last executing test programs: 19.31359602s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$eJzs3d9rW9cdAPDvla3MTpzZ2faQBZaYsZGELZIdL4nZQ5LB2J4C27J3z7NlYyxbxpKT2IThsOcxGGMb28v61JdC/4BCyZ9QCoH2PZTSEtokfehDWxVJV4nrSnZCJCuxPx84vuf+0P1+j4SOdO691g3gwBqNiKsR0RcRZyNiOF2eSUtsNkptu0cPb8/UShLV6vVPkkjSZc19Jen0SPqwgYj4w28j/pwkjQVblNc3FqeLxcJqOp+vLK3ky+sb5xaWpucL84XliYnxi5OXJi9MjnWsrZd//eG//v76by6//fOb96c+PvOXWr5D6bqt7eikxnOSrT8XTf0RsdqNYD3Ql7Yn+ywbJ93PBwCAndW+438vIn4cEY//2+tsAAAAgG6oXhmKL5KIKgAAALBvZerXwCaZXHotwFBkMrlc4xreH8SVKJbKlZ/NldaWZxvXyo5ENjO3UCyMpdcKj0Q2qc2P1+tP589vm5+IiGMR8c/hwfp8bqZUnO31wQ8AAAA4IGrj/KFMo16bfDbcGP8DAAAA+8xIrxMAAAAAus74HwAAAPa/b4//RxuTpH/vkwEAAAA67XfXrtVKtXn/69kb62uLpRvnZgvlxdzS2kxuprS6kpsvlebrv9m3tNv+iqXSyi9iee1WvlIoV/Ll9Y2ppdLacmWqfl/vqcIz3ScaAAAA6Khjp+6+n0TE5i8H66XmULrOWB32t8zzbZ50Kw9g7/X1OgGgZ1zgCweXMT6w28B+YI/yAAAAuuf0D5+c/x+MLef/j953bAD2u+c8/w/sI87/w8G17fz//3uVB7D3jPGB3Y4DtD3//07ncwEAALpjqF6STC4dAwxFJpPLRRyt3xYgm8wtFAtjEfHdiHhvOPud2vx4r5MGAAAAAAAAAAAAAAAAAAAAAAAAgFdMtZpEFQAAANjXIjIfJRGRxEDE8E+Gth8fOJR8PlyfRsTN/13/963pSmV1vLb80yfLK/9Jl5/vxREMAAAAYLvmOL05jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATnr08PZMs+xl3Ae/ioiRVvH7Y6A+HYhsRBx+nET/lsclEdHXgfibdyLieKv4SS2tGEmz2B4/ExGDPY5/pAPx4SC7W+t/rrZ6/2VitD5t/f7rT8uLejDarv/LPOn/+tr0f0d32fehdHri3pv5tvHvRJzob93/NOMnL9j//umPGxvt1lVfizjd8vMn+UasfGVpJV9e3zi3sDQ9X5gvLE9MjF+cvDR5YXIsP7dQLKR/W8b4x4/e+mqn9h9uE3+kXfuTRk7Vaut9nto2/+W9Ww+/32rDJOLB39J6i9f/eLv46XP/0/RzoLb+dLO+2ahvdfKNd0/u1P7ZNu3f7fU/026n25z9/V8/aNSyz/gIAKCbyusbi9PFYmH1Va/UGvMSpNHByujLkYbKwaz0umcCAAA67emX/l5nAgAAAAAAAAAAAAAAAAAAAAdX8///m7/l3I2fE9sab6BZSZI9bysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE6+DgAA///TSdFe") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_gstrings={0x3}}) socket$l2tp6(0xa, 0x2, 0x73) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="a1447e88d43ea417347dd1074148a377a151c238c7fd1bc17c959de5665f2122b54b124d7999"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000001c0)={'bond_slave_1\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000240)={'dummy0\x00', 0x600}) perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x80, 0x80, 0x5, 0xc8, 0xce, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10002, 0x0, @perf_bp={&(0x7f00000005c0), 0x3}, 0x2000, 0x1, 0x0, 0x7, 0x5, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b041001e0ff030002004788aa96a13bb1000000000089060000", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 19.172586181s ago: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xba, &(0x7f0000000000), &(0x7f0000000240)=0x4) 19.094547014s ago: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x35, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x300}, 0x0) 19.079020956s ago: executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet6(0xa, 0x0, 0xc000000) 19.058565169s ago: executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x891d, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) 18.203023581s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x2, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket(0x2, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/149, 0x95}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x3}, @TCA_CAKE_MEMORY={0x8}]}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x8, 0x0, 0x3, 0x6, 0x3]}}]}]}, 0x7c}}, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r6, 0x114, 0x3, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ptrace(0x10, 0x1) r8 = inotify_init1(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x16, 0x8}, 0x20) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x2, r9, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r10 = syz_open_pts(r7, 0x0) r11 = dup3(r10, r7, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) 2.329619s ago: executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000"], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000001040)=ANY=[@ANYRES32=0x0], 0x0, 0x2ad, &(0x7f0000000280)="$eJzs3T9vI0UUAPC3jmMbKOyCCiGxEhRUUZKWxgElUoQrkAuggIgkEootpESKxB9hUtHSUPIJkJDoaPkANPcNTrr2pOsuRaQ9rb0bOznHOZ/i5P78fk0ms+/NvJmMHKXYyTfv9g9209g/+fl+NBpJVNrRjtMkWlGJ0q9xQfv3AABeZqdZFo+ykXnykohoLK4sAGCB5v79/8/CSwIAFuzzL778dKPT2fwsTRux1f/tuJv/ZZ9/HT3f2I/vohd7sRrNOIvIzo3aW1mWDapprhUf9AfH3Tyz//X/xfgbDyOG+WvRjNaw62L+dmdzLR2ZyB/kdbxZzN/O89ejGW9PmX+7s7k+JT+6tfjw/Yn6V6IZ976N76MXu8Mixvm/rKXpJ9kfj3/6Ki8vz08Gx936MG4sW7rlHw0AAAAAAAAAAAAAAAAAAAAAAK+wleLunHoM7+/Ju4r7d5bO8m+WIy21Lt7PM8pPyoEu3Q80yOLP8n6d1TRNsyJwnF+Nd6pRvZtVAwAAAAAAAAAAAAAAAAAAwIvl6IcfD3Z6vb3DG2mUtwGUr/U/7zjt857q4XsxO7g+nqtSNGeMHEtlTBIxs4x8ETe0Ldc13riq5r/+nnfAxvUxy+O5olVsxg2vqzxdBzvJ9D2sR9nTKA/Jv5MxtXjGuWpXPcrmOn61qY+ac6+99tawMZgRE8mswj56MNq5oie5vIracFenpi8XjYn0S2djrvP89GdFkiziEwgAAAAAAAAAAAAAAAAAACiNX/qd8vBkZmolqy+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4VeP//z9HY1Akj3r++3hGcC0Oj+54iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwGngQAAP//4gNebw==") r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) name_to_handle_at(r4, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x0) 2.125751962s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000016c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) 2.089933417s ago: executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000000), 0x0, [{}, {}]}, 0x98) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async) clock_nanosleep(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x2, 0x3f, 0x1000}, {0x2, 0x4f5c, 0x1000}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}) r2 = syz_io_uring_setup(0x5a79, &(0x7f0000000080)={0x0, 0x272c}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) socket(0x22, 0x2, 0x1) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) semget(0x1, 0x0, 0x103) fchmodat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1c) (async) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f00000007c0), 0x8, 0x80000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) (async) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r8, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)}}], 0x1, 0x0, 0x0) (async) socket(0x1, 0x3, 0x0) (async) recvmsg$inet_nvme(r7, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) 1.895757657s ago: executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r0, 0x1000000028, 0x1) 1.752727559s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x10, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40904}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) 1.629243928s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e22, 0xf4, @remote, 0x2a}}}, 0x32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000180)}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x14, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208000a0043000040a8001600040001400600a4e1e9956c168b933f8e3a230d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14", 0xd8}], 0x1}, 0x0) 1.416476952s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x130, 0x98, 0x1c8, 0x98, 0x1c8, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dvmrp0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11, 0x0, 0x4c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'ipvlan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x0, 0xfffe]}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 1.365906389s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000061ed00000000000015000000ffffff809500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe5e, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) shutdown(r2, 0x1) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r4, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xfffc}, 0x90) (async) ftruncate(r1, 0x1) (async) r5 = socket$inet6(0xa, 0x6, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x4) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000001400)="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", 0x118) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x6d) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xffff}, &(0x7f0000000100)=0x8) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x8c500, 0x0) close_range(r8, r0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r7, &(0x7f0000000140)={0xa, 0x2, 0xfa00, {r9}}, 0xc) 1.351122111s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.308659468s ago: executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fc70000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) syz_io_uring_setup(0x7dca, &(0x7f0000000340), 0x0, 0x0) io_uring_setup(0x2edd, &(0x7f0000000040)={0x0, 0x0, 0x80}) socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x325}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x402c5342, &(0x7f0000001280)) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)) 1.29200542s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x8052, &(0x7f0000000040)={[{@block_validity}, {@noblock_validity}, {@quota}]}, 0x1, 0x4d3, &(0x7f0000000600)="$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") 1.116646538s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x8000, 0x4, 0x1}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x200000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x6}, &(0x7f0000000100)=0x8) 1.095206851s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x8}, @jmp={0x6, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0xa, 0x80, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x40, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000100)="d544991bfd088548", 0x8}], 0x1) gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) close(r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 893.748722ms ago: executing program 4: iopl(0x3) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000480)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x28}, {&(0x7f0000000fc0)=""/4096, 0xc0}, {&(0x7f0000000400)=""/106, 0x5f0}, {&(0x7f0000000740)=""/73, 0x17}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) (async) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) (async) sendmsg$inet(r2, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) (async) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2287, &(0x7f0000000000)) (async, rerun: 64) ftruncate(0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x9, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffff25) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) (async) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) (async, rerun: 32) mq_unlink(0x0) (rerun: 32) 674.752686ms ago: executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff, r0}) write(r1, 0x0, 0x0) 617.158155ms ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 602.353587ms ago: executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r0, 0x4e5, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa0800450000290000000000069078ac1414000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000000000000000edefa44741a8c5112a5807d7061142bbf4150b65e2ebd4bb93a9e8c6e54ea1f96c845ed1208ee10aec5004bad10efc8a37ca83900649cd57b1292f08aeaeb8e5138627b7ce7e3000020000af220d136179057921d47a35728cfe25300348d9fce25ddbd675cf989356d1399b499c634673cf8a5080b366e67bfc14a96f42a31d5879475cf89a7ae29c30866156c5b970c8e66439231b725e5c8af52cb5655b4c091ba4dea0d440c8a6851369823181676a51edb31961e177e60c398cfdb448bf12583aaa5eb0a8803a6b2c58cc4d66a5639f9c56b1928b0346dae24fcb6694af"], 0x3b) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x74, 0x200) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @rand_addr=0x64010101, {[@ssrr={0x89, 0xb, 0xe5, [@broadcast, @multicast1]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040100000000000000020000000900010073797a30000000000900020073797a320000000038000480340001800b0001006578746864720000240002800500020000000000080001"], 0x8c}}, 0x0) 328.273129ms ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x3000808, &(0x7f0000001340)=ANY=[], 0xc, 0x2ca, &(0x7f0000001040)="$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") ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340), 0x48) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_emit_ethernet(0x1db, &(0x7f0000001340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1a5, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x13, "4654b016caa32c7516390e78fba95b96857067ab939eaba43efbdf5690bfb392d2a327eeaea5f12e23600b56992b49d7ca56233280d6ac4cc119fd30a13657701b00328bd3d3d9d42f876261e8e443943857106303540bd0d09a9405277baf661376dc28c84feb743c940aa529bb680ec8808acfb4f377a73295eb0c5420f1dca6fadd13485d57b56078fc73dff405240d6179708dea1f8ac958"}, {0x0, 0x4, "9e816fecf6a73dc3edbe48f98962dbff69febd51c09447eccb6f50cb8feaaefcb4"}, {0x9842265aebe697bb}, {}, {0x0, 0x1a, "53e7496beebee9b0b869b44e0b6b0a6ffe7665d6ad98e9f05abd632c6340d91bfd53354e4795d94438569b0b7362db02cbd93a5720c5623320dc7c60bc200cecad58377f5bfcb94cdd970cee4c64c085ca81d92cdb4d8a0183c91755e54e6f9a66666ee60cf6c368f9bfec89ea00fb3e8988185a0f0d4abbee76951b33bcd4ef8461a800ac9936c0fb1223388078b270c71373eec72dcd81d44f649460a5cc3c582eb4632da98807a085f6089c79fb71656133fdf952b6146e34d0a91a341583723d5926fd67e9cfd95315dff74cec04"}]}}}}}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x5, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 211.933617ms ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fc70000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) syz_io_uring_setup(0x7dca, &(0x7f0000000340), 0x0, 0x0) io_uring_setup(0x2edd, &(0x7f0000000040)={0x0, 0x0, 0x80}) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/213, 0xd5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x325}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x402c5342, &(0x7f0000001280)) tkill(r1, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)) 193.97178ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='stack\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c00)='./bus\x00', 0x4000, 0x3) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r1, @ANYBLOB="da"], 0x20}}, 0x0) read$snapshot(r2, &(0x7f0000000280)=""/39, 0x27) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x26a0b}}, 0x20}}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r5 = socket(0x200000100000011, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x564}], 0x1}, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f00000002c0)={0xe3, "14e630eadd3a94cf0776437ad121a198171fede047d035380d1261436f0385e83b937589c9fe2557456acaaca66850301ce4aa78b0148940724e57ed7b18c084a800f243dc14fbbe5b1cae89d1810fd68ff1c0b21e45941330ea89ccc8b5b9a0d762751b690d176a98f46436680f6f3abeb3480c274fcee38ab282ef01c83b27e4993ec517eef400e99202c0f13207c3d192ac3c22d3931d112bc82d24dd66a9ad30bf4fa3993acbaa7264c3d2ff600621114cdbeeb7e9c69d81b5c0861349dfe8fe6e4e3e143d0d6cb7e9c4e73a9f970cac92f636671adbbdd4150b96c0d9efcbc7be03ab55836487d9febb5df417bc7487f17d96fd050e8b4f15ff12168c8e4afbd98eda605d8c7b3b020ae56792c183ca2e03166e764e11e918cddd721a31363abcc885cdc6b0982201658e500c720677e98b3061db9fb30cbcd12074902e1e5e7e28652df1dc56cd294f8e77dbf503e35832be61ef4c2f539a24d2aa73f19e8dea82ad334e9128a573b335500f6b87cdf31b36e8a9d88d9d3210a731afb24cf84187a7b81a927787fa529ca5e9cabc051652992ed6dd091a8eb9c60265b1012d570482044e44540cfd7cb968427f38e99e64cfa6b9f28e759bc8d225a51b0dd5cf35ee969556809b67839508e656227b03f808412afa08e186f4ac652c0677359b725a7a4f5e0e4577cab67b1ce3c279332ef7010f453a0225d8caa980b2"}) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000200)=0x3e) socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00000000000000ddf30701401280620008000a"], 0x20}}, 0x44040) ioperm(0x0, 0x1, 0x8) r10 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4800000010000504000000000000000000000000aadf5fa57ac5cc54f3fe1992047ea5ee7734c32c40c3e788871ef5faf4faff296a4d0926802a151fd61f8c0d4f5a0a1e03ed46512d7423e1085456e21c8594db760aaec777828d448da997a93f25a2910d1642de90e7d5ca3af11bbf9fef1904533586f5ac5c11dc89b09e50f1a70356270d369bedd005b2da49bdd94b2e1cc468798b652a2bf028f4c29432ec6d87542c03ea9d5eb2b3e6987d8025", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000500160001000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 161.309945ms ago: executing program 2: r0 = socket(0x2, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000200)={[{@abort}, {@errors_remount}, {@nomblk_io_submit}, {@mblk_io_submit}, {@nobarrier}, {@minixdf}, {@nobh}]}, 0xfe, 0x7ab, &(0x7f0000001100)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x123042, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x81000) eventfd(0x0) socket$kcm(0x10, 0x2, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x202) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x5393, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)="13847538d9e2a97007259c75845087b6cc478900007f15aa68500f133f482f67", 0xffeb, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x10000000}) 78.127138ms ago: executing program 2: r0 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x6441, &(0x7f0000000040)={0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x207}}, @prinfo={0x18}], 0x38}, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r5) 10.112758ms ago: executing program 1: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x200000000000000) 0s ago: executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000300000095000002000000a80000000000009500"/47], &(0x7f0000000000)='GPL\x00', 0x3, 0xec, &(0x7f00000004c0)=""/236}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x145, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x1ff) (async) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trrr'], 0xa) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) (async) write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x9) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000a00)='syz1\x00', 0x1ff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000210400000000000000000000efffc75e4af200", @ANYRESDEC=r1, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028006000200000000000800070000000000"], 0x44}}, 0x0) (async) r7 = syz_io_uring_setup(0xa94, &(0x7f00000005c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$LOOP_SET_FD(r4, 0x4c00, r7) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) (async) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r9, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{}, 0x0, @in6=@rand_addr=' \x01\x00'}}, 0xe8) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): value out of bounds [ 31.465970][ T29] kauditd_printk_skb: 1068 callbacks suppressed [ 31.465983][ T29] audit: type=1400 audit(1717146180.359:1474): avc: denied { getopt } for pid=3724 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.517871][ T3111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.591423][ T29] audit: type=1400 audit(1717146180.479:1475): avc: denied { ioctl } for pid=3732 comm="syz-executor.3" path="socket:[4729]" dev="sockfs" ino=4729 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 31.617699][ T29] audit: type=1400 audit(1717146180.499:1476): avc: denied { map } for pid=3732 comm="syz-executor.3" path="socket:[5676]" dev="sockfs" ino=5676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.641197][ T29] audit: type=1400 audit(1717146180.499:1477): avc: denied { read } for pid=3732 comm="syz-executor.3" path="socket:[5676]" dev="sockfs" ino=5676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.667559][ T29] audit: type=1400 audit(1717146180.559:1478): avc: denied { create } for pid=3736 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.687431][ T29] audit: type=1400 audit(1717146180.559:1479): avc: denied { bind } for pid=3736 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.707221][ T29] audit: type=1400 audit(1717146180.559:1480): avc: denied { bind } for pid=3736 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.728604][ T3738] __nla_validate_parse: 15 callbacks suppressed [ 31.728632][ T3738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 31.745145][ T3738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 31.781105][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 31.809378][ T3746] loop4: detected capacity change from 0 to 512 [ 31.826208][ T3746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.839324][ T3746] ext4 filesystem being mounted at /root/syzkaller-testdir1475932965/syzkaller.lR0ryA/46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.856839][ T3099] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.874061][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.893446][ T3752] syz_tun: entered promiscuous mode [ 31.900575][ T3752] syz_tun: left promiscuous mode [ 31.934631][ T3746] loop4: detected capacity change from 512 to 64 [ 31.945862][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.958262][ T3746] EXT4-fs warning (device loop4): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 18 [ 31.985321][ T29] audit: type=1400 audit(1717146180.879:1481): avc: denied { mounton } for pid=3754 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 32.008359][ T29] audit: type=1326 audit(1717146180.899:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8c78fee9 code=0x7ffc0000 [ 32.032342][ T29] audit: type=1326 audit(1717146180.899:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8c78fee9 code=0x7ffc0000 [ 32.059586][ T3746] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.078220][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.098678][ T3773] loop3: detected capacity change from 0 to 1764 [ 32.124101][ T3746] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.169629][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.183626][ T3180] vhci_hcd: vhci_device speed not set [ 32.206957][ T3746] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.230004][ T3754] chnl_net:caif_netlink_parms(): no params data found [ 32.239131][ T3785] loop3: detected capacity change from 0 to 512 [ 32.246507][ T3785] EXT4-fs: Ignoring removed nobh option [ 32.253421][ T3785] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 32.262256][ T3785] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz-executor.3: attempt to clear invalid blocks 2 len 1 [ 32.275969][ T3785] EXT4-fs (loop3): Remounting filesystem read-only [ 32.282857][ T3785] EXT4-fs (loop3): 1 truncate cleaned up [ 32.289239][ T3785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.301929][ T3785] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 32.303415][ T3746] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.309124][ T3785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.339182][ T3754] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.346332][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.353424][ T3754] bridge_slave_0: entered allmulticast mode [ 32.359617][ T3754] bridge_slave_0: entered promiscuous mode [ 32.367067][ T3754] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.374151][ T3754] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.381350][ T3754] bridge_slave_1: entered allmulticast mode [ 32.388094][ T3754] bridge_slave_1: entered promiscuous mode [ 32.411174][ T3785] loop3: detected capacity change from 0 to 2048 [ 32.411990][ T3754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.424955][ T3785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.430717][ T3746] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.447404][ T55] bridge_slave_1: left allmulticast mode [ 32.449040][ T3784] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set [ 32.453032][ T55] bridge_slave_1: left promiscuous mode [ 32.453176][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.481912][ T55] bridge_slave_0: left allmulticast mode [ 32.487597][ T55] bridge_slave_0: left promiscuous mode [ 32.493215][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.501375][ T3111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.585689][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.596008][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.605881][ T55] bond0 (unregistering): Released all slaves [ 32.614600][ T3754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.625493][ T3746] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.634415][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 32.660993][ T3746] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.670327][ T3754] team0: Port device team_slave_0 added [ 32.677017][ T3754] team0: Port device team_slave_1 added [ 32.686475][ T3746] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.690843][ T3798] loop3: detected capacity change from 0 to 1024 [ 32.702219][ T3798] EXT4-fs: Ignoring removed orlov option [ 32.707947][ T3798] ext4: Bad value for 'init_itable' [ 32.719488][ T3109] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: Out of memory [ 32.728692][ T3109] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 32.740492][ T55] hsr_slave_0: left promiscuous mode [ 32.747857][ T55] hsr_slave_1: left promiscuous mode [ 32.753789][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.761333][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.769004][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.776465][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.786020][ T55] veth1_macvtap: left promiscuous mode [ 32.791544][ T55] veth0_macvtap: left promiscuous mode [ 32.797081][ T55] veth1_vlan: left promiscuous mode [ 32.802524][ T55] veth0_vlan: left promiscuous mode [ 32.871909][ T3803] loop3: detected capacity change from 0 to 512 [ 32.893049][ T3803] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.906337][ T3803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.938262][ T55] team0 (unregistering): Port device team_slave_1 removed [ 32.950165][ T3803] EXT4-fs (loop3): 1 truncate cleaned up [ 32.957973][ T3803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.972098][ T55] team0 (unregistering): Port device team_slave_0 removed [ 33.017025][ T3754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.024058][ T3754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.050019][ T3754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.062783][ T3754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.069796][ T3754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.079961][ T3803] loop3: detected capacity change from 512 to 64 [ 33.095748][ T3754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.121971][ T3805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 33.151976][ T3754] hsr_slave_0: entered promiscuous mode [ 33.158222][ T3754] hsr_slave_1: entered promiscuous mode [ 33.164550][ T3754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.172119][ T3754] Cannot create hsr debugfs directory [ 33.228172][ T3808] loop0: detected capacity change from 0 to 256 [ 33.235722][ T3808] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.360302][ T3815] netem: change failed [ 33.555329][ T3754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.563665][ T3754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.572079][ T3754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.580232][ T3754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.614837][ T3754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.626528][ T3754] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.636069][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.643133][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.663187][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.670256][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.716783][ T3754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.770569][ T3111] EXT4-fs warning (device loop3): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.3: error -12 reading directory block [ 33.787107][ T3111] EXT4-fs warning (device loop3): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.3: error -12 reading directory block [ 33.792557][ T3754] veth0_vlan: entered promiscuous mode [ 33.800882][ T3111] EXT4-fs warning (device loop3): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.3: error -12 reading directory block [ 33.819738][ T3111] EXT4-fs warning (device loop3): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.3: error -12 reading directory block [ 33.824080][ T3754] veth1_vlan: entered promiscuous mode [ 33.833620][ T3111] EXT4-fs warning (device loop3): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.3: error -12 reading directory block [ 33.849773][ T3754] veth0_macvtap: entered promiscuous mode [ 33.852626][ T3111] EXT4-fs warning (device loop3): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.3: error -12 reading directory block [ 33.860899][ T3754] veth1_macvtap: entered promiscuous mode [ 33.871447][ T3111] EXT4-fs warning (device loop3): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.3: error -12 reading directory block [ 33.883371][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.890622][ T3111] EXT4-fs warning (device loop3): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.3: error -12 reading directory block [ 33.900889][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.914466][ T3111] EXT4-fs warning (device loop3): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.3: error -12 reading directory block [ 33.924186][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.937796][ T3111] EXT4-fs warning (device loop3): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.3: error -12 reading directory block [ 33.948080][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.971438][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.981873][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.991750][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.002180][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.013343][ T3754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.021934][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.032607][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.042567][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.053023][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.062852][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.073913][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.083797][ T3754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.094216][ T3754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.104771][ T3754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.124278][ T3754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.132982][ T3754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.141748][ T3754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.150500][ T3754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.376269][ T3846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=3846 comm=syz-executor.0 [ 34.386706][ T3850] loop1: detected capacity change from 0 to 512 [ 34.391301][ T3111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.405491][ T3847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=3847 comm=syz-executor.0 [ 34.414567][ T3850] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 34.422725][ T3846] loop0: detected capacity change from 0 to 512 [ 34.442829][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.455056][ T3850] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 34.475539][ T3850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.515424][ T3846] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 2 len 1 [ 34.538230][ T3846] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 34.564203][ T3846] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 34.587352][ T3846] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 34.611732][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.623279][ T3846] EXT4-fs (loop0): 1 truncate cleaned up [ 34.629910][ T3846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.658149][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.678219][ T3108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.690067][ T3754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.707037][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.779417][ T3854] chnl_net:caif_netlink_parms(): no params data found [ 34.790602][ T28] bridge_slave_1: left allmulticast mode [ 34.796347][ T28] bridge_slave_1: left promiscuous mode [ 34.802072][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.811634][ T28] bridge_slave_0: left allmulticast mode [ 34.817429][ T28] bridge_slave_0: left promiscuous mode [ 34.823065][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.935831][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.945685][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.955547][ T28] bond0 (unregistering): Released all slaves [ 34.966391][ T3886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3886 comm=syz-executor.1 [ 35.001981][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.009118][ T3854] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.017942][ T3854] bridge_slave_0: entered allmulticast mode [ 35.022064][ T3893] loop1: detected capacity change from 0 to 512 [ 35.025080][ T3854] bridge_slave_0: entered promiscuous mode [ 35.039088][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.046249][ T3854] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.053715][ T3854] bridge_slave_1: entered allmulticast mode [ 35.061008][ T3854] bridge_slave_1: entered promiscuous mode [ 35.076672][ T28] hsr_slave_0: left promiscuous mode [ 35.078811][ T3896] loop1: detected capacity change from 0 to 1024 [ 35.088503][ T28] hsr_slave_1: left promiscuous mode [ 35.095011][ T3896] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 35.095104][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.103167][ T3896] System zones: [ 35.110478][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.121197][ T3896] 0-1, 3-12 [ 35.124711][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.125555][ T3896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.132084][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.152923][ T28] veth1_macvtap: left promiscuous mode [ 35.158555][ T28] veth0_macvtap: left promiscuous mode [ 35.164055][ T28] veth1_vlan: left promiscuous mode [ 35.169248][ T28] veth0_vlan: left promiscuous mode [ 35.192169][ T3754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.249500][ T28] team0 (unregistering): Port device team_slave_1 removed [ 35.263230][ T28] team0 (unregistering): Port device team_slave_0 removed [ 35.305401][ T3854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.319683][ T3854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.333835][ T3900] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 35.343578][ T3900] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 35.359458][ T3854] team0: Port device team_slave_0 added [ 35.366086][ T3854] team0: Port device team_slave_1 added [ 35.385344][ T3854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.392372][ T3854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.418339][ T3854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.429241][ T3902] loop1: detected capacity change from 0 to 8192 [ 35.437488][ T3854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.444463][ T3854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.470528][ T3854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.494178][ T3902] loop1: p1 < > p2 < p5 > p4 [ 35.500013][ T3902] loop1: p4 size 16776960 extends beyond EOD, truncated [ 35.501493][ T3854] hsr_slave_0: entered promiscuous mode [ 35.508224][ T3902] loop1: p5 size 16776960 extends beyond EOD, truncated [ 35.519901][ T3854] hsr_slave_1: entered promiscuous mode [ 35.526802][ T3854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.534483][ T3854] Cannot create hsr debugfs directory [ 35.656848][ T3911] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.667942][ T3909] delete_channel: no stack [ 35.708694][ T3923] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 35.765835][ T3926] loop1: detected capacity change from 0 to 1024 [ 35.786249][ T3926] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 35.794417][ T3926] System zones: 0-1, 3-12 [ 35.805085][ T3926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.849749][ T3754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.878644][ T3854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.887484][ T3854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.895935][ T3854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.906729][ T3854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.954374][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.972773][ T3854] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.984842][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.991889][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.014960][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.022082][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.037871][ T3938] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.1' resets device [ 36.098833][ T3854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.170090][ T3854] veth0_vlan: entered promiscuous mode [ 36.179442][ T3854] veth1_vlan: entered promiscuous mode [ 36.195686][ T3854] veth0_macvtap: entered promiscuous mode [ 36.202627][ T3854] veth1_macvtap: entered promiscuous mode [ 36.212301][ T3854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.222783][ T3854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.232674][ T3854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.243218][ T3854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.253029][ T3854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.263451][ T3854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.273286][ T3854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.283770][ T3854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.295223][ T3854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.306451][ T3854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.316969][ T3854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.326898][ T3854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.337565][ T3854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.347469][ T3854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.357922][ T3854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.367710][ T3854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.378187][ T3854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.388960][ T3854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.397334][ T3854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.406090][ T3854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.414809][ T3854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.423487][ T3854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.485585][ T3958] loop3: detected capacity change from 0 to 1024 [ 36.495853][ T3958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.529678][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.596628][ T3965] FAULT_INJECTION: forcing a failure. [ 36.596628][ T3965] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.609707][ T3965] CPU: 1 PID: 3965 Comm: syz-executor.3 Not tainted 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 [ 36.620133][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 36.630250][ T3965] Call Trace: [ 36.633516][ T3965] [ 36.636436][ T3965] dump_stack_lvl+0xf2/0x150 [ 36.641033][ T3965] dump_stack+0x15/0x20 [ 36.645183][ T3965] should_fail_ex+0x229/0x230 [ 36.649882][ T3965] should_fail+0xb/0x10 [ 36.654103][ T3965] should_fail_usercopy+0x1a/0x20 [ 36.659198][ T3965] _copy_from_user+0x1e/0xd0 [ 36.663783][ T3965] __sys_bpf+0x14e/0x7a0 [ 36.668020][ T3965] __x64_sys_bpf+0x43/0x50 [ 36.672458][ T3965] x64_sys_call+0x2655/0x2d70 [ 36.677203][ T3965] do_syscall_64+0xc9/0x1c0 [ 36.681700][ T3965] ? clear_bhb_loop+0x55/0xb0 [ 36.686480][ T3965] ? clear_bhb_loop+0x55/0xb0 [ 36.691158][ T3965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.697108][ T3965] RIP: 0033:0x7f7506423ee9 [ 36.701610][ T3965] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 36.721205][ T3965] RSP: 002b:00007f750579e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.729647][ T3965] RAX: ffffffffffffffda RBX: 00007f750655afa0 RCX: 00007f7506423ee9 [ 36.737621][ T3965] RDX: 0000000000000090 RSI: 0000000020000040 RDI: 0000000000000005 [ 36.745657][ T3965] RBP: 00007f750579e120 R08: 0000000000000000 R09: 0000000000000000 [ 36.753616][ T3965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.761584][ T3965] R13: 000000000000000b R14: 00007f750655afa0 R15: 00007ffd8f3bcc78 [ 36.769545][ T3965] [ 36.851520][ T3973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 37.301473][ T3975] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 37.309869][ T3975] veth0_macvtap: left promiscuous mode [ 37.317261][ T3975] veth0_macvtap: entered promiscuous mode [ 37.324174][ T3975] team0: Device macvtap0 failed to register rx_handler [ 37.331161][ T3975] veth0_macvtap: left promiscuous mode [ 37.359442][ T3980] loop0: detected capacity change from 0 to 2048 [ 37.403970][ T3980] loop0: p1 < > p4 [ 37.408431][ T3980] loop0: p4 size 8388608 extends beyond EOD, truncated [ 37.425696][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 37.425709][ T29] audit: type=1400 audit(1717146186.319:1580): avc: denied { getopt } for pid=3979 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.526015][ T3982] loop0: detected capacity change from 0 to 1024 [ 37.545039][ T3982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 37.553167][ T3982] System zones: 0-1, 3-12 [ 37.557953][ T3982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.589137][ T3108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.630882][ T3987] loop0: detected capacity change from 0 to 128 [ 37.638607][ T3987] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 37.707451][ T29] audit: type=1326 audit(1717146186.599:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f7506421667 code=0x0 [ 37.730895][ T29] audit: type=1326 audit(1717146186.599:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f7506421667 code=0x0 [ 37.762362][ T3996] loop0: detected capacity change from 0 to 512 [ 37.771339][ T3996] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: bad e_name length [ 37.786088][ T3996] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 37.799447][ T3996] EXT4-fs (loop0): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.809293][ T29] audit: type=1400 audit(1717146186.689:1583): avc: denied { read } for pid=3999 comm="syz-executor.3" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 37.841241][ T29] audit: type=1400 audit(1717146186.709:1584): avc: denied { associate } for pid=3994 comm="syz-executor.0" name="1" dev="devpts" ino=4 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 37.867642][ T3108] EXT4-fs (loop0): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 37.933467][ T29] audit: type=1400 audit(1717146186.819:1585): avc: denied { create } for pid=4007 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.953966][ T29] audit: type=1400 audit(1717146186.849:1586): avc: denied { read } for pid=4007 comm="syz-executor.3" path="socket:[7716]" dev="sockfs" ino=7716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 38.104519][ T3102] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.115350][ T3122] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.133157][ T4027] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 38.149430][ T4029] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 38.198316][ T3122] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.235766][ T4033] loop3: detected capacity change from 0 to 2048 [ 38.256543][ T3122] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.268070][ T4033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.286773][ T29] audit: type=1400 audit(1717146187.179:1587): avc: denied { remount } for pid=4032 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.306738][ T4033] EXT4-fs error (device loop3): __ext4_remount:6503: comm syz-executor.3: Abort forced by user [ 38.319140][ T3122] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.323572][ T4033] EXT4-fs (loop3): Remounting filesystem read-only [ 38.396530][ T29] audit: type=1400 audit(1717146187.289:1588): avc: denied { create } for pid=4032 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.400626][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 38.438954][ T3122] bridge_slave_1: left allmulticast mode [ 38.444728][ T3122] bridge_slave_1: left promiscuous mode [ 38.450401][ T3122] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.460387][ T3122] bridge_slave_0: left allmulticast mode [ 38.466080][ T3122] bridge_slave_0: left promiscuous mode [ 38.471763][ T3122] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.498733][ T4045] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.523025][ T4045] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.548615][ T4046] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.549333][ T4045] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.568895][ T4046] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.579917][ T4045] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.583556][ T29] audit: type=1400 audit(1717146187.469:1589): avc: denied { write } for pid=4032 comm="syz-executor.3" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.588922][ T4045] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.620879][ T4045] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 38.624387][ T4046] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.630378][ T4045] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 38.649818][ T3122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.651746][ T4047] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.660741][ T4046] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.680483][ T4047] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.689296][ T4047] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 38.689462][ T3122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.708444][ T3122] bond0 (unregistering): Released all slaves [ 38.747566][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.754663][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.761757][ T4030] bridge_slave_0: entered allmulticast mode [ 38.768107][ T4030] bridge_slave_0: entered promiscuous mode [ 38.775006][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.782051][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.789583][ T4030] bridge_slave_1: entered allmulticast mode [ 38.796064][ T4030] bridge_slave_1: entered promiscuous mode [ 38.813323][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.829289][ T4052] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 38.838889][ T3122] hsr_slave_0: left promiscuous mode [ 38.846244][ T3122] hsr_slave_1: left promiscuous mode [ 38.852019][ T3122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.859417][ T3122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.874239][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.885039][ T3122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.892420][ T3122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.908769][ T3122] veth1_macvtap: left promiscuous mode [ 38.914362][ T3122] veth0_macvtap: left promiscuous mode [ 38.919893][ T3122] veth1_vlan: left promiscuous mode [ 38.925146][ T3122] veth0_vlan: left promiscuous mode [ 38.969124][ T4055] loop3: detected capacity change from 0 to 164 [ 38.994388][ T4055] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 39.027759][ T3122] team0 (unregistering): Port device team_slave_1 removed [ 39.039358][ T3122] team0 (unregistering): Port device team_slave_0 removed [ 39.078237][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.097171][ T4030] team0: Port device team_slave_0 added [ 39.103877][ T4030] team0: Port device team_slave_1 added [ 39.118275][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.125238][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.151396][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.162500][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.169505][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.195548][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.222579][ T4030] hsr_slave_0: entered promiscuous mode [ 39.228737][ T4030] hsr_slave_1: entered promiscuous mode [ 39.234704][ T4030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.242230][ T4030] Cannot create hsr debugfs directory [ 39.486156][ T4030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.494542][ T4030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.502787][ T4030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.511099][ T3109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.522568][ T3122] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.537361][ T4030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.582519][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.598212][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.607437][ T3122] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.622186][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.629293][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.640406][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.647516][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.667354][ T3122] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.716564][ T3122] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.746991][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.771416][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 39.783884][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 39.825822][ T4090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31772 sclass=netlink_route_socket pid=4090 comm=syz-executor.0 [ 39.846496][ T3122] bridge_slave_1: left allmulticast mode [ 39.852221][ T3122] bridge_slave_1: left promiscuous mode [ 39.858224][ T3122] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.866276][ T3122] bridge_slave_0: left allmulticast mode [ 39.871954][ T3122] bridge_slave_0: left promiscuous mode [ 39.877752][ T3122] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.911879][ T4101] loop3: detected capacity change from 0 to 1024 [ 39.920036][ T4101] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.931074][ T4101] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 39.942748][ T4101] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.953763][ T4101] journal_load_superblock: Cannot read journal superblock [ 39.960885][ T4101] EXT4-fs (loop3): Could not load journal inode [ 40.005914][ T3122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.015707][ T4101] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 40.025193][ T3122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.037595][ T3122] bond0 (unregistering): Released all slaves [ 40.069699][ T4118] loop3: detected capacity change from 0 to 512 [ 40.070675][ T4064] chnl_net:caif_netlink_parms(): no params data found [ 40.095418][ T4030] veth0_vlan: entered promiscuous mode [ 40.096904][ T4118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.101279][ T4098] tun0: tun_chr_ioctl cmd 1074025677 [ 40.113962][ T4118] ext4 filesystem being mounted at /root/syzkaller-testdir1207377553/syzkaller.EMWQm5/20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.120946][ T4098] tun0: linktype set to 270 [ 40.164514][ T4064] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.171551][ T4064] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.179047][ T4064] bridge_slave_0: entered allmulticast mode [ 40.185518][ T4064] bridge_slave_0: entered promiscuous mode [ 40.193717][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.204188][ T3122] hsr_slave_0: left promiscuous mode [ 40.209778][ T3122] hsr_slave_1: left promiscuous mode [ 40.215414][ T3122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.222843][ T3122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.231173][ T3122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.238626][ T3122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.247921][ T3122] veth1_macvtap: left promiscuous mode [ 40.253405][ T3122] veth0_macvtap: left promiscuous mode [ 40.259104][ T3122] veth1_vlan: left promiscuous mode [ 40.264422][ T3122] veth0_vlan: left promiscuous mode [ 40.274210][ T4125] loop3: detected capacity change from 0 to 256 [ 40.336836][ T3122] team0 (unregistering): Port device team_slave_1 removed [ 40.346805][ T3122] team0 (unregistering): Port device team_slave_0 removed [ 40.382387][ T4064] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.389602][ T4064] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.396985][ T4064] bridge_slave_1: entered allmulticast mode [ 40.403150][ T4064] bridge_slave_1: entered promiscuous mode [ 40.409718][ T4030] veth1_vlan: entered promiscuous mode [ 40.422192][ T4127] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 40.449160][ T4064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.460951][ T4030] veth0_macvtap: entered promiscuous mode [ 40.470824][ T4129] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 40.470971][ T4064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.490896][ T4030] veth1_macvtap: entered promiscuous mode [ 40.507919][ T4064] team0: Port device team_slave_0 added [ 40.514369][ T4064] team0: Port device team_slave_1 added [ 40.533146][ T4064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.540206][ T4064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.566108][ T4064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.581654][ T4064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.588710][ T4064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.614820][ T4064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.630565][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.641013][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.650889][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.661410][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.671616][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.682187][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.693029][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.715949][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.726428][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.736312][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.746805][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.756707][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.767126][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.777730][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.791880][ T4064] hsr_slave_0: entered promiscuous mode [ 40.798397][ T4064] hsr_slave_1: entered promiscuous mode [ 40.818456][ T4030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.827179][ T4030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.835930][ T4030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.844893][ T4030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.984123][ T4160] loop2: detected capacity change from 0 to 512 [ 40.992476][ T4160] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.079326][ T4030] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 41.088828][ T4167] mmap: syz-executor.0 (4167) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.117393][ T4064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.125763][ T4064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.134795][ T4064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.144662][ T4064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.184238][ T4064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.199087][ T4064] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.209873][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.217014][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.244487][ T4064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.254905][ T4064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.269302][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.276373][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.332351][ T4064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.450960][ T4208] loop3: detected capacity change from 0 to 256 [ 41.457100][ T4064] veth0_vlan: entered promiscuous mode [ 41.465800][ T4208] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.474416][ T4064] veth1_vlan: entered promiscuous mode [ 41.484939][ T4208] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.507269][ T4064] veth0_macvtap: entered promiscuous mode [ 41.514799][ T4064] veth1_macvtap: entered promiscuous mode [ 41.525071][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.535690][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.545671][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.556118][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.565950][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.576360][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.586255][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.596650][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.607441][ T4064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.622672][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.633271][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.643395][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.653871][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.663721][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.674279][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.684273][ T4064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.694767][ T4064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.705966][ T4064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.719442][ T4064] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.728273][ T4064] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.737000][ T4064] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.745846][ T4064] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.796183][ T4220] loop3: detected capacity change from 0 to 2048 [ 41.835347][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.860505][ T4220] EXT4-fs error (device loop3): __ext4_remount:6503: comm syz-executor.3: Abort forced by user [ 41.872060][ T4220] EXT4-fs (loop3): Remounting filesystem read-only [ 41.890586][ T4232] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 42.021541][ T4251] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 42.039839][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.039885][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.039908][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.039926][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.039943][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.040266][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 42.040288][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=14 [ 42.050212][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.050323][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.050342][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.050378][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.050644][ T4240] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.102830][ T4263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.102886][ T4263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.102901][ T4263] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 42.416828][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.697805][ T4326] loop3: detected capacity change from 0 to 1024 [ 42.817104][ T4326] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.838391][ T4326] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 42.855259][ T4326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 42.863837][ T4326] System zones: 0-1, 3-36 [ 42.869189][ T4326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.884919][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 42.885185][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 42.885196][ T29] audit: type=1400 audit(1717146191.779:1621): avc: denied { read append open } for pid=4319 comm="syz-executor.3" path="/root/syzkaller-testdir1207377553/syzkaller.EMWQm5/30/bus/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.929436][ T29] audit: type=1400 audit(1717146191.809:1622): avc: denied { map } for pid=4319 comm="syz-executor.3" path="/root/syzkaller-testdir1207377553/syzkaller.EMWQm5/30/bus/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.965285][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.978283][ T29] audit: type=1400 audit(1717146191.869:1623): avc: denied { write } for pid=4394 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.039627][ T4405] pim6reg1: entered promiscuous mode [ 43.044982][ T4405] pim6reg1: entered allmulticast mode [ 43.074774][ T4409] loop0: detected capacity change from 0 to 2048 [ 43.099217][ T29] audit: type=1400 audit(1717146191.989:1624): avc: denied { map } for pid=4416 comm="syz-executor.3" path="socket:[8723]" dev="sockfs" ino=8723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.123411][ T29] audit: type=1400 audit(1717146191.989:1625): avc: denied { read } for pid=4416 comm="syz-executor.3" path="socket:[8723]" dev="sockfs" ino=8723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.156683][ T4420] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 43.187370][ T4422] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.213326][ T29] audit: type=1400 audit(1717146192.099:1626): avc: denied { write } for pid=4423 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 43.262217][ T4433] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 43.332961][ T29] audit: type=1400 audit(1717146192.219:1627): avc: denied { map } for pid=4443 comm="syz-executor.0" path="/dev/hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 43.357541][ T29] audit: type=1400 audit(1717146192.219:1628): avc: denied { execute } for pid=4443 comm="syz-executor.0" path="/dev/hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 43.413024][ T4447] loop0: detected capacity change from 0 to 8192 [ 43.455424][ T4447] loop0: p1 p2 p4 [ 43.459756][ T4447] loop0: p2 start 8388613 is beyond EOD, truncated [ 43.466323][ T4447] loop0: p4 start 134217728 is beyond EOD, truncated [ 43.541744][ T4449] loop0: detected capacity change from 0 to 512 [ 43.549335][ T4449] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.560510][ T4449] EXT4-fs (loop0): 1 truncate cleaned up [ 43.566746][ T4449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.579877][ T29] audit: type=1400 audit(1717146192.469:1629): avc: denied { write } for pid=4448 comm="syz-executor.0" path="/root/syzkaller-testdir1766571223/syzkaller.LmOAsL/71/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.607126][ T29] audit: type=1400 audit(1717146192.469:1630): avc: denied { rename } for pid=4448 comm="syz-executor.0" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.641411][ T3108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.766964][ T4453] Zero length message leads to an empty skb [ 44.143067][ T4465] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.163463][ T4465] bridge_slave_1 (unregistering): left allmulticast mode [ 44.170866][ T4465] bridge_slave_1 (unregistering): left promiscuous mode [ 44.178199][ T4465] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.245611][ T4475] loop4: detected capacity change from 0 to 1024 [ 44.264440][ T4475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 44.272639][ T4475] System zones: 0-1, 3-12 [ 44.277600][ T4475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.305434][ T4483] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 44.317392][ T4064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.408262][ T4501] loop4: detected capacity change from 0 to 256 [ 44.562291][ T4516] loop0: detected capacity change from 0 to 1024 [ 44.584863][ T4516] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 44.587025][ T4521] loop3: detected capacity change from 0 to 128 [ 44.593021][ T4516] System zones: 0-1, 3-12 [ 44.604208][ T4516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.639463][ T3108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.809221][ T4537] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 44.901170][ T4549] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 44.953255][ T4555] loop3: detected capacity change from 0 to 1024 [ 44.975731][ T4555] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 44.981937][ T4553] loop0: detected capacity change from 0 to 8192 [ 44.983984][ T4555] System zones: 0-1, 3-12 [ 44.995944][ T4555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.029573][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.112852][ T4559] loop3: detected capacity change from 0 to 8192 [ 45.152790][ T4362] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 45.256988][ T4575] loop3: detected capacity change from 0 to 512 [ 45.267382][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 45.285404][ T4575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.298115][ T4575] ext4 filesystem being mounted at /root/syzkaller-testdir1207377553/syzkaller.EMWQm5/55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.313945][ T4575] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 45.376406][ T4586] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 45.388299][ T4586] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 45.528862][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.548465][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 45.585144][ T4588] loop4: detected capacity change from 0 to 8192 [ 45.665163][ T4592] cgroup: Need name or subsystem set [ 45.768650][ T4596] loop3: detected capacity change from 0 to 512 [ 45.778537][ T4596] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 45.791782][ T4596] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 45.804639][ T4596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.902534][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.948745][ T4602] loop0: detected capacity change from 0 to 1024 [ 45.962717][ T4605] loop3: detected capacity change from 0 to 256 [ 45.976046][ T4602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 45.984182][ T4602] System zones: 0-1, 3-12 [ 45.988851][ T4602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.019748][ T3108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.061208][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 46.066354][ T4620] loop3: detected capacity change from 0 to 256 [ 46.082932][ T4620] FAT-fs (loop3): Directory bread(block 64) failed [ 46.090044][ T4620] FAT-fs (loop3): Directory bread(block 65) failed [ 46.100429][ T4620] FAT-fs (loop3): Directory bread(block 66) failed [ 46.107604][ T4620] FAT-fs (loop3): Directory bread(block 67) failed [ 46.114262][ T4620] FAT-fs (loop3): Directory bread(block 68) failed [ 46.120918][ T4620] FAT-fs (loop3): Directory bread(block 69) failed [ 46.125755][ T4629] loop0: detected capacity change from 0 to 512 [ 46.127502][ T4620] FAT-fs (loop3): Directory bread(block 70) failed [ 46.135504][ T4629] ext4: Unknown parameter 'pcr' [ 46.140205][ T4620] FAT-fs (loop3): Directory bread(block 71) failed [ 46.151623][ T4620] FAT-fs (loop3): Directory bread(block 72) failed [ 46.158286][ T4620] FAT-fs (loop3): Directory bread(block 73) failed [ 46.182851][ T11] kworker/u8:0: attempt to access beyond end of device [ 46.182851][ T11] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 46.301323][ T4637] devtmpfs: Bad value for 'mpol' [ 46.401047][ T4641] loop2: detected capacity change from 0 to 1024 [ 46.415213][ T4641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 46.423445][ T4641] System zones: 0-1, 3-12 [ 46.428234][ T4641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.462842][ T4030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.472828][ T4645] loop4: detected capacity change from 0 to 8192 [ 46.513855][ T4645] loop4: p1 p3 p4 [ 46.518321][ T4645] loop4: p1 size 33751040 extends beyond EOD, truncated [ 46.525606][ T4645] loop4: p3 size 8454148 extends beyond EOD, truncated [ 46.532983][ T4645] loop4: p4 start 8323079 is beyond EOD, truncated [ 46.583576][ T4648] loop2: detected capacity change from 0 to 1024 [ 46.591516][ T4648] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 46.622614][ T4655] loop4: detected capacity change from 0 to 128 [ 46.630714][ T4655] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 46.641707][ T4655] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 46.655304][ T4655] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 47.166778][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 47.218819][ T4676] loop3: detected capacity change from 0 to 8192 [ 47.260964][ T4689] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 47.427209][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 47.464546][ T4064] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.612616][ T4720] loop2: detected capacity change from 0 to 2048 [ 47.635358][ T4720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.647761][ T4720] ext4 filesystem being mounted at /root/syzkaller-testdir154948572/syzkaller.ZVfuEL/22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.697586][ T4030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.753168][ T4734] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 47.762586][ T4734] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 47.895754][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 47.895766][ T29] audit: type=1400 audit(1717146196.789:1658): avc: denied { create } for pid=4737 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 47.922004][ T29] audit: type=1400 audit(1717146196.789:1659): avc: denied { ioctl } for pid=4737 comm="syz-executor.2" path="socket:[10115]" dev="sockfs" ino=10115 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 48.168141][ T4757] loop0: detected capacity change from 0 to 2048 [ 48.185451][ T4757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.197883][ T4757] ext4 filesystem being mounted at /root/syzkaller-testdir1766571223/syzkaller.LmOAsL/96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.260721][ T3108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.299580][ T4770] netlink: set zone limit has 8 unknown bytes [ 48.319932][ T4773] loop0: detected capacity change from 0 to 512 [ 48.328472][ T4773] EXT4-fs (loop0): failed to initialize system zone (-117) [ 48.335792][ T4773] EXT4-fs (loop0): mount failed [ 48.349626][ T4778] loop2: detected capacity change from 0 to 1024 [ 48.376187][ T4778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 48.384371][ T4778] System zones: 0-1, 3-12 [ 48.389855][ T4778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.431107][ T4030] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.482285][ T4791] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 48.491626][ T4795] loop4: detected capacity change from 0 to 512 [ 48.504505][ T4795] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 48.514612][ T4795] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 48.522506][ T4795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.534928][ T4795] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 48.549600][ T4795] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block [ 48.586735][ T4801] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 48.593889][ T4795] EXT4-fs error (device loop4): ext4_map_blocks:580: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 48.630048][ T4795] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block [ 48.635851][ T4801] EXT4-fs warning (device loop4): dx_probe:822: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block [ 48.649684][ T4810] loop3: detected capacity change from 0 to 2048 [ 48.665534][ T4064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.684865][ T4810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.697020][ T4810] ext4 filesystem being mounted at /root/syzkaller-testdir1207377553/syzkaller.EMWQm5/77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.734674][ T4818] pim6reg: entered allmulticast mode [ 48.738501][ T4819] loop4: detected capacity change from 0 to 764 [ 48.740988][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.759695][ T4819] rock: directory entry would overflow storage [ 48.765956][ T4819] rock: sig=0x4654, size=5, remaining=4 [ 48.795635][ T4822] loop0: detected capacity change from 0 to 512 [ 48.802775][ T29] audit: type=1400 audit(1717146197.689:1660): avc: denied { bind } for pid=4823 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.825436][ T4822] EXT4-fs (loop0): failed to initialize system zone (-117) [ 48.825474][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 48.832635][ T4822] EXT4-fs (loop0): mount failed [ 48.868505][ T4829] loop3: detected capacity change from 0 to 1024 [ 48.884995][ T4829] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 48.893181][ T4829] System zones: 0-1, 3-12 [ 48.898681][ T4829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.944886][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.993473][ T4841] loop0: detected capacity change from 0 to 512 [ 49.006212][ T4841] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.022498][ T4846] tipc: Enabling of bearer <Žz:l> rejected, media not registered [ 49.040204][ T29] audit: type=1400 audit(1717146197.929:1661): avc: denied { attach_queue } for pid=4840 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 49.121640][ T3108] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 49.125506][ T4853] No such timeout policy "syz0" [ 49.159678][ T29] audit: type=1400 audit(1717146198.049:1662): avc: denied { accept } for pid=4857 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.248071][ T4874] loop3: detected capacity change from 0 to 1024 [ 49.265949][ T4874] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 49.275203][ T4874] System zones: 0-1, 3-12 [ 49.279644][ T29] audit: type=1326 audit(1717146198.169:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42d6960ee9 code=0x0 [ 49.280192][ T4874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.384528][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.393129][ T4883] loop2: detected capacity change from 0 to 1024 [ 49.476278][ T4887] wg2: entered promiscuous mode [ 49.481189][ T4887] wg2: entered allmulticast mode [ 49.572374][ T29] audit: type=1400 audit(1717146198.459:1664): avc: denied { setopt } for pid=4899 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.605520][ T29] audit: type=1400 audit(1717146198.499:1665): avc: denied { execute } for pid=4906 comm="syz-executor.3" path=2F6D656D66643A736563657203202864656C6574656429 dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.676851][ T4912] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 49.718334][ T4916] loop3: detected capacity change from 0 to 1024 [ 49.735451][ T4916] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 49.743794][ T4916] System zones: 0-1, 3-12 [ 49.748434][ T4916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.812354][ T3854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.825409][ T4930] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 50.521986][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 50.551013][ T4948] loop4: detected capacity change from 0 to 1024 [ 50.564993][ T4948] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 50.573226][ T4948] System zones: 0-1, 3-12 [ 50.580457][ T4948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.613229][ T29] audit: type=1400 audit(1717146199.499:1666): avc: denied { setattr } for pid=4947 comm="syz-executor.4" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.637031][ T4948] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 50.648035][ T4948] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 50.663885][ T4948] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 50.675903][ T4948] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 50.720676][ T4957] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 50.782916][ T29] audit: type=1326 audit(1717146199.669:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4964 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3d22d5ee9 code=0x0 [ 50.985615][ T4976] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 50.992139][ T4976] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 50.999677][ T4976] vhci_hcd vhci_hcd.0: Device attached [ 51.006849][ T4977] vhci_hcd: connection closed [ 51.007062][ T50] vhci_hcd: stop threads [ 51.016054][ T50] vhci_hcd: release socket [ 51.020524][ T50] vhci_hcd: disconnect device [ 51.859295][ T4988] hugetlbfs: Bad value for 'gid' [ 52.597145][ T5014] loop2: detected capacity change from 0 to 256 [ 52.637779][ T5014] can0: slcan on ttyS3. [ 52.699234][ T5015] 9pnet_fd: Insufficient options for proto=fd [ 52.713662][ T5014] can0 (unregistered): slcan off ttyS3. [ 52.738224][ T5017] __nla_validate_parse: 2 callbacks suppressed [ 52.738259][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 52.843865][ T5028] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 52.856796][ T5028] loop2: detected capacity change from 0 to 512 [ 52.865888][ T5028] EXT4-fs (loop2): failed to initialize system zone (-117) [ 52.873217][ T5028] EXT4-fs (loop2): mount failed [ 52.903252][ T5030] loop4: detected capacity change from 0 to 1764 [ 52.970358][ T5034] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 53.094128][ T5043] vhci_hcd: invalid port number 9 [ 53.099244][ T5043] vhci_hcd: default hub control req: 0014 v0008 i0009 l0 [ 53.308121][ T5049] xt_CT: No such helper "netbios-ns" [ 53.316176][ T5049] loop4: detected capacity change from 0 to 512 [ 53.323221][ T5049] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 53.385479][ T5049] syz-executor.4: attempt to access beyond end of device [ 53.385479][ T5049] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 53.398891][ T5049] EXT4-fs (loop4): unable to read superblock [ 53.614896][ T5064] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 53.849510][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 53.934836][ T5083] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 53.943132][ T5083] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 53.971646][ T5085] xt_CT: No such helper "netbios-ns" [ 53.979867][ T5085] loop2: detected capacity change from 0 to 512 [ 53.987490][ T5085] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 54.025188][ T5085] syz-executor.2: attempt to access beyond end of device [ 54.025188][ T5085] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 54.038809][ T5085] EXT4-fs (loop2): unable to read superblock [ 54.142375][ T5093] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 54.432256][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 54.432269][ T29] audit: type=1326 audit(1717146203.319:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 54.462492][ T29] audit: type=1326 audit(1717146203.319:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 54.486479][ T29] audit: type=1326 audit(1717146203.329:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 54.510447][ T29] audit: type=1326 audit(1717146203.329:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 54.534417][ T29] audit: type=1326 audit(1717146203.329:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 54.558321][ T29] audit: type=1326 audit(1717146203.329:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 54.582210][ T29] audit: type=1326 audit(1717146203.349:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 54.606160][ T29] audit: type=1326 audit(1717146203.349:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 54.630366][ T29] audit: type=1326 audit(1717146203.349:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 54.655021][ T29] audit: type=1326 audit(1717146203.349:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 54.721939][ T5129] xt_CT: No such helper "netbios-ns" [ 54.729904][ T5129] loop4: detected capacity change from 0 to 512 [ 54.737496][ T5129] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 54.785917][ T5129] syz-executor.4: attempt to access beyond end of device [ 54.785917][ T5129] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 54.799357][ T5129] EXT4-fs (loop4): unable to read superblock [ 55.026127][ T5154] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 55.178310][ T5168] xt_CT: No such helper "netbios-ns" [ 55.188321][ T5168] loop4: detected capacity change from 0 to 512 [ 55.195618][ T5168] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 55.245794][ T5168] syz-executor.4: attempt to access beyond end of device [ 55.245794][ T5168] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 55.259286][ T5168] EXT4-fs (loop4): unable to read superblock [ 55.392432][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 55.445900][ T5177] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 55.646663][ T5180] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 55.866479][ T5183] loop3: detected capacity change from 0 to 128 [ 55.873910][ T5183] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 55.884806][ T5183] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 55.892672][ T5183] FAT-fs (loop3): Filesystem has been set read-only [ 56.319425][ T5190] loop4: detected capacity change from 0 to 2048 [ 56.343865][ T5190] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 56.427182][ T5195] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 56.595836][ T5206] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 56.657572][ T5212] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 56.929013][ T5232] FAULT_INJECTION: forcing a failure. [ 56.929013][ T5232] name failslab, interval 1, probability 0, space 0, times 0 [ 56.941664][ T5232] CPU: 0 PID: 5232 Comm: syz-executor.2 Not tainted 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 [ 56.952053][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 56.962094][ T5232] Call Trace: [ 56.965367][ T5232] [ 56.968281][ T5232] dump_stack_lvl+0xf2/0x150 [ 56.972964][ T5232] dump_stack+0x15/0x20 [ 56.977131][ T5232] should_fail_ex+0x229/0x230 [ 56.981866][ T5232] ? kvmalloc_node_noprof+0x72/0x170 [ 56.987150][ T5232] __should_failslab+0x92/0xa0 [ 56.991913][ T5232] should_failslab+0x9/0x20 [ 56.996463][ T5232] __kmalloc_node_noprof+0xa8/0x380 [ 57.001728][ T5232] kvmalloc_node_noprof+0x72/0x170 [ 57.006881][ T5232] alloc_netdev_mqs+0x6e6/0x8b0 [ 57.011726][ T5232] register_vlan_device+0x238/0x390 [ 57.016931][ T5232] vlan_ioctl_handler+0x1ae/0x4f0 [ 57.021941][ T5232] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 57.027472][ T5232] sock_ioctl+0x4d2/0x640 [ 57.031829][ T5232] ? __pfx_sock_ioctl+0x10/0x10 [ 57.036719][ T5232] __se_sys_ioctl+0xd3/0x150 [ 57.041317][ T5232] __x64_sys_ioctl+0x43/0x50 [ 57.045940][ T5232] x64_sys_call+0x1581/0x2d70 [ 57.050636][ T5232] do_syscall_64+0xc9/0x1c0 [ 57.055251][ T5232] ? clear_bhb_loop+0x55/0xb0 [ 57.059964][ T5232] ? clear_bhb_loop+0x55/0xb0 [ 57.064643][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.070573][ T5232] RIP: 0033:0x7fd3d22d5ee9 [ 57.075064][ T5232] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.094723][ T5232] RSP: 002b:00007fd3d16500c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.103112][ T5232] RAX: ffffffffffffffda RBX: 00007fd3d240cfa0 RCX: 00007fd3d22d5ee9 [ 57.111064][ T5232] RDX: 0000000020000000 RSI: 0000000000008983 RDI: 0000000000000003 [ 57.119015][ T5232] RBP: 00007fd3d1650120 R08: 0000000000000000 R09: 0000000000000000 [ 57.127014][ T5232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.134968][ T5232] R13: 000000000000000b R14: 00007fd3d240cfa0 R15: 00007ffc25128838 [ 57.143040][ T5232] [ 57.275064][ T5242] loop2: detected capacity change from 0 to 512 [ 57.285941][ T5242] EXT4-fs (loop2): Unsupported encryption level 9 [ 57.308169][ T5246] loop4: detected capacity change from 0 to 128 [ 57.315400][ T5246] FAT-fs (loop4): Unrecognized mount option "vfat" or missing value [ 57.344928][ T5246] xt_time: unknown flags 0xc [ 57.427069][ T5258] loop2: detected capacity change from 0 to 1024 [ 57.444552][ T5258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 57.452634][ T5258] System zones: 0-1, 3-12 [ 57.460383][ T5258] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.536192][ T5265] loop4: detected capacity change from 0 to 512 [ 57.543138][ T5265] ext2: Unknown parameter 'dont_appraise' [ 57.620656][ T5275] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.698220][ T5279] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 57.805402][ T5283] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.822610][ T5283] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 57.848820][ T5291] loop2: detected capacity change from 0 to 512 [ 57.856783][ T5291] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.863622][ T5291] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.874309][ T5291] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value out of bounds [ 57.888933][ T5291] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 58.039805][ T5296] serio: Serial port pts1 [ 58.402970][ T5302] loop4: detected capacity change from 0 to 1024 [ 58.411923][ T5302] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 58.420199][ T5302] System zones: 0-1, 3-12 [ 58.562106][ T5312] loop4: detected capacity change from 0 to 256 [ 58.568889][ T5312] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.911838][ T5330] loop3: detected capacity change from 0 to 512 [ 58.920127][ T5330] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.931519][ T5330] EXT4-fs (loop3): 1 orphan inode deleted [ 58.937323][ T5330] EXT4-fs (loop3): 1 truncate cleaned up [ 58.949313][ T5330] __nla_validate_parse: 2 callbacks suppressed [ 58.949326][ T5330] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 58.966759][ T5330] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 58.971258][ T5333] loop4: detected capacity change from 0 to 1024 [ 58.994168][ T3854] EXT4-fs error (device loop3): __ext4_iget:4906: inode #11: block 524051: comm syz-executor.3: invalid block [ 58.996793][ T5333] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 59.005994][ T3854] EXT4-fs error (device loop3): __ext4_iget:4906: inode #11: block 524051: comm syz-executor.3: invalid block [ 59.015080][ T5333] System zones: 0-1, 3-12 [ 59.244021][ T3854] Trying to write to read-only block-device loop3 [ 59.255276][ T4362] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.317339][ T4362] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.377427][ T4362] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.417913][ T4362] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.475073][ T5343] chnl_net:caif_netlink_parms(): no params data found [ 59.483653][ T4362] bridge_slave_0: left allmulticast mode [ 59.489301][ T4362] bridge_slave_0: left promiscuous mode [ 59.495056][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.568419][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.578644][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.588319][ T4362] bond0 (unregistering): Released all slaves [ 59.620379][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.627538][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.634666][ T5343] bridge_slave_0: entered allmulticast mode [ 59.641085][ T5343] bridge_slave_0: entered promiscuous mode [ 59.647820][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.654925][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.662105][ T5343] bridge_slave_1: entered allmulticast mode [ 59.669279][ T5343] bridge_slave_1: entered promiscuous mode [ 59.673998][ T4362] IPVS: stopping master sync thread 4029 ... [ 59.688019][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.700563][ T4362] hsr_slave_0: left promiscuous mode [ 59.706577][ T4362] hsr_slave_1: left promiscuous mode [ 59.712362][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.719859][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.727763][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.735212][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.744957][ T4362] veth1_macvtap: left promiscuous mode [ 59.750479][ T4362] veth0_macvtap: left promiscuous mode [ 59.756030][ T4362] veth1_vlan: left promiscuous mode [ 59.761281][ T4362] veth0_vlan: left promiscuous mode [ 59.797275][ T5359] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 59.832382][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 59.842135][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 59.873468][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.897191][ T5343] team0: Port device team_slave_0 added [ 59.903677][ T5343] team0: Port device team_slave_1 added [ 59.913433][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 59.922691][ T5361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.930205][ T5361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.937795][ T5361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.945259][ T5361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.969803][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.976797][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.002718][ T5343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.015155][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.022110][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.048108][ T5343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.077092][ T5343] hsr_slave_0: entered promiscuous mode [ 60.083243][ T5343] hsr_slave_1: entered promiscuous mode [ 60.089195][ T5343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.096742][ T5343] Cannot create hsr debugfs directory [ 60.336457][ T5343] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.345060][ T5343] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.353682][ T5343] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.361875][ T5343] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.394860][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.407816][ T5343] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.424428][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.431528][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.440168][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.447208][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.498670][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.556083][ T5343] veth0_vlan: entered promiscuous mode [ 60.566896][ T5343] veth1_vlan: entered promiscuous mode [ 60.581766][ T5343] veth0_macvtap: entered promiscuous mode [ 60.588949][ T5343] veth1_macvtap: entered promiscuous mode [ 60.599822][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.610284][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.620108][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.630530][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.640364][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.650798][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.661438][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.671962][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.682427][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.692237][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.702666][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.712476][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.722897][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.733683][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.741978][ T5343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.750808][ T5343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.759558][ T5343] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.768293][ T5343] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.858076][ T5385] tmpfs: Bad value for 'nr_blocks' [ 60.866919][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 60.866932][ T29] audit: type=1400 audit(2000000005.912:1824): avc: denied { accept } for pid=5383 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.883360][ T5385] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 60.955523][ T29] audit: type=1400 audit(2000000006.002:1825): avc: denied { execute } for pid=5390 comm="syz-executor.4" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 60.983188][ T29] audit: type=1400 audit(2000000006.002:1826): avc: denied { getopt } for pid=5390 comm="syz-executor.4" lport=34865 faddr=::ffff:172.30.0.5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 61.067302][ T5397] loop2: detected capacity change from 0 to 2048 [ 61.161434][ T29] audit: type=1400 audit(2000000006.202:1827): avc: denied { setopt } for pid=5410 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.184541][ T29] audit: type=1400 audit(2000000006.202:1828): avc: denied { listen } for pid=5410 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.204737][ T29] audit: type=1400 audit(2000000006.202:1829): avc: denied { connect } for pid=5410 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.224810][ T29] audit: type=1400 audit(2000000006.202:1830): avc: denied { write } for pid=5410 comm="syz-executor.4" path="socket:[13678]" dev="sockfs" ino=13678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.283167][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.387160][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.428065][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.492280][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.582903][ T5431] loop2: detected capacity change from 0 to 128 [ 61.597540][ T11] bridge_slave_1: left allmulticast mode [ 61.603212][ T11] bridge_slave_1: left promiscuous mode [ 61.609036][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.618512][ T11] bridge_slave_0: left allmulticast mode [ 61.624177][ T11] bridge_slave_0: left promiscuous mode [ 61.629833][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.737700][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.748344][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.759496][ T11] bond0 (unregistering): Released all slaves [ 61.776703][ T5437] loop3: detected capacity change from 0 to 512 [ 61.827937][ T5418] chnl_net:caif_netlink_parms(): no params data found [ 61.877334][ T11] hsr_slave_0: left promiscuous mode [ 61.883039][ T11] hsr_slave_1: left promiscuous mode [ 61.888782][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.896191][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.903626][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.911016][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.919925][ T11] veth1_macvtap: left promiscuous mode [ 61.925495][ T11] veth0_macvtap: left promiscuous mode [ 61.931052][ T11] veth1_vlan: left promiscuous mode [ 61.936297][ T11] veth0_vlan: left promiscuous mode [ 62.015850][ T11] team0 (unregistering): Port device team_slave_1 removed [ 62.026392][ T11] team0 (unregistering): Port device team_slave_0 removed [ 62.082487][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.089673][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.097001][ T5418] bridge_slave_0: entered allmulticast mode [ 62.103693][ T5418] bridge_slave_0: entered promiscuous mode [ 62.110610][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.117757][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.126352][ T5418] bridge_slave_1: entered allmulticast mode [ 62.133368][ T5418] bridge_slave_1: entered promiscuous mode [ 62.141065][ T5454] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 62.172488][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.183383][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.203764][ T5418] team0: Port device team_slave_0 added [ 62.210213][ T5418] team0: Port device team_slave_1 added [ 62.224911][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.231880][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.257837][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.272794][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.279847][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.305842][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.332956][ T5418] hsr_slave_0: entered promiscuous mode [ 62.339081][ T5418] hsr_slave_1: entered promiscuous mode [ 62.345086][ T5418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.352680][ T5418] Cannot create hsr debugfs directory [ 62.374780][ T29] audit: type=1400 audit(2000000007.422:1831): avc: denied { write } for pid=5459 comm="syz-executor.2" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.410125][ T29] audit: type=1400 audit(2000000007.452:1832): avc: denied { map } for pid=5461 comm="syz-executor.2" path="/proc/5461/task/5462/attr/keycreate" dev="proc" ino=12745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 62.453769][ T29] audit: type=1326 audit(2000000007.492:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5464 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d22d5ee9 code=0x7ffc0000 [ 62.715008][ T5418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.723135][ T5418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.732498][ T5418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.741028][ T5418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.775970][ T5418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.791527][ T5418] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.802435][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.809561][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.822128][ T3184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.829218][ T3184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.888364][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.950496][ T5418] veth0_vlan: entered promiscuous mode [ 62.958387][ T5418] veth1_vlan: entered promiscuous mode [ 62.972967][ T5418] veth0_macvtap: entered promiscuous mode [ 62.980536][ T5418] veth1_macvtap: entered promiscuous mode [ 62.991164][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.001639][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.001651][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.001717][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.001726][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.001805][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.054689][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.055630][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.055644][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.055654][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.055664][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.055672][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.055685][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.056747][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.060136][ T5418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.071726][ T5502] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 63.077132][ T5418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.161451][ T5418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.161534][ T5418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.206805][ T5506] loop1: detected capacity change from 0 to 1024 [ 63.234409][ T5506] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 63.242490][ T5506] System zones: 0-1, 3-12 [ 63.439759][ T5517] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 63.467716][ T5520] cgroup: fork rejected by pids controller in /syz2 [ 63.476362][ T5520] IPv6: Can't replace route, no match found [ 63.714183][ T4362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.820219][ T4362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.858132][ T4362] bond0: (slave netdevsim1): Releasing backup interface [ 63.867995][ T4362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.882889][ T5537] loop4: detected capacity change from 0 to 512 [ 63.893036][ T5537] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.4: invalid block [ 63.905895][ T5537] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 63.923779][ T5537] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 63.940965][ T5537] EXT4-fs (loop4): 2 truncates cleaned up [ 63.948321][ T4362] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.007413][ T5532] chnl_net:caif_netlink_parms(): no params data found [ 64.055528][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.062761][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.069908][ T5532] bridge_slave_0: entered allmulticast mode [ 64.076521][ T5532] bridge_slave_0: entered promiscuous mode [ 64.083439][ T4362] bridge_slave_1: left allmulticast mode [ 64.089161][ T4362] bridge_slave_1: left promiscuous mode [ 64.094849][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.104006][ T4362] bridge_slave_0: left allmulticast mode [ 64.109653][ T4362] bridge_slave_0: left promiscuous mode [ 64.115469][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.196413][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.206995][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.217748][ T4362] bond0 (unregistering): Released all slaves [ 64.227329][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.234461][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.241606][ T5532] bridge_slave_1: entered allmulticast mode [ 64.248149][ T5532] bridge_slave_1: entered promiscuous mode [ 64.268729][ T5532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.279896][ T5532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.298346][ T5532] team0: Port device team_slave_0 added [ 64.305675][ T5532] team0: Port device team_slave_1 added [ 64.318265][ T4362] hsr_slave_0: left promiscuous mode [ 64.325095][ T4362] hsr_slave_1: left promiscuous mode [ 64.343073][ T4362] veth1_macvtap: left promiscuous mode [ 64.348585][ T4362] veth0_macvtap: left promiscuous mode [ 64.354256][ T4362] veth1_vlan: left promiscuous mode [ 64.359572][ T4362] veth0_vlan: left promiscuous mode [ 64.430839][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 64.440700][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 64.487300][ T5551] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 64.497685][ T5559] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 64.511491][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.518490][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.544488][ T5532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.555861][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.562881][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.588935][ T5532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.617369][ T5532] hsr_slave_0: entered promiscuous mode [ 64.623311][ T5532] hsr_slave_1: entered promiscuous mode [ 64.629245][ T5532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.637166][ T5532] Cannot create hsr debugfs directory [ 64.660389][ T4064] EXT4-fs unmount: 14 callbacks suppressed [ 64.660476][ T4064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.954244][ T5583] loop4: detected capacity change from 0 to 128 [ 64.961902][ T5583] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 65.034428][ T5532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.043361][ T5532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.052571][ T5532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.063463][ T5532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.108525][ T5532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.109139][ T5590] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.133697][ T5532] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.147700][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.154777][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.163403][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.170457][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.235206][ T5532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.252350][ T5601] process 'syz-executor.4' launched '/dev/fd/8' with NULL argv: empty string added [ 65.309896][ T5532] veth0_vlan: entered promiscuous mode [ 65.318493][ T5532] veth1_vlan: entered promiscuous mode [ 65.337863][ T5532] veth0_macvtap: entered promiscuous mode [ 65.346522][ T5532] veth1_macvtap: entered promiscuous mode [ 65.359727][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.370212][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.380191][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.390699][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.398661][ T5618] loop4: detected capacity change from 0 to 256 [ 65.401203][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.417946][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.427794][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.438216][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.449022][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.460607][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.471176][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.481069][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.491667][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.501543][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.512035][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.521875][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.532379][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.545281][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.555807][ T5532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.564613][ T5532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.573320][ T5532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.582031][ T5532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.647039][ T5635] sctp: [Deprecated]: syz-executor.2 (pid 5635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.647039][ T5635] Use struct sctp_sack_info instead [ 65.669902][ T5625] loop3: detected capacity change from 0 to 8192 [ 65.737923][ T5641] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 65.753519][ C0] hrtimer: interrupt took 17564 ns [ 65.896125][ T5656] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.940086][ T5660] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 65.948966][ T5660] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 65.982224][ T5662] loop3: detected capacity change from 0 to 256 [ 66.031443][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 66.031455][ T29] audit: type=1400 audit(2000000011.072:1927): avc: denied { connect } for pid=5666 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.057695][ T29] audit: type=1400 audit(2000000011.092:1928): avc: denied { create } for pid=5670 comm="syz-executor.1" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 66.078706][ T29] audit: type=1400 audit(2000000011.092:1929): avc: denied { read } for pid=5670 comm="syz-executor.1" name="file5" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 66.101418][ T29] audit: type=1400 audit(2000000011.092:1930): avc: denied { open } for pid=5670 comm="syz-executor.1" path="/root/syzkaller-testdir1968928805/syzkaller.cqoEN8/7/file5" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 66.128582][ T29] audit: type=1400 audit(2000000011.092:1931): avc: denied { ioctl } for pid=5670 comm="syz-executor.1" path="/root/syzkaller-testdir1968928805/syzkaller.cqoEN8/7/file5" dev="sda1" ino=1965 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 66.173059][ T29] audit: type=1400 audit(2000000011.212:1932): avc: denied { unlink } for pid=5418 comm="syz-executor.1" name="file5" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 66.230136][ T5682] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 66.457651][ T5700] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.793940][ T5706] syzkaller0: entered promiscuous mode [ 66.799431][ T5706] syzkaller0: entered allmulticast mode [ 66.828738][ T5712] team0: Port device team_slave_0 removed [ 66.858498][ T5712] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 66.879124][ T5714] loop4: detected capacity change from 0 to 256 [ 66.898427][ T5716] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 66.910813][ T5716] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 67.043728][ T5728] loop1: detected capacity change from 0 to 512 [ 67.052866][ T5728] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.1: invalid block [ 67.068129][ T5728] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1) [ 67.096487][ T5728] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1) [ 67.112208][ T5736] loop4: detected capacity change from 0 to 512 [ 67.120517][ T5728] EXT4-fs (loop1): 2 truncates cleaned up [ 67.127800][ T5736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.141457][ T5728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.154031][ T5736] ext4 filesystem being mounted at /root/syzkaller-testdir3707321125/syzkaller.tDxoOI/115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.178051][ T5418] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.187757][ T4064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.209546][ T5749] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.223116][ T5732] chnl_net:caif_netlink_parms(): no params data found [ 67.263233][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.270322][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.277756][ T5732] bridge_slave_0: entered allmulticast mode [ 67.284378][ T5732] bridge_slave_0: entered promiscuous mode [ 67.292144][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.299563][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.307182][ T5732] bridge_slave_1: entered allmulticast mode [ 67.314079][ T5732] bridge_slave_1: entered promiscuous mode [ 67.340469][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.354084][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.365422][ T5766] loop4: detected capacity change from 0 to 128 [ 67.380039][ T5766] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 67.391653][ T5732] team0: Port device team_slave_0 added [ 67.402211][ T5732] team0: Port device team_slave_1 added [ 67.411735][ T4362] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.434171][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.441132][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.467247][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.482396][ T4362] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.495339][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.502345][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.528307][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.559501][ T5732] hsr_slave_0: entered promiscuous mode [ 67.565649][ T5732] hsr_slave_1: entered promiscuous mode [ 67.571524][ T5732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.579133][ T5732] Cannot create hsr debugfs directory [ 67.587397][ T4362] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.639943][ T4362] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.695165][ T4362] bridge_slave_1: left allmulticast mode [ 67.700827][ T4362] bridge_slave_1: left promiscuous mode [ 67.706564][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.715267][ T4362] bridge_slave_0: left allmulticast mode [ 67.720929][ T4362] bridge_slave_0: left promiscuous mode [ 67.726805][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.827011][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.837099][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.847720][ T4362] bond0 (unregistering): Released all slaves [ 67.969075][ T5786] loop4: detected capacity change from 0 to 256 [ 67.978408][ T4362] hsr_slave_0: left promiscuous mode [ 67.978858][ T29] audit: type=1326 audit(2000000013.022:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49033b6ee9 code=0x7ffc0000 [ 68.008085][ T29] audit: type=1326 audit(2000000013.032:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49033b6ee9 code=0x7ffc0000 [ 68.032139][ T29] audit: type=1326 audit(2000000013.032:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49033b6ee9 code=0x7ffc0000 [ 68.056120][ T29] audit: type=1326 audit(2000000013.062:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49033b6ee9 code=0x7ffc0000 [ 68.081295][ T4362] hsr_slave_1: left promiscuous mode [ 68.091114][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.098985][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.108156][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.115572][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.125067][ T4362] veth1_macvtap: left promiscuous mode [ 68.130614][ T4362] veth0_macvtap: left promiscuous mode [ 68.136219][ T4362] veth1_vlan: left promiscuous mode [ 68.141453][ T4362] veth0_vlan: left promiscuous mode [ 68.152307][ T5792] loop2: detected capacity change from 0 to 2048 [ 68.161527][ T5792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.168181][ T5792] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.174736][ T5792] EXT4-fs: Ignoring removed nobh option [ 68.188629][ T5792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.217214][ T5532] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.236663][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 68.314424][ T5806] ================================================================== [ 68.322507][ T5806] BUG: KCSAN: data-race in touch_atime / touch_atime [ 68.329171][ T5806] [ 68.331480][ T5806] write to 0xffff888108a72a98 of 8 bytes by task 5805 on cpu 0: [ 68.339086][ T5806] touch_atime+0x1f3/0x350 [ 68.343487][ T5806] pick_link+0x31a/0x7e0 [ 68.347719][ T5806] step_into+0x725/0x810 [ 68.351941][ T5806] link_path_walk+0x49d/0x810 [ 68.356600][ T5806] __filename_parentat+0x13c/0x3c0 2033/05/18 03:33:33 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 68.361687][ T5806] filename_create+0x77/0x2b0 [ 68.366355][ T5806] do_mkdirat+0x63/0x2a0 [ 68.370598][ T5806] __x64_sys_mkdirat+0x50/0x60 [ 68.375361][ T5806] x64_sys_call+0x2ce5/0x2d70 [ 68.380044][ T5806] do_syscall_64+0xc9/0x1c0 [ 68.384563][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.390456][ T5806] [ 68.392766][ T5806] read to 0xffff888108a72a98 of 8 bytes by task 5806 on cpu 1: [ 68.400295][ T5806] touch_atime+0x1a0/0x350 [ 68.404708][ T5806] pick_link+0x31a/0x7e0 [ 68.408956][ T5806] step_into+0x725/0x810 [ 68.413198][ T5806] link_path_walk+0x49d/0x810 [ 68.417875][ T5806] path_lookupat+0x72/0x2b0 [ 68.422389][ T5806] do_o_path+0x44/0x120 [ 68.426545][ T5806] path_openat+0x1a8f/0x1da0 [ 68.431132][ T5806] do_filp_open+0xf7/0x200 [ 68.435548][ T5806] do_sys_openat2+0xab/0x120 [ 68.440131][ T5806] __x64_sys_openat+0xf3/0x120 [ 68.444898][ T5806] x64_sys_call+0x1057/0x2d70 [ 68.449573][ T5806] do_syscall_64+0xc9/0x1c0 [ 68.454077][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.459972][ T5806] [ 68.462286][ T5806] value cha