6740] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.214243][ T6740] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.387908][ T6769] loop4: detected capacity change from 0 to 1024 [ 80.395733][ T6769] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 80.406734][ T6769] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 80.416473][ T6769] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 80.427248][ T6769] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz-executor.4: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 80.445803][ T6769] EXT4-fs (loop4): no journal found [ 80.450993][ T6769] EXT4-fs (loop4): can't get journal size [ 80.457468][ T6769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.488385][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.567612][ T6230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.580538][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.665773][ T6775] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.681215][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.726950][ T6775] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.778926][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.808454][ T6775] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.819267][ T6776] chnl_net:caif_netlink_parms(): no params data found [ 80.841374][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.869554][ T6776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.876880][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.884171][ T6776] bridge_slave_0: entered allmulticast mode [ 80.884525][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 80.884611][ T29] audit: type=1326 audit(2000000042.910:16706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8b0293ea9 code=0x0 [ 80.890674][ T6776] bridge_slave_0: entered promiscuous mode [ 80.927554][ T6775] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.939854][ T6776] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.946970][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.954165][ T6776] bridge_slave_1: entered allmulticast mode [ 80.960518][ T6776] bridge_slave_1: entered promiscuous mode [ 80.977614][ T6776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.987135][ T29] audit: type=1326 audit(2000000043.020:16707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b0293ea9 code=0x7ffc0000 [ 80.999221][ T6776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.024430][ T55] bridge_slave_1: left allmulticast mode [ 81.030145][ T55] bridge_slave_1: left promiscuous mode [ 81.035983][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.037070][ T29] audit: type=1326 audit(2000000043.040:16708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8b0293ea9 code=0x7ffc0000 [ 81.052374][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.067117][ T29] audit: type=1326 audit(2000000043.050:16709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b0293ea9 code=0x7ffc0000 [ 81.076277][ T6803] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.100368][ T29] audit: type=1326 audit(2000000043.050:16710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b0293ea9 code=0x7ffc0000 [ 81.133529][ T29] audit: type=1326 audit(2000000043.050:16711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8b0293ea9 code=0x7ffc0000 [ 81.157553][ T29] audit: type=1326 audit(2000000043.050:16712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b0293ea9 code=0x7ffc0000 [ 81.181610][ T29] audit: type=1326 audit(2000000043.050:16713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8b0291627 code=0x7ffc0000 [ 81.205554][ T29] audit: type=1326 audit(2000000043.050:16714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd8b0257309 code=0x7ffc0000 [ 81.229451][ T29] audit: type=1326 audit(2000000043.050:16715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd8b0291627 code=0x7ffc0000 [ 81.275394][ T55] bridge_slave_0: left allmulticast mode [ 81.281061][ T55] bridge_slave_0: left promiscuous mode [ 81.286729][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.419622][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.430601][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.441286][ T55] bond0 (unregistering): Released all slaves [ 81.479435][ T55] tipc: Left network mode [ 81.480237][ T6776] team0: Port device team_slave_0 added [ 81.490832][ T6776] team0: Port device team_slave_1 added [ 81.511823][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.518816][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.544732][ T6776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.557835][ T55] hsr_slave_0: left promiscuous mode [ 81.563732][ T55] hsr_slave_1: left promiscuous mode [ 81.570285][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.578334][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.593911][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.601344][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.618347][ T55] veth1_macvtap: left promiscuous mode [ 81.623830][ T55] veth0_macvtap: left promiscuous mode [ 81.629426][ T55] veth1_vlan: left promiscuous mode [ 81.634660][ T55] veth0_vlan: left promiscuous mode [ 81.765856][ T6816] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.766070][ T55] team0 (unregistering): Port device team_slave_1 removed [ 81.783572][ T55] team0 (unregistering): Port device team_slave_0 removed [ 81.818919][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.825915][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.851899][ T6776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.874984][ T6776] hsr_slave_0: entered promiscuous mode [ 81.881047][ T6776] hsr_slave_1: entered promiscuous mode [ 81.886962][ T6776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.894487][ T6776] Cannot create hsr debugfs directory [ 81.992617][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.999831][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.013574][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.020735][ T6819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.028053][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.035083][ T6819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.042582][ T6819] bridge0: entered promiscuous mode [ 82.047896][ T6819] bridge0: entered allmulticast mode [ 82.200211][ T6839] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 82.219533][ T6841] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.297906][ T6776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.306465][ T6776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.314727][ T6776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.324308][ T6776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.367014][ T6776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.381061][ T6776] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.392115][ T3178] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.399204][ T3178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.418765][ T6776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.429206][ T6776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.443215][ T3178] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.450375][ T3178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.511191][ T6776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.581579][ T6776] veth0_vlan: entered promiscuous mode [ 82.593259][ T6776] veth1_vlan: entered promiscuous mode [ 82.610894][ T6776] veth0_macvtap: entered promiscuous mode [ 82.618705][ T6776] veth1_macvtap: entered promiscuous mode [ 82.630365][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.640870][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.650786][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.661309][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.671112][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.681514][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.691295][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.701701][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.712543][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.723471][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.734041][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.743890][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.754310][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.764115][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.774564][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.784386][ T6776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.794821][ T6776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.806718][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.810162][ T6874] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 82.815002][ T6776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.829748][ T6776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.838495][ T6776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.847233][ T6776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.894741][ T6879] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.902555][ T6883] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 82.910670][ T6883] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 82.918973][ T6883] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.933534][ T6885] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.008337][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.024006][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.031095][ T6897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.038692][ T6897] bridge0: entered promiscuous mode [ 83.043931][ T6897] bridge0: entered allmulticast mode [ 83.148863][ T6915] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 83.157046][ T6915] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 83.165108][ T6915] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.684791][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.691915][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.699142][ T6932] bridge0: left promiscuous mode [ 83.704104][ T6932] bridge0: left allmulticast mode [ 83.715804][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.722875][ T6932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.730210][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.737258][ T6932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.744663][ T6932] bridge0: entered promiscuous mode [ 83.750033][ T6932] bridge0: entered allmulticast mode [ 83.877358][ T6944] wg2: entered promiscuous mode [ 83.882467][ T6944] wg2: entered allmulticast mode [ 83.890435][ T6946] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 83.898607][ T6946] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 83.906711][ T6946] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.082390][ T6959] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.416645][ T6979] loop1: detected capacity change from 0 to 1024 [ 84.426483][ T6979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.442003][ T6979] EXT4-fs error (device loop1): ext4_xattr_ibody_get:653: inode #2: comm syz-executor.1: corrupted in-inode xattr: bad e_name length [ 84.460937][ T6979] EXT4-fs (loop1): Remounting filesystem read-only [ 84.473654][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 84.483668][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 84.492523][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 84.502365][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 84.511226][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 84.522207][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 84.531699][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=11 [ 84.545043][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 84.553948][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 84.563022][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 84.571987][ T6776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 84.574210][ T6989] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 84.890081][ T7001] loop3: detected capacity change from 0 to 8192 [ 84.898482][ T7001] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.025284][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.180444][ T7019] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 85.558958][ T7031] loop3: detected capacity change from 0 to 1024 [ 85.568516][ T7031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.584431][ T7031] EXT4-fs error (device loop3): ext4_xattr_ibody_get:653: inode #2: comm syz-executor.3: corrupted in-inode xattr: bad e_name length [ 85.598279][ T7031] EXT4-fs (loop3): Remounting filesystem read-only [ 85.609208][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 85.618308][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 85.627174][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 85.635950][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 85.644756][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 85.653556][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 85.662677][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 85.671711][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 85.680587][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 85.689759][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 85.698592][ T6230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 85.935855][ T6230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.944954][ T3230] __quota_error: 4465 callbacks suppressed [ 85.944976][ T3230] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 85.963014][ T3230] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 85.978379][ T55] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.048620][ T7037] loop0: detected capacity change from 0 to 8192 [ 86.061157][ T7037] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.106846][ T55] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.157969][ T55] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.251090][ T7038] chnl_net:caif_netlink_parms(): no params data found [ 86.264066][ T55] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.302345][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.309446][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.317277][ T7038] bridge_slave_0: entered allmulticast mode [ 86.323519][ T7038] bridge_slave_0: entered promiscuous mode [ 86.330215][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.337280][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.344509][ T7038] bridge_slave_1: entered allmulticast mode [ 86.350898][ T7038] bridge_slave_1: entered promiscuous mode [ 86.372716][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.388272][ T7056] loop0: detected capacity change from 0 to 128 [ 86.392307][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.395885][ T7056] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 86.403806][ T55] bridge_slave_1: left allmulticast mode [ 86.418230][ T55] bridge_slave_1: left promiscuous mode [ 86.423914][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.431691][ T55] bridge_slave_0: left allmulticast mode [ 86.437466][ T55] bridge_slave_0: left promiscuous mode [ 86.443124][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.463060][ T28] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 86.473751][ T28] kworker/u8:1: attempt to access beyond end of device [ 86.473751][ T28] loop0: rw=1, sector=361, nr_sectors = 680 limit=128 [ 86.557590][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.567594][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.578158][ T55] bond0 (unregistering): Released all slaves [ 86.597365][ T7038] team0: Port device team_slave_0 added [ 86.603660][ T7038] team0: Port device team_slave_1 added [ 86.618713][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.625673][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.651604][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.663874][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.670847][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.696373][ T29] audit: type=1400 audit(2000000048.700:21181): avc: denied { shutdown } for pid=7063 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 86.697077][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.747788][ T7068] loop0: detected capacity change from 0 to 512 [ 86.747938][ T7038] hsr_slave_0: entered promiscuous mode [ 86.756030][ T7068] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.771202][ T7068] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 86.781363][ T7068] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 86.795061][ T7038] hsr_slave_1: entered promiscuous mode [ 86.800976][ T7068] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 86.801072][ T7038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.809394][ T7068] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 86.817613][ T7038] Cannot create hsr debugfs directory [ 86.831174][ T7068] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 86.848292][ T7068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.861889][ T55] hsr_slave_0: left promiscuous mode [ 86.864524][ T7068] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.878670][ T7068] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 86.888782][ T7068] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 86.902345][ T55] hsr_slave_1: left promiscuous mode [ 86.903396][ T7068] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.919122][ T7068] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 86.929169][ T7068] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 86.942805][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.950274][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.958860][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.962961][ T7068] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 86.966284][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.977702][ T7068] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 86.977719][ T7068] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 87.008603][ T6097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.018123][ T55] veth1_macvtap: left promiscuous mode [ 87.023604][ T55] veth0_macvtap: left promiscuous mode [ 87.029192][ T55] veth1_vlan: left promiscuous mode [ 87.034449][ T55] veth0_vlan: left promiscuous mode [ 87.104438][ T29] audit: type=1326 audit(2000000049.130:21182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f0ecd8ea9 code=0x0 [ 87.128422][ T55] team0 (unregistering): Port device team_slave_1 removed [ 87.139488][ T55] team0 (unregistering): Port device team_slave_0 removed [ 87.180950][ T6775] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.191874][ T6775] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.207265][ T6775] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.218360][ T6775] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.219002][ T29] audit: type=1326 audit(2000000049.250:21183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0ecd8ea9 code=0x7ffc0000 [ 87.250550][ T29] audit: type=1326 audit(2000000049.250:21184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0ecd8ea9 code=0x7ffc0000 [ 87.274613][ T29] audit: type=1326 audit(2000000049.250:21185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f0ecd8ea9 code=0x7ffc0000 [ 87.298850][ T29] audit: type=1326 audit(2000000049.250:21186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0ecd8ea9 code=0x7ffc0000 [ 87.323111][ T29] audit: type=1326 audit(2000000049.250:21187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0ecd8ea9 code=0x7ffc0000 [ 87.347404][ T29] audit: type=1326 audit(2000000049.250:21188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f0ecd8ea9 code=0x7ffc0000 [ 87.440668][ T7084] loop4: detected capacity change from 0 to 1024 [ 87.451099][ T7084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.476892][ T7084] EXT4-fs error (device loop4): ext4_xattr_ibody_get:653: inode #2: comm syz-executor.4: corrupted in-inode xattr: bad e_name length [ 87.492020][ T7084] EXT4-fs (loop4): Remounting filesystem read-only [ 87.506035][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 87.514845][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 87.524881][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 87.533880][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 87.544032][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 87.552966][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 87.563281][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 87.572483][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 87.583431][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 87.592994][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 87.602825][ T5983] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=14 [ 87.664040][ T7038] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.678886][ T7038] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.691664][ T7038] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.703126][ T7038] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.753924][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.768635][ T7038] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.779391][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.786598][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.800361][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.807485][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.850141][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.885126][ T7038] veth0_vlan: entered promiscuous mode [ 87.894716][ T7038] veth1_vlan: entered promiscuous mode [ 87.913432][ T7038] veth0_macvtap: entered promiscuous mode [ 87.921676][ T7038] veth1_macvtap: entered promiscuous mode [ 87.932629][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.943272][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.953474][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.963927][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.973890][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.984614][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.994489][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.004929][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.016444][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.027280][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.037792][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.047784][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.058209][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.068017][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.078477][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.088425][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.098848][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.110936][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.122778][ T7038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.131647][ T7038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.140519][ T7038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.149513][ T7038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.179395][ T7104] loop0: detected capacity change from 0 to 128 [ 88.187910][ T7104] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 88.248310][ T55] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 88.258069][ T55] kworker/u8:4: attempt to access beyond end of device [ 88.258069][ T55] loop0: rw=1, sector=361, nr_sectors = 680 limit=128 [ 88.322691][ T7111] loop0: detected capacity change from 0 to 512 [ 88.330075][ T7111] EXT4-fs: Ignoring removed oldalloc option [ 88.337644][ T7111] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz-executor.0: Parent and EA inode have the same ino 15 [ 88.351401][ T7111] EXT4-fs (loop0): Remounting filesystem read-only [ 88.358010][ T7111] EXT4-fs warning (device loop0): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 88.368107][ T7111] EXT4-fs (loop0): 1 orphan inode deleted [ 88.374280][ T7111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.388997][ T7111] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 88.397266][ T7111] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.450826][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.566124][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.580405][ T7119] loop0: detected capacity change from 0 to 512 [ 88.608484][ T7119] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 88.624470][ T7119] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 88.645877][ T7119] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.667734][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.689583][ T6097] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 88.761467][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.838284][ T7120] chnl_net:caif_netlink_parms(): no params data found [ 88.854731][ T55] bridge_slave_1: left allmulticast mode [ 88.860445][ T55] bridge_slave_1: left promiscuous mode [ 88.866155][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.875791][ T55] bridge_slave_0: left allmulticast mode [ 88.881665][ T55] bridge_slave_0: left promiscuous mode [ 88.887435][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.969511][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.980346][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.990299][ T55] bond0 (unregistering): Released all slaves [ 89.010924][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.044134][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.051320][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.058599][ T7120] bridge_slave_0: entered allmulticast mode [ 89.064863][ T7120] bridge_slave_0: entered promiscuous mode [ 89.072634][ T55] hsr_slave_0: left promiscuous mode [ 89.078454][ T55] hsr_slave_1: left promiscuous mode [ 89.084229][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.091656][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.099987][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.107447][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.116641][ T55] veth1_macvtap: left promiscuous mode [ 89.122098][ T55] veth0_macvtap: left promiscuous mode [ 89.127696][ T55] veth1_vlan: left promiscuous mode [ 89.132991][ T55] veth0_vlan: left promiscuous mode [ 89.216560][ T55] team0 (unregistering): Port device team_slave_1 removed [ 89.227419][ T55] team0 (unregistering): Port device team_slave_0 removed [ 89.261221][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.268391][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.276343][ T7120] bridge_slave_1: entered allmulticast mode [ 89.282859][ T7120] bridge_slave_1: entered promiscuous mode [ 89.306889][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.319606][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.341454][ T7120] team0: Port device team_slave_0 added [ 89.348125][ T7120] team0: Port device team_slave_1 added [ 89.364260][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.371255][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.397521][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.408923][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.415962][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.441919][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.469731][ T7120] hsr_slave_0: entered promiscuous mode [ 89.475891][ T7120] hsr_slave_1: entered promiscuous mode [ 89.481697][ T7120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.489288][ T7120] Cannot create hsr debugfs directory [ 89.775832][ T6776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.797299][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.812814][ T7120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.914748][ T7120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.928498][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.939922][ T7120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.955116][ T7120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.978712][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.027930][ T7120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.042125][ T7120] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.059743][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.094533][ T3185] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.101627][ T3185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.116913][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.124061][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.163594][ T55] bridge_slave_1: left allmulticast mode [ 90.169274][ T55] bridge_slave_1: left promiscuous mode [ 90.174877][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.183051][ T55] bridge_slave_0: left allmulticast mode [ 90.188790][ T55] bridge_slave_0: left promiscuous mode [ 90.194526][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.279145][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.289534][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.300167][ T55] bond0 (unregistering): Released all slaves [ 90.337054][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.344502][ T7192] bridge0: left allmulticast mode [ 90.387527][ T55] hsr_slave_0: left promiscuous mode [ 90.400341][ T55] hsr_slave_1: left promiscuous mode [ 90.406206][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.413623][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.426174][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.433653][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.457362][ T55] veth1_macvtap: left promiscuous mode [ 90.462842][ T55] veth0_macvtap: left promiscuous mode [ 90.468468][ T55] veth1_vlan: left promiscuous mode [ 90.473744][ T55] veth0_vlan: left promiscuous mode [ 90.593025][ T55] team0 (unregistering): Port device team_slave_1 removed [ 90.604192][ T55] team0 (unregistering): Port device team_slave_0 removed [ 90.639321][ T7180] chnl_net:caif_netlink_parms(): no params data found [ 90.672703][ T7120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.703090][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.710198][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.722605][ T7180] bridge_slave_0: entered allmulticast mode [ 90.729420][ T7180] bridge_slave_0: entered promiscuous mode [ 90.736730][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.743845][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.751064][ T7180] bridge_slave_1: entered allmulticast mode [ 90.757625][ T7180] bridge_slave_1: entered promiscuous mode [ 90.778447][ T7180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.806436][ T7180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.831012][ T7180] team0: Port device team_slave_0 added [ 90.839801][ T7120] veth0_vlan: entered promiscuous mode [ 90.849434][ T7180] team0: Port device team_slave_1 added [ 90.860642][ T7120] veth1_vlan: entered promiscuous mode [ 90.899525][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.906526][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.932425][ T7180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.949375][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.956349][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.982242][ T7180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.994184][ T7120] veth0_macvtap: entered promiscuous mode [ 91.011103][ T7120] veth1_macvtap: entered promiscuous mode [ 91.030040][ T7180] hsr_slave_0: entered promiscuous mode [ 91.037466][ T7180] hsr_slave_1: entered promiscuous mode [ 91.043379][ T7180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.051133][ T7180] Cannot create hsr debugfs directory [ 91.059265][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.069731][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.079533][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.089952][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.099883][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.110327][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.120907][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.152452][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.162950][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.172883][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.183593][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.193484][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.203905][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.214901][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.224024][ T7120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.232824][ T7120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.241556][ T7120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.250298][ T7120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.308381][ T7221] loop0: detected capacity change from 0 to 512 [ 91.329234][ T7221] EXT4-fs: Ignoring removed oldalloc option [ 91.348362][ T7221] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz-executor.0: Parent and EA inode have the same ino 15 [ 91.362460][ T7221] EXT4-fs (loop0): Remounting filesystem read-only [ 91.369205][ T7221] EXT4-fs warning (device loop0): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 91.381015][ T7221] EXT4-fs (loop0): 1 orphan inode deleted [ 91.388799][ T7221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.401942][ T7221] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 91.409310][ T7221] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.609290][ T7180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.628544][ T7180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.638832][ T7180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.658726][ T7180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.722677][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.738707][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.759383][ T3178] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.766480][ T3178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.786171][ T7180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.796657][ T7180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.815079][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.822182][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.874935][ T7252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.882205][ T7252] IPv6: NLM_F_CREATE should be set when creating new route [ 91.889429][ T7252] IPv6: NLM_F_CREATE should be set when creating new route [ 91.926911][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.000447][ T7180] veth0_vlan: entered promiscuous mode [ 92.009098][ T7180] veth1_vlan: entered promiscuous mode [ 92.026179][ T7180] veth0_macvtap: entered promiscuous mode [ 92.028908][ T7274] loop0: detected capacity change from 0 to 164 [ 92.033534][ T7180] veth1_macvtap: entered promiscuous mode [ 92.047789][ T7274] rock: directory entry would overflow storage [ 92.050235][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.054074][ T7274] rock: sig=0x5245, size=8, remaining=3 [ 92.064477][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.079916][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.079931][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.079997][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.110647][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.120511][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.131004][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.131124][ T7274] devtmpfs: Too few inodes for current use [ 92.148848][ T29] kauditd_printk_skb: 5847 callbacks suppressed [ 92.148859][ T29] audit: type=1400 audit(2000000054.150:27034): avc: denied { mount } for pid=7273 comm="syz-executor.0" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 92.148871][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.151925][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.155378][ T29] audit: type=1400 audit(2000000054.150:27035): avc: denied { mounton } for pid=7273 comm="syz-executor.0" path="/root/syzkaller-testdir3470554142/syzkaller.F4WsIJ/196/file0/file0" dev="loop0" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 92.177993][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.178013][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.185316][ T29] audit: type=1400 audit(2000000054.150:27036): avc: denied { mount } for pid=7273 comm="syz-executor.0" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 92.195740][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.195758][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.195771][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.195800][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.195811][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.203148][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.223930][ T29] audit: type=1400 audit(2000000054.160:27037): avc: denied { remount } for pid=7273 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 92.247492][ T7180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.268347][ T29] audit: type=1400 audit(2000000054.270:27038): avc: denied { unmount } for pid=6097 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 92.276913][ T7180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.276961][ T7180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.276995][ T7180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.406700][ T7276] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 92.442591][ T29] audit: type=1400 audit(2000000054.470:27039): avc: denied { connect } for pid=7280 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.495142][ T7289] loop1: detected capacity change from 0 to 512 [ 92.507627][ T7289] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 92.522348][ T29] audit: type=1326 audit(2000000054.550:27040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5242deea9 code=0x0 [ 92.548209][ T7289] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 92.570357][ T7289] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.600166][ T7180] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 92.621447][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.740313][ T29] audit: type=1400 audit(2000000054.770:27041): avc: denied { mount } for pid=7307 comm="syz-executor.1" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 92.777500][ T7308] loop1: detected capacity change from 0 to 1024 [ 92.815892][ T7313] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 92.851156][ T29] audit: type=1400 audit(2000000054.880:27042): avc: denied { unmount } for pid=7180 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 92.947496][ T7334] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 92.955705][ T7334] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.004886][ T7339] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 93.091142][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.119477][ T7348] loop0: detected capacity change from 0 to 2048 [ 93.128301][ T7348] EXT4-fs (loop0): bad geometry: block count 8796093022720 exceeds size of device (512 blocks) [ 93.191501][ T29] audit: type=1400 audit(2000000055.220:27043): avc: denied { getopt } for pid=7347 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.255386][ T7361] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 93.263481][ T7361] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.377151][ T7372] loop1: detected capacity change from 0 to 1024 [ 93.438077][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.457017][ T7381] loop3: detected capacity change from 0 to 2048 [ 93.464933][ T7381] EXT4-fs (loop3): bad geometry: block count 8796093022720 exceeds size of device (512 blocks) [ 93.541973][ T7389] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 93.550091][ T7389] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.736870][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.737605][ T7400] loop1: detected capacity change from 0 to 256 [ 93.787738][ T7400] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 93.797921][ T7400] FAT-fs (loop1): Filesystem has been set read-only [ 93.817221][ T7400] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 94.076416][ T7417] loop1: detected capacity change from 0 to 1024 [ 94.100986][ T7419] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 94.109155][ T7419] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.169016][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.203846][ T7431] loop1: detected capacity change from 0 to 512 [ 94.217002][ T7431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.231537][ T7431] ext4 filesystem being mounted at /root/syzkaller-testdir3549949362/syzkaller.aV3afM/25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.247008][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.250156][ T7427] loop0: detected capacity change from 0 to 512 [ 94.273873][ T7180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.275309][ T11] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.304146][ T7427] EXT4-fs: Ignoring removed bh option [ 94.366458][ T7427] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.384409][ T7427] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 17 [ 94.398800][ T11] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.408929][ T7427] EXT4-fs (loop0): Remounting filesystem read-only [ 94.415547][ T7427] ext4_test_bit(bit=16, block=4) = 1 [ 94.420856][ T7427] is_bad_inode(inode)=0 [ 94.425000][ T7427] NEXT_ORPHAN(inode)=1048336 [ 94.429718][ T7427] max_ino=32 [ 94.432903][ T7427] i_nlink=0 [ 94.498706][ T11] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.504278][ T7427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.520720][ T7427] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 94.528174][ T7427] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.578027][ T11] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.637617][ T7455] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 94.645763][ T7455] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.654604][ T7460] loop0: detected capacity change from 0 to 1024 [ 94.693438][ T7467] loop1: detected capacity change from 0 to 512 [ 94.703515][ T11] bridge_slave_1: left allmulticast mode [ 94.709254][ T11] bridge_slave_1: left promiscuous mode [ 94.714899][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.725725][ T11] bridge_slave_0: left allmulticast mode [ 94.731378][ T11] bridge_slave_0: left promiscuous mode [ 94.737019][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.766787][ T7467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.779719][ T7467] ext4 filesystem being mounted at /root/syzkaller-testdir3549949362/syzkaller.aV3afM/31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.847802][ T7180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.907748][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.919498][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.937883][ T11] bond0 (unregistering): Released all slaves [ 94.960710][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.980224][ T7487] loop0: detected capacity change from 0 to 512 [ 94.988921][ T7487] EXT4-fs: Ignoring removed bh option [ 94.994847][ T7487] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.008333][ T7487] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 17 [ 95.020532][ T7487] EXT4-fs (loop0): Remounting filesystem read-only [ 95.026279][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.027081][ T7487] ext4_test_bit(bit=16, block=4) = 1 [ 95.041637][ T7487] is_bad_inode(inode)=0 [ 95.045868][ T7487] NEXT_ORPHAN(inode)=1048336 [ 95.050491][ T7487] max_ino=32 [ 95.053681][ T7487] i_nlink=0 [ 95.059326][ T7487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.072853][ T7487] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 95.080008][ T7487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.089166][ T11] hsr_slave_0: left promiscuous mode [ 95.095066][ T11] hsr_slave_1: left promiscuous mode [ 95.101027][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.108483][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.116208][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.123665][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.132384][ T11] veth1_macvtap: left promiscuous mode [ 95.137900][ T11] veth0_macvtap: left promiscuous mode [ 95.143417][ T11] veth1_vlan: left promiscuous mode [ 95.148678][ T11] veth0_vlan: left promiscuous mode [ 95.228533][ T11] team0 (unregistering): Port device team_slave_1 removed [ 95.238774][ T11] team0 (unregistering): Port device team_slave_0 removed [ 95.286835][ T7438] chnl_net:caif_netlink_parms(): no params data found [ 95.333635][ T7438] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.338374][ T7512] loop0: detected capacity change from 0 to 512 [ 95.340720][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.349744][ T7512] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.358532][ T7438] bridge_slave_0: entered allmulticast mode [ 95.365459][ T7512] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 95.371868][ T7438] bridge_slave_0: entered promiscuous mode [ 95.381342][ T7512] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 95.382990][ T7512] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 95.388235][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.402714][ T7512] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 95.408990][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.419359][ T7512] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 95.431326][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.431610][ T7438] bridge_slave_1: entered allmulticast mode [ 95.440289][ T7512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.450886][ T7438] bridge_slave_1: entered promiscuous mode [ 95.481090][ T7512] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.493442][ T7512] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 95.503687][ T7512] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 95.521553][ T7512] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.533057][ T7512] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 95.543166][ T7512] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 95.566941][ T7521] loop1: detected capacity change from 0 to 512 [ 95.567505][ T7438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.585810][ T7438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.591026][ T7512] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.601641][ T7521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.606441][ T7512] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 95.606465][ T7512] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 95.620068][ T7521] ext4 filesystem being mounted at /root/syzkaller-testdir3549949362/syzkaller.aV3afM/38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.659658][ T6097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.681322][ T7438] team0: Port device team_slave_0 added [ 95.695942][ T7438] team0: Port device team_slave_1 added [ 95.712676][ T7180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.749040][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.756098][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.782046][ T7438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.794668][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.801664][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.827793][ T7438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.855736][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.876486][ T7537] loop0: detected capacity change from 0 to 1024 [ 95.893855][ T7540] loop2: detected capacity change from 0 to 512 [ 95.904895][ T7537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.914551][ T7540] EXT4-fs: Ignoring removed bh option [ 95.924075][ T7542] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 95.928162][ T7540] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.943006][ T7542] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 95.954675][ T7438] hsr_slave_0: entered promiscuous mode [ 95.960689][ T7540] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz-executor.2: bad orphan inode 17 [ 95.972686][ T7438] hsr_slave_1: entered promiscuous mode [ 95.978415][ T7540] EXT4-fs (loop2): Remounting filesystem read-only [ 95.984987][ T7540] ext4_test_bit(bit=16, block=4) = 1 [ 95.990350][ T7540] is_bad_inode(inode)=0 [ 95.994502][ T7540] NEXT_ORPHAN(inode)=1048336 [ 95.999120][ T7540] max_ino=32 [ 96.002359][ T7540] i_nlink=0 [ 96.005519][ T7438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.006621][ T7540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.013069][ T7438] Cannot create hsr debugfs directory [ 96.025028][ T7540] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 96.037805][ T6097] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.037876][ T7540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.071840][ T7549] loop3: detected capacity change from 0 to 512 [ 96.080118][ T7549] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 96.093257][ T7549] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 96.107698][ T7549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.241208][ T7038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.296751][ T7574] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.314885][ T7574] loop0: detected capacity change from 0 to 2048 [ 96.336337][ T7574] EXT4-fs (loop0): bad geometry: block count 8796093022720 exceeds size of device (512 blocks) [ 96.436134][ T7438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.454115][ T7438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.465712][ T7438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.478532][ T7438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.486996][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.499473][ T7590] loop0: detected capacity change from 0 to 512 [ 96.507064][ T7590] EXT4-fs: Ignoring removed bh option [ 96.513192][ T7590] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.540034][ T7590] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 17 [ 96.547781][ T7438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.558191][ T7590] EXT4-fs (loop0): Remounting filesystem read-only [ 96.564780][ T7590] ext4_test_bit(bit=16, block=4) = 1 [ 96.566138][ T7438] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.570131][ T7590] is_bad_inode(inode)=0 [ 96.579186][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.580807][ T7590] NEXT_ORPHAN(inode)=1048336 [ 96.580815][ T7590] max_ino=32 [ 96.587835][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.591328][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.592419][ T7590] i_nlink=0 [ 96.613048][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.622262][ T7590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.634700][ T7590] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 96.641685][ T7590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.661178][ T7611] tun0: tun_chr_ioctl cmd 1074025677 [ 96.666919][ T7611] tun0: linktype set to 0 [ 96.698411][ T7438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.850865][ T7438] veth0_vlan: entered promiscuous mode [ 96.859589][ T7438] veth1_vlan: entered promiscuous mode [ 96.878771][ T7438] veth0_macvtap: entered promiscuous mode [ 96.880410][ T7637] loop2: detected capacity change from 0 to 256 [ 96.888726][ T7438] veth1_macvtap: entered promiscuous mode [ 96.907241][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.917790][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.920623][ T7637] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.927668][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.939197][ T7637] FAT-fs (loop2): Filesystem has been set read-only [ 96.942261][ T7637] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.949969][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.976397][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.986902][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.996806][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.007319][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.023728][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.032364][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.042802][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.052626][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.063128][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.072948][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.083373][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.093213][ T7438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.103783][ T7438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.114700][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.134028][ T7651] tun0: tun_chr_ioctl cmd 1074025677 [ 97.139413][ T7651] tun0: linktype set to 0 [ 97.144990][ T7438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.153771][ T7438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.162534][ T7438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.171337][ T7438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.177173][ T7653] nfs: Unknown parameter './cgroup.net/syz0' [ 97.245717][ T7660] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.264626][ T7664] loop4: detected capacity change from 0 to 164 [ 97.276795][ T7664] rock: directory entry would overflow storage [ 97.283062][ T7664] rock: sig=0x5245, size=8, remaining=3 [ 97.294911][ T7664] devtmpfs: Too few inodes for current use [ 97.319923][ T7672] loop1: detected capacity change from 0 to 512 [ 97.328584][ T7672] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 97.341938][ T7672] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 97.354844][ T7672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.385088][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 97.385102][ T29] audit: type=1400 audit(2000000059.410:27052): avc: denied { connect } for pid=7677 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 97.429368][ T7180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.464492][ T7685] nfs: Unknown parameter './cgroup.net/syz0' [ 97.511385][ T7689] tun0: tun_chr_ioctl cmd 1074025677 [ 97.516807][ T7689] tun0: linktype set to 0 [ 97.538044][ T7687] loop1: detected capacity change from 0 to 256 [ 97.554403][ T7687] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 97.564535][ T7687] FAT-fs (loop1): Filesystem has been set read-only [ 97.572496][ T7687] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 97.652537][ T7700] loop4: detected capacity change from 0 to 164 [ 97.663735][ T7700] rock: directory entry would overflow storage [ 97.669924][ T7700] rock: sig=0x5245, size=8, remaining=3 [ 97.677952][ T7700] devtmpfs: Too few inodes for current use [ 97.852457][ T7704] xt_TCPMSS: Only works on TCP SYN packets [ 97.961839][ T7708] loop1: detected capacity change from 0 to 512 [ 97.970289][ T7708] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 97.983603][ T7708] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 97.996064][ T7708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.066694][ T7180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.128959][ T29] audit: type=1400 audit(2000000060.160:27053): avc: denied { write } for pid=7714 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.142939][ T7718] tun0: tun_chr_ioctl cmd 1074025677 [ 98.154965][ T7718] tun0: linktype set to 0 [ 98.258392][ T7721] tap0: tun_chr_ioctl cmd 1074025681 [ 98.517587][ T7730] loop1: detected capacity change from 0 to 164 [ 98.525573][ T7730] rock: directory entry would overflow storage [ 98.531760][ T7730] rock: sig=0x5245, size=8, remaining=3 [ 98.539660][ T7730] devtmpfs: Too few inodes for current use [ 98.748550][ T29] audit: type=1400 audit(2000000060.780:27054): avc: denied { setopt } for pid=7756 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.800814][ T7736] chnl_net:caif_netlink_parms(): no params data found [ 98.803095][ T29] audit: type=1400 audit(2000000060.830:27055): avc: denied { getopt } for pid=7762 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.849675][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.866081][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.873171][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.880434][ T7736] bridge_slave_0: entered allmulticast mode [ 98.887118][ T7736] bridge_slave_0: entered promiscuous mode [ 98.897151][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.909183][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.916259][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.923536][ T7736] bridge_slave_1: entered allmulticast mode [ 98.931101][ T7736] bridge_slave_1: entered promiscuous mode [ 98.942796][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.974469][ T7736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.986446][ T7736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.092155][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.121575][ T7736] team0: Port device team_slave_0 added [ 99.138837][ T7736] team0: Port device team_slave_1 added [ 99.157269][ T7771] tap0: tun_chr_ioctl cmd 1074025681 [ 99.291854][ T7736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.298852][ T7736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.324905][ T7736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.417158][ T7736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.424109][ T7736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.450109][ T7736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.477897][ T40] bridge_slave_1: left allmulticast mode [ 99.483605][ T40] bridge_slave_1: left promiscuous mode [ 99.489237][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.521431][ T40] bridge_slave_0: left allmulticast mode [ 99.527188][ T40] bridge_slave_0: left promiscuous mode [ 99.532832][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.688423][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.700335][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.710692][ T40] bond0 (unregistering): Released all slaves [ 99.748832][ T7793] loop0: detected capacity change from 0 to 256 [ 99.762089][ T7736] hsr_slave_0: entered promiscuous mode [ 99.788106][ T7736] hsr_slave_1: entered promiscuous mode [ 99.805090][ T7736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.817183][ T7736] Cannot create hsr debugfs directory [ 99.827361][ T40] hsr_slave_0: left promiscuous mode [ 99.837359][ T40] hsr_slave_1: left promiscuous mode [ 99.863155][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.870609][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.902254][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.909717][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.919109][ T40] veth1_macvtap: left promiscuous mode [ 99.924580][ T40] veth0_macvtap: left promiscuous mode [ 99.930207][ T40] veth1_vlan: left promiscuous mode [ 99.935468][ T40] veth0_vlan: left promiscuous mode [ 100.076410][ T40] team0 (unregistering): Port device team_slave_1 removed [ 100.098658][ T40] team0 (unregistering): Port device team_slave_0 removed [ 100.130303][ T7802] loop4: detected capacity change from 0 to 2048 [ 100.155674][ T7802] loop4: p1 p3 [ 100.159246][ T7802] loop4: p1 size 33024 extends beyond EOD, truncated [ 100.167499][ T7802] loop4: p3 start 4284289 is beyond EOD, truncated [ 100.278297][ T7809] __nla_validate_parse: 7 callbacks suppressed [ 100.278311][ T7809] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.312736][ T29] audit: type=1400 audit(2000000062.340:27056): avc: denied { setopt } for pid=7812 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.380739][ T7820] loop0: detected capacity change from 0 to 256 [ 100.521884][ T7828] loop0: detected capacity change from 0 to 2048 [ 100.537511][ T7736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.546096][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.557582][ T7736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.566495][ T7736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.574813][ T7736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.581921][ T7828] loop0: p1 p3 [ 100.586528][ T7828] loop0: p1 size 33024 extends beyond EOD, truncated [ 100.594472][ T7828] loop0: p3 start 4284289 is beyond EOD, truncated [ 100.629210][ T7736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.642932][ T7736] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.660357][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.667447][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.668912][ T7839] validate_nla: 10 callbacks suppressed [ 100.669001][ T7839] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 100.691483][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.698585][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.735120][ T7736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.794593][ T7736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.810267][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.862273][ T7736] veth0_vlan: entered promiscuous mode [ 100.870279][ T7736] veth1_vlan: entered promiscuous mode [ 100.884329][ T7736] veth0_macvtap: entered promiscuous mode [ 100.891851][ T7736] veth1_macvtap: entered promiscuous mode [ 100.901404][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.911838][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.921690][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.932125][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.942024][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.952433][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.962226][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.972645][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.983360][ T7736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.993878][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.004363][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.014240][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.024675][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.034512][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.044918][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.054901][ T7736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.065369][ T7736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.076262][ T7736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.085002][ T7736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.093850][ T7736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.102558][ T7736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111572][ T7736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.149696][ T7875] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 101.232774][ T7894] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.275043][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.296228][ T7901] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 101.403793][ T29] audit: type=1400 audit(2000000063.430:27057): avc: denied { write } for pid=7919 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.426739][ T29] audit: type=1400 audit(2000000063.430:27058): avc: denied { nlmsg_write } for pid=7919 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.666715][ T7935] team0 (unregistering): Port device team_slave_0 removed [ 101.681249][ T7935] team0 (unregistering): Port device team_slave_1 removed [ 101.724107][ T29] audit: type=1400 audit(2000000063.750:27059): avc: denied { create } for pid=7932 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.745272][ T29] audit: type=1400 audit(2000000063.750:27060): avc: denied { setopt } for pid=7932 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 102.176510][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.477865][ T7967] team0 (unregistering): Port device team_slave_0 removed [ 102.491052][ T7967] team0 (unregistering): Port device team_slave_1 removed [ 102.568818][ T7971] loop0: detected capacity change from 0 to 256 [ 102.631754][ T7973] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.817639][ T7986] loop2: detected capacity change from 0 to 512 [ 102.865082][ T29] audit: type=1326 audit(2000000064.890:27061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f980cae2ea9 code=0x0 [ 103.173877][ T7992] loop1: detected capacity change from 0 to 736 [ 103.242086][ T7994] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 103.287846][ T7998] team0 (unregistering): Port device team_slave_0 removed [ 103.300057][ T7998] team0 (unregistering): Port device team_slave_1 removed [ 103.901559][ T8028] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.358374][ T29] audit: type=1400 audit(2000000066.390:27062): avc: denied { listen } for pid=8032 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.636306][ T8036] loop2: detected capacity change from 0 to 512 [ 104.700458][ T29] audit: type=1326 audit(2000000066.730:27063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f980cae2ea9 code=0x0 [ 104.749181][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.913729][ T29] audit: type=1400 audit(2000000066.940:27064): avc: denied { setattr } for pid=8051 comm="syz-executor.4" name="vcs" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 105.858463][ T8069] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.057029][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.288416][ T29] audit: type=1400 audit(2000000068.320:27065): avc: denied { create } for pid=8079 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 106.484888][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.492147][ T29] audit: type=1400 audit(2000000068.510:27066): avc: denied { write } for pid=8079 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 106.759611][ T29] audit: type=1326 audit(2000000068.790:27067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f980cae2ea9 code=0x0 [ 107.312501][ T29] audit: type=1400 audit(2000000069.340:27068): avc: denied { cmd } for pid=8116 comm="syz-executor.1" path="socket:[27985]" dev="sockfs" ino=27985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.582394][ T8121] team0 (unregistering): Port device team_slave_0 removed [ 107.592037][ T8121] team0 (unregistering): Port device team_slave_1 removed [ 107.678176][ T8126] loop4: detected capacity change from 0 to 512 [ 107.686914][ T8126] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 107.697349][ T8126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 107.705372][ T8126] System zones: 1-12 [ 107.709490][ T8126] EXT4-fs (loop4): orphan cleanup on readonly fs [ 107.715926][ T8126] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz-executor.4: Inode bitmap for bg 0 marked uninitialized [ 107.729855][ T8126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.747736][ T8126] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz-executor.4: Block bitmap for bg 0 marked uninitialized [ 107.768294][ T7438] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.839159][ T8129] loop4: detected capacity change from 0 to 512 [ 107.847836][ T8129] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 107.862772][ T8129] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 107.876607][ T8129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.900965][ T29] audit: type=1400 audit(2000000069.930:27069): avc: denied { lock } for pid=8128 comm="syz-executor.4" path="/root/syzkaller-testdir2914001863/syzkaller.52WAwN/54/file1/file0" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.930934][ T7438] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.108528][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.515356][ T8154] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 108.809325][ T8172] loop2: detected capacity change from 0 to 512 [ 108.836606][ T8172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.854125][ T8172] ext4 filesystem being mounted at /root/syzkaller-testdir1479749456/syzkaller.6jteDd/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.871740][ T8176] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 108.892938][ T7120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.093547][ T8192] loop4: detected capacity change from 0 to 512 [ 109.152428][ T29] audit: type=1326 audit(2000000071.180:27070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a54579ea9 code=0x0 [ 109.187509][ T8187] ================================================================== [ 109.195602][ T8187] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_balance_workfn [ 109.203504][ T8187] [ 109.205826][ T8187] read-write to 0xffffffff8841f6ac of 4 bytes by task 35 on cpu 1: [ 109.213715][ T8187] pcpu_balance_workfn+0x94e/0xa60 [ 109.218807][ T8187] process_scheduled_works+0x483/0x9a0 [ 109.224262][ T8187] worker_thread+0x526/0x730 [ 109.228839][ T8187] kthread+0x1d1/0x210 [ 109.232890][ T8187] ret_from_fork+0x4b/0x60 [ 109.237288][ T8187] ret_from_fork_asm+0x1a/0x30 [ 109.242039][ T8187] [ 109.244340][ T8187] read to 0xffffffff8841f6ac of 4 bytes by task 8187 on cpu 0: [ 109.251856][ T8187] pcpu_alloc_noprof+0x9a7/0x10c0 [ 109.256879][ T8187] bpf_map_alloc_percpu+0xad/0x210 [ 109.261978][ T8187] prealloc_init+0x19f/0x470 [ 109.266555][ T8187] htab_map_alloc+0x630/0x8e0 [ 109.271213][ T8187] map_create+0x83c/0xb90 [ 109.275627][ T8187] __sys_bpf+0x667/0x7a0 [ 109.279876][ T8187] __x64_sys_bpf+0x43/0x50 [ 109.284282][ T8187] x64_sys_call+0x2655/0x2d70 [ 109.288965][ T8187] do_syscall_64+0xc9/0x1c0 [ 109.293457][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.299372][ T8187] [ 109.301674][ T8187] value changed: 0x00000003 -> 0x00000004 [ 109.307363][ T8187] [ 109.309662][ T8187] Reported by Kernel Concurrency Sanitizer on: [ 109.315803][ T8187] CPU: 0 PID: 8187 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller #0 [ 109.324469][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 109.334500][ T8187] ================================================================== 2033/05/18 03:34:31 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 109.350896][ T29] audit: type=1400 audit(2000000071.370:27071): avc: denied { write } for pid=3075 comm="syz-fuzzer" path="pipe:[613]" dev="pipefs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 109.376578][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.