last executing test programs: 26.423212804s ago: executing program 4: r0 = syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000680)=ANY=[@ANYBLOB='nodiscard,discard=0x0000000000000009,nodiscard,iocharset=cp737,nointegrity,discard,nointegrity\x00iocharset=ascii,nodiscard,usrquota,nodiscard,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,noquota,gid=', @ANYRESHEX, @ANYRES8=0x0], 0x5, 0x60d6, &(0x7f000000c4c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702020207b1af8ff00000000bfa100000000008007010000f8ffffffb702000008000000b70300000000008385000000710000009500"/88], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000780)={{0x0, 0x0, 0x1, 0x4, 0xf5, 0x5, 0xd27, 0xe882, 0x5, 0x9a, 0x8, 0x200, 0x81, 0x4, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r9, 0x0, 0x25a5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r10, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback={0xff00000000000000}}}) read(r1, &(0x7f0000000240)=""/100, 0x64) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x2, 0x8e, "c1a84f48d5918f3ebd7e8d4f5e387a1e88eeec4ec4b26110f375f857845d0d8fda6d060ff05845e06bf63ebdc7f369b0937052995496f643a9fda79f1fae994033a1034c194ff39887053a1670faf727e5f3fe44b3b15c0ae76c2fb6972500947d1964039c406d27071771f3abc83b020c7cf3dc39f3affaef112c605b9d0e6320bfdc4bfa3db70026daff423600"}) open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x100) r11 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r11, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) linkat(r11, &(0x7f0000000100)='./file1\x00', r11, &(0x7f0000000240)='./file0\x00', 0x0) openat(r11, &(0x7f0000000180)='./file0\x00', 0x400000, 0x49) 25.952324901s ago: executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@utf8}, {}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x0, 0x1, &(0x7f0000000180)='\x00', 0x1}) 8.503113433s ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1, 0x552e, &(0x7f0000002480)="$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") r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x14040, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x8, 0x1, 0xffff, 0x3, 0x400}) r1 = syz_open_dev$video4linux(&(0x7f0000000380), 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x14044, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xff, 0x5ec6, &(0x7f0000011ac0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000180)='./file0\x00') r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCRMFF(r3, 0x80084502, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="020f00001c000000000000000001000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000080012000000010000000000000000000600ff0000000000000000000000000000000000000000000000000000000000fc02000000000000000000000000000005000600000000000a004e2300000000000000000000000000000000000000000000000000000000080012000300020000000000ff7f000006003200000900000100010000000000ffffffff000000000000000000000000e0000002000000000000000000000000747b11af6a277c0e22f44a8adfd446ccc31bd3a718569dccfa408b417d86aba1c2a41aa74375782e860e04f2b02a5680d257541b80dc80fcd05e7acdc22d2cccd0f8ba4c90bd0cefbe8f93572bb58ed3fe2037eb8906e7d06771c771f02f2c74b25f2fb0f90e64ed9a78ea4f358a0640ddf069554efca78d68993dbb4b4619d9300a6153e866370b43ad05715645930aee7e2f"], 0xe0}}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc008561b, &(0x7f0000000040)={0x980001}) r6 = creat(&(0x7f0000003840)='./bus\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r8, 0x4010744d, 0x20000000) ftruncate(r6, 0x1f) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f00000000c0)={0x0}) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) ioctl$VIDIOC_S_MODULATOR(r6, 0x40445637, &(0x7f00000000c0)={0x9, "410c863c56839163f96dbd35aa85d2b6abc41e726d3fdcaa8588cee1aa6fead1", 0x10, 0xfffff800, 0x1, 0x4, 0x4}) 7.991185864s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/192, 0x20000057) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="23ce290501801aa70000ffffffffffff88a8000081000000080049000038000000000006900100003000ac1e000144040000440c0003000000020000000000000000a89ffd0bdf6c45a564d01936c9b3c93f80871ea9cfab00b7428fff9adb78ee"], 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c332027434420436170747572652053776974636827"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r8, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xbed, 0x3], [{0x10000, 0x0, 0x0, 0x1}], 0xc}) ftruncate(r7, 0x2000009) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) 6.482820831s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/192, 0x20000057) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="23ce290501801aa70000ffffffffffff88a8000081000000080049000038000000000006900100003000ac1e000144040000440c0003000000020000000000000000a89ffd0bdf6c45a564d01936c9b3c93f80871ea9cfab00b7428fff9adb78ee"], 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c332027434420436170747572652053776974636827"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r9 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r9, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xbed, 0x3], [{0x10000, 0x0, 0x0, 0x1}], 0xc}) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) 5.89055069s ago: executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@utf8}, {}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x0, 0x1, &(0x7f0000000180)='\x00', 0x1}) 5.162486171s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000980)="000000c8320100"/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000d00)={0x230, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x230}}, 0x0) 5.160473273s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0x0) 5.011856567s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/192, 0x20000057) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="23ce290501801aa70000ffffffffffff88a8000081000000080049000038000000000006900100003000ac1e000144040000440c0003000000020000000000000000a89ffd0bdf6c45a564d01936c9b3c93f80871ea9cfab00b7428fff9adb78ee"], 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c332027434420436170747572652053776974636827"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r8, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xbed, 0x3], [{0x10000, 0x0, 0x0, 0x1}], 0xc}) ftruncate(r7, 0x2000009) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) 4.980323819s ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) unshare(0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg(r0, &(0x7f0000001280)={&(0x7f0000000500)=@generic={0x26, "02a11fed77c4094e65749bb2d6bfe195a3674dc1daf9bd6db8d385514e259afadec5bdeccac10b3c99afd6c6ef9e538565e91ad86af7d3cac0bf7da81e54b6ce6770e9432887f383ae41ba4b96030ed48117d0bb57acd54253fc5c3ab89fbe74edb5f581f958f4c850aca3d953d04253961d05f56ff0fc4f2221672523cd"}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a40)="10b12505bcebc2514d8da9ceac1b606f3a22f4c0fbe71ab385af44026e894f6015a9f0f605d8f46ebc", 0x29}, {&(0x7f0000000a80)="76c5f6a3e9c1036559af5164bd5c25ac522239c560c7032387a52d685791ce6d980a6de94f0e5b518fb56a4f0a0e1d2967", 0x31}, {&(0x7f0000000ac0)="22e09dda137c6c0e4fa22a8b1aa6d35633924ca4b1a578453c6fa3a5c03695d2a7d0699697051310a9d252af5595e6c9bf464f6c6f773f0afb1346ee442ab9729f2b66bbbd6d7b8ba151efb9ac32a702ceb700f9598281a08029f1bb7405e7b3aab8f606ff913447169ea9c281f00fbb5da08af8706f557b698a40ae4177663ecab6dfaf35ec54f3ac9ad06503dd4a9b1def097272a189fc301517113b3c010d3f7a7ef7980376eda9620b7bc2ac300256276ce40a83ef62ed3e3904223fa0a06da2e242cd2a", 0xc6}, {&(0x7f0000000bc0)="6424cf03e5a6edbb2b9924e281e49431f1e887eadadd483c8483344a926d0b63a781dd2cb2fa11f4b183a6047ff0af2c82687f3934cd52", 0x37}, {&(0x7f0000000c00)="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", 0xfb}, {&(0x7f0000000d00)="1ab74092c6d03d3cd551149a9aa40774ebcaf7dc7dae9071ce464d88ac8f3bee06cc68aa2253effe87be213bc073e7c994132d71cfe42b358b04b22b639af42ffc073d2677b04eb85a902dbaf9b9f1771965cef60d46db0584debf71e93a6991acb46d701de2d81ea68a156e40db2780c3d81ecdb654fe6629edfa6555147bbad6a990f2b856bcac63c8500baaebcf43828d18509eef051b9917b0000c1c64527f7f31bae39314f7318be1feebca6aed67d854c88cc2f879dd8adda25ed802926f3d4d", 0xc3}], 0x6, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x3c8}, 0x840) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x10, 0x1, 0x2, 0x6, 0x120, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@o_path={&(0x7f0000001180)='./file1/file3\x00', 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0x13, &(0x7f0000000e80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000f40)='syzkaller\x00', 0xa2, 0x37, &(0x7f0000000f80)=""/55, 0x896ee29e787f40fa, 0x18, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x5, 0x4}, 0x10, 0x0, r0, 0x2, &(0x7f0000001200)=[r5, r1, r1, r6, r2, r1], &(0x7f0000001240)=[{0x2, 0x3, 0x7a, 0x6}, {0x5, 0x2, 0x8, 0xa}], 0x10, 0x7}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.732854437s ago: executing program 3: creat(0x0, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs27+KJFUUB+BfVXdXdYNLa2KoDZsYuYHxsKOyOywYLIKZoKmJiGAgKFONookamRj4AptMIBgZD6IvIMIwBoJmIgZq4Fyp/jc1YySNqPB9QXHuufeccxuqwwr/b2U+SkbXkuO6rrbx/I9k+dLTSbtYrSebfH/ghQd37t5b3K+aXa5KfuqSetOnfzTJY7vGWWyiL8b58MHR+x99/FaTLt35cZJPky4p7fZqq9p80vzl0r9V2+b8u564tq52j16XhzNdRbeyectGq3TaPmre23v+ycHp8nYflPXQWXM5Pcnh1dN1jm+uo0l+vsikXuy2Nm/T7fX1rmqTUspk0Gb7L5gMpj315XfHWTbrndGgtnc2S147e/7JatADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nrKxWhzmkWlSJeN+9dkzVbc+NF5nnm3G6/Xvw6L9nByczt959/U6bx688s2rb39/9OP0lySj3Dp6qLTt7tzLaQdV46S+SPLobN/5Zdv2jReH6UWW+ermt4/Xo5Qyv8xPqv75edLluctaAAAAAAAAAAAAAAAAAAAA2NOdu/cW9+vZ9uv6epsvmSbVtQ/cy6+llMOU5kp2luTr81RJfkiphltNMr+RpP2gyWajS0q5Mf3nfhF/x58BAAD//++eW/s=") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x130, &(0x7f0000000080)=ANY=[@ANYBLOB="716255c47b46aaaaaaaaaabb86dd6000000000fa00000000005dca23e2000000000000000000ff0200000000000000000000000000018500"], 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0040, &(0x7f0000000000)={[{@data_writeback}, {@resgid={'resgid', 0x3d, 0xee00}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000000dc0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWNxB8tLT/k4EWjiQeNJnrAeKrbQpCFGloTIUTRA8Z4MCTejUcT/wJPejHqycSr3g2JMVxAT2tmZwbaZbf2x7Zb2M8nmfa9mdm+9503b/bNm90G0LNGsh9JxNaI+D0ihvPswh1G8l/Xr16o/nP1QjWJev2Nv5PGfteuXqgWf+LG67bkK+r1Ir+pRbmX3o6YrNWmzxb5sbnT743Nnjv/zMnTkyemT0yfmTh69NDBvQNHJg53JM4srmu7P5zZs+vlty6/Wj12+Z2fv83qu7XYXsbRSSP50W3p8U4X1mXb5qWTShcrwrJk7ZY1V3+j/w9HXwzd2DYcL33S1coBa6per9dbvT8XLtaBO1gS3a4B0B3lG312/1su6zT02BD+ej6/Acrivl4s+ZZKpMU+/U33t500GBHHLv77VbbEGs1DAADM9302/nm61fgvjfvm7XdX8Qxle0TcHRE7IuKeiNgZEfdGNPa9PyIeWGb5zU9Ibh3/pFdWFNgSZeO/54pnWwvHf+XoL7b3Fbltjfj7k+Mna9MHimOyP/o3ZfnxBS9Z6IcXf/uied3nxTT7yLzxX7Zk5ZdjwaIeVypNE3RTk3OTHQk+i//jiN2VVvEnUT7GSSJiV0TsXmEZJ5/8Zk+7bf8f/yI68Jyp/nXEE3n7X4ym+EtJ2+eT488emTg8Nhi16QNj5Vlxq19+vfR6u/JXFX8HZO2/ueX5n8ef3SMmgxGz586fajyvnV1+GZf++LSatNm2c4Xn/0DyZiM9UKz7YHJu7ux4xEDySpYdWrB+4uZry3y5fxb//n2t+/+O/PascSQejIjsJN4bEQ9FxMNF2z0SEY9GxL5F4v/phcfebbetffsvMivfQVn8U4u0f3bJy1I323/5ib5TP37Xrvz6ktr/UCO1v1izlOvfUiu4mmMHAAAAt4u08Rn4JB29kU7T0dH8M/w7Y3Nam5mde+r4zPtnpvLPym+P/rSc6RqeNx86XswNl/mJpvzBYt74y76hRn60OlOb6nbw0OO2tOn/mT/7ul07YM35vhb0Lv0fepf+D71L/4fepf9Djxpovfqj9a4H0BXLf/8fXJN6AOvP+B96l/4PvWvJ/d+FAu4kbb8bn67qK/+3a6KyMarRMjG0MapRJiLdENXoXOK1z/IusVHqUyYqjX9mkUbEGhWxqeWmbl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuO/AAAA//+oIeS9") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0, 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.604315468s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) 4.124223051s ago: executing program 4: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "b7"}, 0x0, 0x0, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.928482489s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x511, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 3.638929824s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/192, 0x20000057) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="23ce290501801aa70000ffffffffffff88a8000081000000080049000038000000000006900100003000ac1e000144040000440c0003000000020000000000000000a89ffd0bdf6c45a564d01936c9b3c93f80871ea9cfab00b7428fff9adb78ee"], 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c332027434420436170747572652053776974636827"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xbed, 0x3], [{0x10000, 0x0, 0x0, 0x1}], 0xc}) 3.268454924s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/192, 0x20000057) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="23ce290501801aa70000ffffffffffff88a8000081000000080049000038000000000006900100003000ac1e000144040000440c0003000000020000000000000000a89ffd0bdf6c45a564d01936c9b3c93f80871ea9cfab00b7428fff9adb78ee"], 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c332027434420436170747572652053776974636827"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r8, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xbed, 0x3], [{0x10000, 0x0, 0x0, 0x1}], 0xc}) ftruncate(r7, 0x2000009) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) 3.150009402s ago: executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@utf8}, {}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x0, 0x1, &(0x7f0000000180)='\x00', 0x1}) 2.625578422s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) recvmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1}}], 0x1, 0x2, 0x0) 2.518474048s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/192, 0x20000057) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="23ce290501801aa70000ffffffffffff88a8000081000000080049000038000000000006900100003000ac1e000144040000440c0003000000020000000000000000a89ffd0bdf6c45a564d01936c9b3c93f80871ea9cfab00b7428fff9adb78ee"], 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c332027434420436170747572652053776974636827"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r8, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xbed, 0x3], [{0x10000, 0x0, 0x0, 0x1}], 0xc}) ftruncate(r7, 0x2000009) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) 2.407391399s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/192, 0x20000057) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="23ce290501801aa70000ffffffffffff88a8000081000000080049000038000000000006900100003000ac1e000144040000440c0003000000020000000000000000a89ffd0bdf6c45a564d01936c9b3c93f80871ea9cfab00b7428fff9adb78ee"], 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c332027434420436170747572652053776974636827"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r8, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xbed, 0x3], [{0x10000, 0x0, 0x0, 0x1}], 0xc}) ftruncate(r7, 0x2000009) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) 2.241190737s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) 2.096132344s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000980)="000000c8320100"/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000d00)={0x230, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x230}}, 0x0) 1.949028892s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r0, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) 1.817877893s ago: executing program 1: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000100)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@compress_force}, {@nossd_spread}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x1f, 0x67, 0x37, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) (async) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000001c0), 0x2) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, &(0x7f00000000c0)=0x10000, 0x6, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x35, 0x0, "fd4e774e0f7cc8ba196d221230558161ad37e0ded15072b810a8ae11112cd0ab13e6b9fa08efdd93677c1b19fee75cb809252747680be8c480678c31768093f0d0cf5292de1a7505f7cc281300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x17, 0x0, "d86ac46a073843d9f8060941f3d77262614c3cd1ba8b023fc00414f10c2b7974289520ce79fef70f5a2483620aef97999c7e0f07caa2360fa1374ae1dea4978f54b437d900"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x17, 0x0, "d86ac46a073843d9f8060941f3d77262614c3cd1ba8b023fc00414f10c2b7974289520ce79fef70f5a2483620aef97999c7e0f07caa2360fa1374ae1dea4978f54b437d900"}, 0xd8) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000, 0x0, 0x0, 0x2}) 1.324192687s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0xfffffffe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{}, {0x0, 0x8000, 0x3, 0x0, 0x0, 0xff, 0x0, 0x3f, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x3}]}) socket$inet(0x2, 0x6, 0x2022d6) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) socketpair(0x18, 0x800, 0x10003, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000080)) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xe}, 0xfffffed4}, 0x1c) (async) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xe}, 0xfffffed4}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x2, 0x0) r6 = accept$inet(r4, 0x0, &(0x7f0000000380)) connect$inet(r6, &(0x7f00000003c0)={0x2, 0x4e23, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b041000e0ff030002004788aa96a13bb1000000000089060000", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000340)="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") (async) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000340)="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") 855.845869ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/192, 0x20000057) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="23ce290501801aa70000ffffffffffff88a8000081000000080049000038000000000006900100003000ac1e000144040000440c0003000000020000000000000000a89ffd0bdf6c45a564d01936c9b3c93f80871ea9cfab00b7428fff9adb78ee"], 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c332027434420436170747572652053776974636827"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r8, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xbed, 0x3], [{0x10000, 0x0, 0x0, 0x1}], 0xc}) ftruncate(r7, 0x2000009) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) 739.416022ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/192, 0x20000057) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="23ce290501801aa70000ffffffffffff88a8000081000000080049000038000000000006900100003000ac1e000144040000440c0003000000020000000000000000a89ffd0bdf6c45a564d01936c9b3c93f80871ea9cfab00b7428fff9adb78ee"], 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c332027434420436170747572652053776974636827"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xbed, 0x3], [{0x10000, 0x0, 0x0, 0x1}], 0xc}) 655.483499ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000140)=""/192, 0x20000057) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="23ce290501801aa70000ffffffffffff88a8000081000000080049000038000000000006900100003000ac1e000144040000440c0003000000020000000000000000a89ffd0bdf6c45a564d01936c9b3c93f80871ea9cfab00b7428fff9adb78ee"], 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c332027434420436170747572652053776974636827"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xbed, 0x3], [{0x10000, 0x0, 0x0, 0x1}], 0xc}) 356.60136ms ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x511, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 0s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(r0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000002a00090000000000000000000400002c08001700", @ANYRES32], 0x20}, 0x1, 0x3000000}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000c40)='./file1\x00', 0x810410, &(0x7f00000059c0)=ANY=[], 0x5, 0x1e2, &(0x7f00000006c0)="$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") preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000000740), 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0x810c9365, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0x9, &(0x7f0000002180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x23}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query]}, &(0x7f0000002200)='syzkaller\x00', 0x1, 0x0, &(0x7f0000002240), 0x40f00, 0x40, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$tun(r0, &(0x7f0000002080)=ANY=[@ANYBLOB="0000000ba7f0636f8b3916dd5740244d000000000000000000"], 0x19) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000022c0)={0x0, 0x9, 0x1, [0x7, 0x800, 0x6, 0x5, 0x6], [0x4, 0x7ff, 0x7, 0x7, 0x71, 0x8, 0x2, 0xfffffffffffff000, 0x4, 0xfffffffffffffff7, 0x8, 0x9, 0x0, 0xa67, 0xffffffff, 0xfffffffffffffffc, 0x7, 0x0, 0x8000000000000000, 0x5, 0x0, 0x3, 0x1, 0x8, 0x3, 0x3f, 0x7f, 0x9, 0x9, 0x2, 0x11, 0x2, 0x10001, 0x200, 0xba9, 0x7f, 0x8b43, 0x79, 0x1, 0x6, 0x7, 0x100000000, 0x10001, 0x7fffffffffffffff, 0x4, 0x2903, 0x81, 0x6, 0x2, 0x5b, 0x1, 0x7, 0x2, 0x1f, 0x9b28, 0x9, 0xffffffffffffffff, 0x1, 0x10000, 0x1, 0xfffffffffffffff7, 0x100000001, 0x0, 0x3, 0x4a, 0x0, 0x401, 0x40, 0x0, 0xc1df, 0xfffffffffffffffa, 0x2, 0x40, 0x8000000000000001, 0x4ba0, 0x0, 0x9, 0x1, 0x7fffffffffffffff, 0x7fffffff, 0x0, 0xffffffffffff60f6, 0x8, 0x0, 0x0, 0x8, 0x773, 0x7fffffff, 0x6, 0x7, 0x10000, 0x4, 0xaeaa, 0xa9, 0xfffffffffffff468, 0x7, 0x2, 0x5, 0x2, 0xb, 0x0, 0x0, 0x69c, 0x5f9e, 0x3f, 0xfffe00000, 0x2, 0x4000000000000000, 0x1000, 0x5bf, 0x8001, 0x0, 0x2, 0x4, 0x9, 0x33686e0300000, 0xfd49, 0x2, 0x6, 0x8, 0xffffffffffffff00]}) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000100)="5b6f19987b", 0x7ffff000}], 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002700)={r5, 0xfffffffffffffffb, 0x0, [0x5, 0x800000000000000, 0x3, 0xffffffffffffff81, 0x5], [0x4, 0x1, 0xfff, 0x5, 0x1, 0x2, 0x3, 0x1, 0x3, 0xfffffffffffffffa, 0x5, 0x8000000000000000, 0x3f, 0x2, 0x7fffffffffffffff, 0x9, 0x2, 0xffffffff, 0x80000000, 0x0, 0x7, 0x0, 0x7, 0x5, 0x209, 0x1, 0x5, 0x4, 0x6, 0x3, 0x4, 0x8, 0x7, 0x1, 0x3ffc0000000000, 0xd6, 0x81, 0x8, 0x3, 0x40, 0xe2f, 0x5, 0x8, 0x6, 0x60, 0x0, 0xffff0, 0x1, 0x9, 0x985, 0x9, 0x100000000, 0x101, 0x7, 0x0, 0x8000000000000001, 0x7, 0x7, 0x80, 0xf9, 0x1, 0x2, 0x0, 0x9, 0x5, 0x1, 0x6, 0x1, 0x8000, 0xcbd, 0x0, 0x10000000000, 0x0, 0x1f, 0x1, 0x2, 0x9, 0x1ff, 0x53cb, 0x3515, 0x7, 0x8001, 0x401, 0x4, 0xdd, 0x2, 0x288c, 0x545, 0x86, 0x0, 0x3, 0x100, 0x900, 0x8000, 0x100000001, 0x7fffffff, 0x5, 0x7fffffff, 0x200, 0x3, 0x8, 0xc9, 0x100, 0x4ebf, 0x2, 0x3, 0x9, 0x2000, 0x8000000000000001, 0xfffffffffffffffb, 0x8, 0x101, 0xf0d, 0x357, 0x35, 0x6, 0x2, 0x5, 0x1f, 0x1]}) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): oot:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 107.877468][ T5520] loop2: detected capacity change from 0 to 16 [ 107.887419][ T5520] erofs: Unknown parameter 'ÿÿÿÿ)|' [ 107.900310][ T5491] loop0: detected capacity change from 0 to 32768 [ 107.903300][ T5108] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.936438][ T5491] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 107.962719][ T5493] loop4: detected capacity change from 0 to 32768 [ 108.052275][ T5493] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 108.053574][ T5493] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.093533][ T5491] XFS (loop0): Ending clean mount [ 108.203953][ T5493] XFS (loop4): Ending clean mount [ 108.235733][ T5493] XFS (loop4): Quotacheck needed: Please wait. [ 108.261702][ T29] audit: type=1400 audit(1716902129.592:272): avc: denied { create } for pid=5541 comm="syz-executor.3" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.325318][ T5105] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 108.328617][ T29] audit: type=1400 audit(1716902129.592:273): avc: denied { ioctl } for pid=5541 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9415 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.398290][ T5493] XFS (loop4): Quotacheck: Done. [ 108.625375][ T29] audit: type=1400 audit(1716902129.952:274): avc: denied { map } for pid=5550 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.641789][ T5106] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.711918][ T29] audit: type=1400 audit(1716902129.952:275): avc: denied { read write } for pid=5550 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.973452][ T5555] bond0: (slave tunl0): Error: Device can not be enslaved while up [ 108.987758][ T29] audit: type=1400 audit(1716902130.322:276): avc: denied { create } for pid=5554 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.136581][ T5561] loop2: detected capacity change from 0 to 128 [ 109.167910][ T5561] ext4: Bad value for 'debug_want_extra_isize' [ 109.590362][ T5566] loop0: detected capacity change from 0 to 2048 [ 109.707124][ T5566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.245566][ T5567] loop4: detected capacity change from 0 to 512 [ 110.415162][ T5567] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 110.566752][ T29] audit: type=1400 audit(1716902131.902:277): avc: denied { write } for pid=5569 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.850557][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.867608][ T5574] loop0: detected capacity change from 0 to 2048 [ 110.876393][ T5581] loop2: detected capacity change from 0 to 16 [ 110.909489][ T5581] erofs: (device loop2): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 110.949846][ T5574] loop0: p3 < > p4 < > [ 110.954073][ T5574] loop0: partition table partially beyond EOD, truncated [ 110.987187][ T5574] loop0: p3 start 4284289 is beyond EOD, truncated [ 111.153186][ T5574] loop0: detected capacity change from 0 to 512 [ 111.170101][ T5574] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 111.842253][ T5589] syz-executor.0 (pid 5589) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 112.152470][ T5595] loop0: detected capacity change from 0 to 1024 [ 112.162952][ T5578] loop3: detected capacity change from 0 to 32768 [ 112.244388][ T5578] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 112.302187][ T5579] loop4: detected capacity change from 0 to 32768 [ 112.351834][ T5578] XFS (loop3): Ending clean mount [ 112.397722][ T5579] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 112.424927][ T5579] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.525250][ T5615] loop0: detected capacity change from 0 to 128 [ 112.583175][ T5615] ext4: Bad value for 'debug_want_extra_isize' [ 112.608154][ T5579] XFS (loop4): Ending clean mount [ 112.656286][ T5617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.657257][ T5579] XFS (loop4): Quotacheck needed: Please wait. [ 112.711476][ T5117] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 112.757706][ T5579] XFS (loop4): Quotacheck: Done. [ 112.874234][ T5106] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.883263][ T5619] loop2: detected capacity change from 0 to 512 [ 112.904343][ T5619] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 113.613745][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.646362][ T5623] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 113.679882][ T5631] loop2: detected capacity change from 0 to 2048 [ 113.703263][ T5630] loop0: detected capacity change from 0 to 16 [ 113.714383][ T5630] erofs: (device loop0): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 113.779177][ T5631] loop2: p3 < > p4 < > [ 113.810130][ T5631] loop2: partition table partially beyond EOD, truncated [ 113.912858][ T5634] loop4: detected capacity change from 0 to 2048 [ 114.013919][ T5634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.079227][ T5631] loop2: p3 start 4284289 is beyond EOD, truncated [ 115.019564][ T5631] loop2: detected capacity change from 0 to 512 [ 115.033367][ T5631] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 115.149611][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 115.149631][ T29] audit: type=1400 audit(1716902136.482:282): avc: denied { create } for pid=5644 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.215748][ T29] audit: type=1400 audit(1716902136.512:283): avc: denied { bind } for pid=5644 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.309684][ T29] audit: type=1400 audit(1716902136.542:284): avc: denied { listen } for pid=5644 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.374008][ T29] audit: type=1400 audit(1716902136.602:285): avc: denied { getopt } for pid=5644 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.464088][ T29] audit: type=1400 audit(1716902136.602:286): avc: denied { connect } for pid=5644 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.503457][ T29] audit: type=1400 audit(1716902136.612:287): avc: denied { listen } for pid=5644 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.576139][ T29] audit: type=1400 audit(1716902136.612:288): avc: denied { setopt } for pid=5644 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.639788][ T29] audit: type=1400 audit(1716902136.622:289): avc: denied { write } for pid=5644 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.707006][ T29] audit: type=1400 audit(1716902136.632:290): avc: denied { name_connect } for pid=5644 comm="syz-executor.4" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 115.776551][ T29] audit: type=1400 audit(1716902136.682:291): avc: denied { sqpoll } for pid=5644 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.925354][ T5647] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 116.551521][ T5643] loop3: detected capacity change from 0 to 32768 [ 116.682246][ T5643] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.044926][ T5643] XFS (loop3): Ending clean mount [ 117.092678][ T5643] XFS (loop3): Quotacheck needed: Please wait. [ 117.131018][ T5655] loop2: detected capacity change from 0 to 32768 [ 117.201848][ T5643] XFS (loop3): Quotacheck: Done. [ 117.211351][ T5655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5655) [ 117.268842][ T5655] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.293980][ T5655] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 117.314454][ T5660] loop0: detected capacity change from 0 to 32768 [ 117.328821][ T5655] BTRFS info (device loop2): using free-space-tree [ 117.372521][ T5660] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 117.430915][ T5117] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.578455][ T5660] XFS (loop0): Ending clean mount [ 117.702685][ T5662] loop4: detected capacity change from 0 to 32768 [ 117.719838][ T5655] BTRFS info (device loop2): rebuilding free space tree [ 117.786439][ T5662] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 117.798874][ T5105] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 117.820649][ T5662] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.071288][ T5662] XFS (loop4): Ending clean mount [ 118.112658][ T5662] XFS (loop4): Quotacheck needed: Please wait. [ 118.237446][ T5662] XFS (loop4): Quotacheck: Done. [ 118.378953][ T5704] loop3: detected capacity change from 0 to 512 [ 118.419493][ T5106] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.465682][ T5704] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 118.644628][ T5118] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.064545][ T5715] loop3: detected capacity change from 0 to 2048 [ 119.157092][ T5715] loop3: p3 < > p4 < > [ 119.165765][ T5718] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.181274][ T5715] loop3: partition table partially beyond EOD, truncated [ 119.198557][ T5715] loop3: p3 start 4284289 is beyond EOD, truncated [ 119.354010][ T5720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.355665][ T5714] loop3: detected capacity change from 0 to 512 [ 119.425291][ T5714] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 119.656140][ T5723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.711512][ T5723] loop4: detected capacity change from 0 to 16 [ 119.753004][ T5723] erofs: (device loop4): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 119.774814][ T5725] loop2: detected capacity change from 0 to 2048 [ 119.843651][ T5725] loop2: p3 < > p4 < > [ 119.855077][ T5725] loop2: partition table partially beyond EOD, truncated [ 119.871296][ T5725] loop2: p3 start 4284289 is beyond EOD, truncated [ 120.035796][ T5710] loop0: detected capacity change from 0 to 40427 [ 120.073610][ T5710] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.103884][ T5725] loop2: detected capacity change from 0 to 512 [ 120.125494][ T5725] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 120.193746][ T5710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.262429][ T5738] loop4: detected capacity change from 0 to 128 [ 120.274695][ T5738] ext4: Bad value for 'debug_want_extra_isize' [ 120.766779][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 120.766798][ T29] audit: type=1326 audit(1716902142.102:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564e7cee9 code=0x7ffc0000 [ 120.848239][ T29] audit: type=1326 audit(1716902142.102:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564e7cee9 code=0x7ffc0000 [ 120.935022][ T29] audit: type=1326 audit(1716902142.102:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb564e7cee9 code=0x7ffc0000 [ 121.008321][ T29] audit: type=1326 audit(1716902142.212:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564e7cee9 code=0x7ffc0000 [ 121.097698][ T29] audit: type=1326 audit(1716902142.212:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564e7cee9 code=0x7ffc0000 [ 121.132883][ T5751] loop3: detected capacity change from 0 to 512 [ 121.176307][ T5751] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 121.187453][ T29] audit: type=1326 audit(1716902142.212:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb564e7cee9 code=0x7ffc0000 [ 121.278281][ T29] audit: type=1326 audit(1716902142.212:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564e7cee9 code=0x7ffc0000 [ 121.344012][ T29] audit: type=1326 audit(1716902142.212:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb564e7a667 code=0x7ffc0000 [ 121.436011][ T29] audit: type=1326 audit(1716902142.212:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb564e40329 code=0x7ffc0000 [ 121.520064][ T29] audit: type=1326 audit(1716902142.212:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb564e7a667 code=0x7ffc0000 [ 121.528564][ T5755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.784822][ T5740] loop1: detected capacity change from 0 to 32768 [ 121.846356][ T5740] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 121.885569][ T5740] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.981982][ T5760] loop4: detected capacity change from 0 to 2048 [ 122.035360][ T5740] XFS (loop1): Ending clean mount [ 122.094993][ T5760] loop4: p3 < > p4 < > [ 122.107825][ T5740] XFS (loop1): Quotacheck needed: Please wait. [ 122.136176][ T5760] loop4: partition table partially beyond EOD, truncated [ 122.143398][ T5760] loop4: p3 start 4284289 is beyond EOD, truncated [ 122.173738][ T5740] XFS (loop1): Quotacheck: Done. [ 122.279927][ T5108] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.329041][ T5770] loop4: detected capacity change from 0 to 512 [ 122.345149][ T5770] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 122.584521][ T5749] loop0: detected capacity change from 0 to 32768 [ 122.619477][ T5749] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5749) [ 122.706018][ T5749] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 122.746141][ T5749] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 122.754875][ T5749] BTRFS info (device loop0): using free-space-tree [ 122.987811][ T5749] BTRFS info (device loop0): rebuilding free space tree [ 123.030610][ T5787] loop1: detected capacity change from 0 to 1024 [ 123.094096][ T5787] hfsplus: unable to parse mount options [ 123.151251][ T5758] loop3: detected capacity change from 0 to 32768 [ 123.203246][ T5758] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.470811][ T5105] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.518516][ T5758] XFS (loop3): Ending clean mount [ 123.916443][ T5758] XFS (loop3): Quotacheck needed: Please wait. [ 124.040179][ T5758] XFS (loop3): Quotacheck: Done. [ 124.438823][ T5117] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.835260][ T5808] loop0: detected capacity change from 0 to 512 [ 125.007189][ T5806] fuse: Unknown parameter 'ÿ6®' [ 125.192472][ T5789] loop4: detected capacity change from 0 to 40427 [ 125.282368][ T5789] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.458729][ T5822] loop3: detected capacity change from 0 to 512 [ 125.517331][ T5822] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 125.540658][ T5789] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.304513][ T5829] loop3: detected capacity change from 0 to 2048 [ 126.458289][ T5829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.361832][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 127.361854][ T29] audit: type=1400 audit(1716902148.692:478): avc: denied { mount } for pid=5830 comm="syz-executor.3" name="/" dev="hugetlbfs" ino=9933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 127.427546][ T29] audit: type=1400 audit(1716902148.732:479): avc: denied { write } for pid=5830 comm="syz-executor.3" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.482027][ T29] audit: type=1400 audit(1716902148.742:480): avc: denied { read write } for pid=5830 comm="syz-executor.3" name="radio4" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 127.592126][ T29] audit: type=1400 audit(1716902148.742:481): avc: denied { open } for pid=5830 comm="syz-executor.3" path="/dev/radio4" dev="devtmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 127.668623][ T29] audit: type=1400 audit(1716902148.752:482): avc: denied { ioctl } for pid=5830 comm="syz-executor.3" path="/dev/radio4" dev="devtmpfs" ino=899 ioctlcmd=0x5652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 127.683791][ T5836] loop4: detected capacity change from 0 to 2048 [ 127.744172][ T5824] loop1: detected capacity change from 0 to 32768 [ 127.767761][ T5821] loop0: detected capacity change from 0 to 32768 [ 127.797999][ T5824] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 127.815124][ T5824] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.834065][ T5836] loop4: p3 < > p4 < > [ 127.838629][ T5836] loop4: partition table partially beyond EOD, truncated [ 127.864679][ T5836] loop4: p3 start 4284289 is beyond EOD, truncated [ 127.952517][ T5824] XFS (loop1): Ending clean mount [ 127.997481][ T5824] XFS (loop1): Quotacheck needed: Please wait. [ 128.039551][ T5821] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 128.077960][ T5821] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 128.108955][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.125385][ T5824] XFS (loop1): Quotacheck: Done. [ 128.130598][ T5835] loop4: detected capacity change from 0 to 512 [ 128.137798][ T5852] loop3: detected capacity change from 0 to 16 [ 128.150169][ T5852] erofs: (device loop3): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 128.169280][ T5835] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 128.222570][ T5821] bcachefs (loop0): alloc_read... done [ 128.235711][ T5821] bcachefs (loop0): stripes_read... done [ 128.244296][ T5821] bcachefs (loop0): snapshots_read... done [ 128.250067][ T5108] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 128.261218][ T5821] bcachefs (loop0): journal_replay... done [ 128.270505][ T5821] bcachefs (loop0): resume_logged_ops... done [ 128.277254][ T5821] bcachefs (loop0): going read-write [ 128.330208][ T5821] bcachefs (loop0): done starting filesystem [ 128.465079][ T29] audit: type=1400 audit(1716902149.792:483): avc: denied { unmount } for pid=5105 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 128.533610][ T5105] bcachefs (loop0): shutting down [ 128.546476][ T5105] bcachefs (loop0): going read-only [ 128.552413][ T5105] bcachefs (loop0): finished waiting for writes to stop [ 128.625485][ T5105] bcachefs (loop0): flushing journal and stopping allocators, journal seq 7 [ 128.650620][ T5105] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 7 [ 128.689667][ T5105] bcachefs (loop0): shutdown complete, journal seq 8 [ 128.728673][ T5105] bcachefs (loop0): marking filesystem clean [ 128.873554][ T29] audit: type=1326 audit(1716902150.202:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2087cee9 code=0x7ffc0000 [ 128.927168][ T5105] bcachefs (loop0): shutdown complete [ 128.933260][ T29] audit: type=1326 audit(1716902150.202:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2087cee9 code=0x7ffc0000 [ 129.000388][ T29] audit: type=1326 audit(1716902150.202:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2087cee9 code=0x7ffc0000 [ 129.047435][ T29] audit: type=1326 audit(1716902150.232:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2087cee9 code=0x7ffc0000 [ 129.128091][ T5869] loop3: detected capacity change from 0 to 512 [ 129.238528][ T5866] fuse: Unknown parameter 'ÿ6®' [ 129.592990][ T5876] loop4: detected capacity change from 0 to 512 [ 129.623681][ T5876] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 130.156430][ T5885] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.283823][ T5892] loop4: detected capacity change from 0 to 1024 [ 130.318317][ T5892] hfsplus: unable to parse mount options [ 130.451174][ T5885] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.493013][ T5885] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.665547][ T5898] loop4: detected capacity change from 0 to 2048 [ 131.718884][ T5898] loop4: p3 < > p4 < > [ 131.729216][ T5875] loop3: detected capacity change from 0 to 32768 [ 131.735798][ T5898] loop4: partition table partially beyond EOD, truncated [ 131.751745][ T5898] loop4: p3 start 4284289 is beyond EOD, truncated [ 131.783059][ T5875] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.844098][ T5885] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.950824][ T5898] loop4: detected capacity change from 0 to 512 [ 131.982994][ T5898] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 132.004905][ T5875] XFS (loop3): Ending clean mount [ 132.020975][ T5875] XFS (loop3): Quotacheck needed: Please wait. [ 132.123150][ T5885] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.207110][ T5193] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.209593][ T5885] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.230831][ T5875] XFS (loop3): Quotacheck: Done. [ 132.251881][ T5885] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.339270][ T5885] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.367180][ T5893] loop1: detected capacity change from 0 to 32768 [ 132.431926][ T5893] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 132.448263][ T5193] usb 1-1: config index 0 descriptor too short (expected 63774, got 318) [ 132.457695][ T5893] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.513893][ T5193] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.514741][ T5117] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.535898][ T5193] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.545209][ T5193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.553374][ T5193] usb 1-1: Product: syz [ 132.557880][ T5193] usb 1-1: Manufacturer: syz [ 132.562582][ T5193] usb 1-1: SerialNumber: syz [ 132.576056][ T5893] XFS (loop1): Ending clean mount [ 132.590896][ T5193] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 132.603825][ T5893] XFS (loop1): Quotacheck needed: Please wait. [ 132.615434][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 132.615450][ T29] audit: type=1326 audit(1716902153.942:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc47cee9 code=0x7ffc0000 [ 132.650575][ T29] audit: type=1326 audit(1716902153.982:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc47cee9 code=0x7ffc0000 [ 132.679680][ T5922] loop2: detected capacity change from 0 to 1024 [ 132.696701][ T5922] hfsplus: unable to parse mount options [ 132.703516][ T29] audit: type=1326 audit(1716902153.982:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbbc47cee9 code=0x7ffc0000 [ 132.705443][ T5893] XFS (loop1): Quotacheck: Done. [ 132.733208][ T29] audit: type=1326 audit(1716902154.062:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc47cee9 code=0x7ffc0000 [ 132.897224][ T29] audit: type=1326 audit(1716902154.062:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc47cee9 code=0x7ffc0000 [ 132.999903][ T5193] usb 1-1: USB disconnect, device number 2 [ 133.015150][ T29] audit: type=1326 audit(1716902154.112:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbbc47cee9 code=0x7ffc0000 [ 133.129525][ T5108] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.147497][ T29] audit: type=1326 audit(1716902154.132:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc47cee9 code=0x7ffc0000 [ 133.182714][ T29] audit: type=1326 audit(1716902154.132:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbbc47a667 code=0x7ffc0000 [ 133.740080][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.758905][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.846486][ T29] audit: type=1326 audit(1716902154.132:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbbc440329 code=0x7ffc0000 [ 133.977124][ T29] audit: type=1326 audit(1716902154.132:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdbbc47cee9 code=0x7ffc0000 [ 134.149056][ T5934] loop3: detected capacity change from 0 to 512 [ 134.236488][ T5936] loop2: detected capacity change from 0 to 512 [ 134.251793][ T5932] fuse: Unknown parameter 'ÿ6®' [ 134.278604][ T5936] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 134.821713][ T5955] loop3: detected capacity change from 0 to 2048 [ 134.881112][ T5955] loop3: p3 < > p4 < > [ 134.885670][ T5955] loop3: partition table partially beyond EOD, truncated [ 134.893334][ T5955] loop3: p3 start 4284289 is beyond EOD, truncated [ 134.994777][ T5955] loop3: detected capacity change from 0 to 512 [ 135.020519][ T5955] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 135.554983][ T5968] loop0: detected capacity change from 0 to 1024 [ 135.578765][ T5968] hfsplus: unable to parse mount options [ 135.940531][ T5972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.008066][ T5974] loop2: detected capacity change from 0 to 2048 [ 136.769652][ T5974] loop2: p3 < > p4 < > [ 136.836501][ T5974] loop2: partition table partially beyond EOD, truncated [ 136.848519][ T5974] loop2: p3 start 4284289 is beyond EOD, truncated [ 136.922758][ T5972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.945741][ T5981] loop0: detected capacity change from 0 to 512 [ 137.071948][ T5978] fuse: Unknown parameter 'ÿ6®' [ 137.163302][ T5972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.354899][ T5972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.571013][ T5984] loop0: detected capacity change from 0 to 512 [ 137.601807][ T5972] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.624769][ T5984] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 137.672214][ T5972] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.741563][ T5972] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.792338][ T5972] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.963760][ T5988] loop0: detected capacity change from 0 to 256 [ 137.967865][ T5965] loop3: detected capacity change from 0 to 32768 [ 138.031638][ T5965] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 138.050986][ T5965] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.088015][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 138.088035][ T29] audit: type=1400 audit(1716902159.422:618): avc: denied { write } for pid=5987 comm="syz-executor.0" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.203352][ T5965] XFS (loop3): Ending clean mount [ 138.204451][ T29] audit: type=1400 audit(1716902159.422:619): avc: denied { add_name } for pid=5987 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.244185][ T29] audit: type=1400 audit(1716902159.422:620): avc: denied { create } for pid=5987 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 138.271977][ T29] audit: type=1400 audit(1716902159.422:621): avc: denied { associate } for pid=5987 comm="syz-executor.0" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 138.274220][ T5965] XFS (loop3): Quotacheck needed: Please wait. [ 138.301578][ T29] audit: type=1400 audit(1716902159.522:622): avc: denied { write open } for pid=5987 comm="syz-executor.0" path=2F726F6F742F73797A6B616C6C65722D74657374646972313235303537383730332F73797A6B616C6C65722E36594F7A736B2F33392FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.336865][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.352679][ T29] audit: type=1400 audit(1716902159.572:623): avc: denied { read } for pid=5987 comm="syz-executor.0" name="bus" dev="loop0" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.382448][ T29] audit: type=1804 audit(1716902159.572:624): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972313235303537383730332F73797A6B616C6C65722E36594F7A736B2F33392FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048596 res=1 errno=0 [ 138.416243][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.445889][ T29] audit: type=1804 audit(1716902159.632:625): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972313235303537383730332F73797A6B616C6C65722E36594F7A736B2F33392FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048596 res=1 errno=0 [ 138.479699][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.503599][ T5965] XFS (loop3): Quotacheck: Done. [ 138.509315][ T29] audit: type=1400 audit(1716902159.782:626): avc: denied { create } for pid=5987 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.558475][ T5117] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.578994][ T29] audit: type=1400 audit(1716902159.782:627): avc: denied { ioctl } for pid=5987 comm="syz-executor.0" path="socket:[10578]" dev="sockfs" ino=10578 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.596662][ T5986] loop2: detected capacity change from 0 to 32768 [ 138.603989][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.669501][ T5986] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 138.714708][ T5986] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.807368][ T5986] XFS (loop2): Ending clean mount [ 138.840862][ T5986] XFS (loop2): Quotacheck needed: Please wait. [ 138.903070][ T6011] loop1: detected capacity change from 0 to 2048 [ 138.961241][ T5986] XFS (loop2): Quotacheck: Done. [ 139.002237][ T6011] loop1: p3 < > p4 < > [ 139.009564][ T6011] loop1: partition table partially beyond EOD, truncated [ 139.030720][ T6011] loop1: p3 start 4284289 is beyond EOD, truncated [ 139.238721][ T6006] loop1: detected capacity change from 0 to 512 [ 139.272803][ T5118] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.288893][ T6006] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 140.025400][ T6031] loop3: detected capacity change from 0 to 512 [ 140.138803][ T6027] fuse: Unknown parameter 'ÿ6®' [ 140.370011][ T6035] loop2: detected capacity change from 0 to 2048 [ 140.447899][ T6035] loop2: p3 < > p4 < > [ 140.456264][ T6035] loop2: partition table partially beyond EOD, truncated [ 140.496411][ T6035] loop2: p3 start 4284289 is beyond EOD, truncated [ 140.557916][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.580293][ T6038] loop0: detected capacity change from 0 to 512 [ 140.621794][ T6040] loop3: detected capacity change from 0 to 1024 [ 140.634012][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.646573][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.655261][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.663006][ T6038] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 140.677049][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.687070][ T5120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.694553][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.787777][ T6033] loop2: detected capacity change from 0 to 512 [ 140.856269][ T6033] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 141.177275][ T6041] chnl_net:caif_netlink_parms(): no params data found [ 141.530547][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.545282][ T6057] loop2: detected capacity change from 0 to 512 [ 141.567684][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.589226][ T6057] EXT4-fs: Ignoring removed oldalloc option [ 141.609092][ T6041] bridge_slave_0: entered allmulticast mode [ 141.644141][ T6041] bridge_slave_0: entered promiscuous mode [ 141.655060][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.663614][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.670920][ T6041] bridge_slave_1: entered allmulticast mode [ 141.678832][ T6041] bridge_slave_1: entered promiscuous mode [ 141.849335][ T6060] loop4: detected capacity change from 0 to 2048 [ 141.931496][ T6060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.580350][ T6041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.634587][ T6057] EXT4-fs (loop2): Test dummy encryption mode enabled [ 142.689260][ T6041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.711145][ T6057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8040e01c, mo2=0002] [ 142.756341][ T5116] Bluetooth: hci2: command tx timeout [ 142.769940][ T6057] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 142.810479][ T6057] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 142.911539][ T6057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.970534][ T6041] team0: Port device team_slave_0 added [ 142.987034][ T6041] team0: Port device team_slave_1 added [ 143.048592][ T6057] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.125660][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.138511][ T6078] loop0: detected capacity change from 0 to 512 [ 143.142735][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.147303][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.182680][ T6076] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 143.192730][ T6076] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 143.236120][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 143.236139][ T29] audit: type=1326 audit(1716902164.562:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 143.271667][ T6074] fuse: Unknown parameter 'ÿ6®' [ 143.278221][ T6041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.324877][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.336207][ T29] audit: type=1326 audit(1716902164.562:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 143.351457][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.398135][ T29] audit: type=1326 audit(1716902164.572:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 143.398933][ T6049] loop3: detected capacity change from 0 to 32768 [ 143.442717][ T6041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.496175][ T29] audit: type=1326 audit(1716902164.572:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 143.522447][ T6049] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 143.631288][ T6049] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.642185][ T29] audit: type=1326 audit(1716902164.572:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 143.743210][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.862094][ T6041] hsr_slave_0: entered promiscuous mode [ 143.876080][ T29] audit: type=1326 audit(1716902164.572:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 143.909508][ T6049] XFS (loop3): Ending clean mount [ 143.930763][ T6041] hsr_slave_1: entered promiscuous mode [ 143.942846][ T6088] loop2: detected capacity change from 0 to 1024 [ 143.942915][ T6049] XFS (loop3): Quotacheck needed: Please wait. [ 143.967928][ T6093] loop0: detected capacity change from 0 to 512 [ 143.979531][ T29] audit: type=1326 audit(1716902164.592:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 144.013294][ T6041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.022093][ T6093] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 144.050625][ T29] audit: type=1326 audit(1716902164.592:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 144.102864][ T29] audit: type=1326 audit(1716902164.602:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 144.131529][ T6041] Cannot create hsr debugfs directory [ 144.213391][ T29] audit: type=1326 audit(1716902164.642:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 144.282079][ T6049] XFS (loop3): Quotacheck: Done. [ 144.439902][ T5117] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 144.838788][ T5116] Bluetooth: hci2: command tx timeout [ 144.993896][ T2886] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.171646][ T6112] overlayfs: failed to resolve 'uid>00000000000000000000': -2 [ 145.210290][ T2886] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.313490][ T6120] loop4: detected capacity change from 0 to 1024 [ 145.315153][ T2886] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.333571][ T6122] loop2: detected capacity change from 0 to 512 [ 145.347320][ T6120] hfsplus: extend alloc file! (8192,65536,366) [ 145.374778][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.413023][ T2886] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.421286][ T6124] loop0: detected capacity change from 0 to 1024 [ 145.433312][ T6117] fuse: Unknown parameter 'ÿ6®' [ 145.488889][ T6125] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1848784024 (3697568048 ns) > initial count (1997261054 ns). Using initial count to start timer. [ 145.851361][ T6132] loop2: detected capacity change from 0 to 512 [ 145.891604][ T2886] bridge_slave_1: left allmulticast mode [ 145.915491][ T6132] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 145.924329][ T2886] bridge_slave_1: left promiscuous mode [ 145.951783][ T2886] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.007159][ T2886] bridge_slave_0: left allmulticast mode [ 146.022266][ T2886] bridge_slave_0: left promiscuous mode [ 146.050662][ T2886] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.060723][ T6137] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 146.093554][ T6137] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 146.148792][ T6139] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 146.220371][ T6139] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 146.672988][ T6151] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 146.705358][ T6151] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 146.917221][ T5116] Bluetooth: hci2: command tx timeout [ 147.661175][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.757931][ T6157] loop0: detected capacity change from 0 to 1024 [ 148.168332][ T6166] loop0: detected capacity change from 0 to 512 [ 148.205099][ T2886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.242454][ T2886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.272706][ T2886] bond0 (unregistering): Released all slaves [ 148.282005][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 148.282025][ T29] audit: type=1326 audit(1716902169.612:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 148.326292][ T29] audit: type=1326 audit(1716902169.632:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 148.339008][ T6164] fuse: Unknown parameter 'ÿ6®' [ 148.356292][ T29] audit: type=1326 audit(1716902169.662:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 148.384348][ T29] audit: type=1326 audit(1716902169.662:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 148.413763][ T29] audit: type=1326 audit(1716902169.662:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 148.521893][ T29] audit: type=1326 audit(1716902169.662:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 148.581132][ T29] audit: type=1326 audit(1716902169.662:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 148.635895][ T29] audit: type=1326 audit(1716902169.672:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 148.692372][ T6171] loop2: detected capacity change from 0 to 512 [ 148.737003][ T29] audit: type=1326 audit(1716902169.702:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 148.796554][ T29] audit: type=1326 audit(1716902169.702:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6163 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 148.860103][ T6171] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 148.996157][ T5116] Bluetooth: hci2: command tx timeout [ 149.136486][ T6183] loop4: detected capacity change from 0 to 47 [ 149.226707][ T6184] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 149.252639][ T6184] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 149.427668][ T2886] hsr_slave_0: left promiscuous mode [ 149.464642][ T2886] hsr_slave_1: left promiscuous mode [ 149.559000][ T2886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.567284][ T2886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.598377][ T2886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.598417][ T2886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.648597][ T6192] loop2: detected capacity change from 0 to 256 [ 149.707493][ T2886] veth1_macvtap: left promiscuous mode [ 149.707803][ T2886] veth0_macvtap: left promiscuous mode [ 149.708064][ T2886] veth1_vlan: left promiscuous mode [ 149.708409][ T2886] veth0_vlan: left promiscuous mode [ 151.233227][ T6208] loop0: detected capacity change from 0 to 512 [ 151.462887][ T6206] fuse: Unknown parameter 'ÿ6®' [ 151.558934][ T2886] team0 (unregistering): Port device team_slave_1 removed [ 151.717515][ T2886] team0 (unregistering): Port device team_slave_0 removed [ 151.722702][ T6200] loop2: detected capacity change from 0 to 32768 [ 151.749419][ T6200] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6200) [ 151.850724][ T6200] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.871107][ T6200] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 151.898899][ T6200] BTRFS info (device loop2): using free-space-tree [ 152.007961][ T6222] loop4: detected capacity change from 0 to 512 [ 152.026758][ T6222] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 152.877403][ T5118] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.226024][ T6258] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 153.235916][ T6258] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 153.452676][ T6262] loop0: detected capacity change from 0 to 2048 [ 153.727783][ T6268] loop3: detected capacity change from 0 to 512 [ 153.749996][ T6271] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.778480][ T6268] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 153.890913][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 153.890932][ T29] audit: type=1400 audit(1716902175.222:1360): avc: denied { append } for pid=6261 comm="syz-executor.0" path="/root/syzkaller-testdir1250578703/syzkaller.6YOzsk/61/file0/pids.current" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.981603][ T6271] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 154.017119][ T6271] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 154.061926][ T6041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.070934][ T6271] Remounting filesystem read-only [ 154.081934][ T11] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 154.109843][ T11] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 154.139813][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.143644][ T6041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.173160][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.199685][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.228408][ T11] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 154.238850][ T6041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.243288][ T11] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 154.280995][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.302692][ T6274] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 154.317181][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.357958][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.384105][ T6041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 154.416060][ T29] audit: type=1326 audit(1716902175.742:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 154.429287][ T5105] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 154.444063][ T29] audit: type=1326 audit(1716902175.742:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 154.498200][ T29] audit: type=1400 audit(1716902175.822:1363): avc: denied { bind } for pid=6273 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.525209][ T5105] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 154.534952][ T5105] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 154.566139][ T5105] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 154.596401][ T29] audit: type=1326 audit(1716902175.822:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 154.623742][ T5105] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 154.649615][ T5105] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 154.683723][ T5105] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 154.715991][ T5105] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 154.723335][ T5105] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.732378][ T29] audit: type=1326 audit(1716902175.822:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 154.776927][ T5105] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.785831][ T5105] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.820592][ T29] audit: type=1326 audit(1716902175.822:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 154.859048][ T5105] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 154.876356][ T5105] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 154.884353][ T5105] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.900455][ T5105] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.915463][ T5105] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.950451][ T5105] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 154.950478][ T5105] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 154.950496][ T5105] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 154.950512][ T5105] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 154.950530][ T5105] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.950554][ T5105] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 154.950572][ T5105] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.950590][ T5105] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.950610][ T5105] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 154.950627][ T5105] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 154.951110][ T29] audit: type=1400 audit(1716902175.842:1367): avc: denied { create } for pid=6273 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 154.951176][ T29] audit: type=1326 audit(1716902175.862:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 154.951238][ T29] audit: type=1326 audit(1716902175.862:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 155.350320][ T6285] loop4: detected capacity change from 0 to 2048 [ 156.541262][ T6041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.548858][ T6285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.591772][ T6041] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.605893][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.606170][ T5188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.678017][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.801138][ T5188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.390008][ T6303] loop2: detected capacity change from 0 to 512 [ 157.420374][ T6303] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 157.450606][ T6308] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 157.463227][ T6308] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 157.667049][ T6309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.813446][ T6041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.010738][ T6315] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 158.018609][ T6315] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 158.045444][ T6309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.214471][ T6316] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.471912][ T6309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.742663][ T6309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.909625][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 158.909639][ T29] audit: type=1326 audit(1716902180.232:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbbc47a667 code=0x7ffc0000 [ 159.071212][ T29] audit: type=1326 audit(1716902180.282:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbbc440329 code=0x7ffc0000 [ 159.135376][ T6309] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.206157][ T29] audit: type=1326 audit(1716902180.282:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbbc47a667 code=0x7ffc0000 [ 159.239456][ T6309] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.293435][ T29] audit: type=1326 audit(1716902180.282:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbbc440329 code=0x7ffc0000 [ 159.320731][ T6041] veth0_vlan: entered promiscuous mode [ 159.352951][ T6309] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.361718][ T29] audit: type=1326 audit(1716902180.282:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbbc47a667 code=0x7ffc0000 [ 159.440521][ T6309] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.465547][ T6041] veth1_vlan: entered promiscuous mode [ 159.489091][ T29] audit: type=1326 audit(1716902180.282:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbbc440329 code=0x7ffc0000 [ 159.556631][ T29] audit: type=1326 audit(1716902180.282:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbbc47a667 code=0x7ffc0000 [ 159.682683][ T6041] veth0_macvtap: entered promiscuous mode [ 159.753612][ T6041] veth1_macvtap: entered promiscuous mode [ 159.821361][ T29] audit: type=1326 audit(1716902180.282:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbbc440329 code=0x7ffc0000 [ 159.868398][ T29] audit: type=1326 audit(1716902180.282:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbbc47a667 code=0x7ffc0000 [ 159.900978][ T29] audit: type=1326 audit(1716902180.302:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbbc440329 code=0x7ffc0000 [ 159.905419][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.072193][ T6328] loop0: detected capacity change from 0 to 2048 [ 160.262017][ T6328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.302140][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.676377][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.719517][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.775601][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.830870][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.886733][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.951972][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.991208][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.082582][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.101442][ T6336] loop3: detected capacity change from 0 to 512 [ 161.107848][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.120523][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.131576][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.141758][ T6336] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 161.150344][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.183042][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.208896][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.235122][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.254045][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.272918][ T6041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.307573][ T6041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.327434][ T6041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.340480][ T6041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.593713][ T6347] loop3: detected capacity change from 0 to 512 [ 161.623452][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.643035][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.713182][ T6322] loop2: detected capacity change from 0 to 40427 [ 161.727650][ T6345] fuse: Unknown parameter 'ÿ6®' [ 161.738908][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.745441][ T6322] F2FS-fs (loop2): Unrecognized mount option "prj{quotA=-v" or missing value [ 161.760084][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.072567][ T6350] syz-executor.1[6350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.072770][ T6350] syz-executor.1[6350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.405765][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.545812][ T6360] loop0: detected capacity change from 0 to 1024 [ 162.788633][ T6359] hfsplus: catalog searching failed [ 162.805161][ T6343] loop4: detected capacity change from 0 to 32768 [ 162.854383][ T6343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6343) [ 162.879899][ T6359] libceph: resolve ' [ 162.879899][ T6359] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 162.879899][ T6359] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 162.956566][ T6343] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.975406][ T6343] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 163.023686][ T6343] BTRFS info (device loop4): using free-space-tree [ 163.121188][ T165] hfsplus: b-tree write err: -5, ino 4 [ 163.128603][ T6373] loop2: detected capacity change from 0 to 512 [ 163.145229][ T6373] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 163.318618][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.329060][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.337703][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.360371][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.378441][ T5106] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.392833][ T5120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.401064][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.587810][ T6397] loop2: detected capacity change from 0 to 512 [ 163.752797][ T6395] fuse: Unknown parameter 'ÿ6®' [ 163.941580][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 163.941599][ T29] audit: type=1326 audit(1716902185.272:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 164.045631][ T29] audit: type=1326 audit(1716902185.272:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 164.119598][ T29] audit: type=1326 audit(1716902185.272:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 164.184403][ T6389] chnl_net:caif_netlink_parms(): no params data found [ 164.195913][ T29] audit: type=1326 audit(1716902185.272:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 164.276182][ T29] audit: type=1326 audit(1716902185.272:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 164.285553][ T6403] syz-executor.1[6403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.350768][ T6403] syz-executor.1[6403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.369674][ T29] audit: type=1326 audit(1716902185.272:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 164.486139][ T29] audit: type=1326 audit(1716902185.272:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 164.510639][ T29] audit: type=1326 audit(1716902185.282:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 164.535283][ T29] audit: type=1326 audit(1716902185.432:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 164.563806][ T29] audit: type=1326 audit(1716902185.432:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 164.659979][ T6390] loop0: detected capacity change from 0 to 40427 [ 164.669916][ T6390] F2FS-fs (loop0): Unrecognized mount option "prj{quotA=-v" or missing value [ 164.688622][ T6410] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 164.696242][ T6410] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 164.791700][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.805143][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.831341][ T6389] bridge_slave_0: entered allmulticast mode [ 164.866958][ T6389] bridge_slave_0: entered promiscuous mode [ 164.902847][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.930342][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.965400][ T6389] bridge_slave_1: entered allmulticast mode [ 164.999542][ T6389] bridge_slave_1: entered promiscuous mode [ 165.210633][ T6389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.301117][ T6389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.477003][ T5116] Bluetooth: hci3: command tx timeout [ 165.559161][ T6389] team0: Port device team_slave_0 added [ 165.586573][ T6389] team0: Port device team_slave_1 added [ 165.745802][ T6426] loop0: detected capacity change from 0 to 1024 [ 165.810697][ T6426] hfsplus: request for non-existent node 1056964608 in B*Tree [ 165.831453][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.834058][ T6426] hfsplus: request for non-existent node 1056964608 in B*Tree [ 165.854456][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.867273][ T6429] loop4: detected capacity change from 0 to 512 [ 165.901729][ T6389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.924624][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.934322][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.967597][ T6429] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 165.970754][ T6389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.033506][ T6413] loop2: detected capacity change from 0 to 40427 [ 166.050874][ T6413] F2FS-fs (loop2): Unrecognized mount option "prj{quotA=-v" or missing value [ 166.184021][ T6389] hsr_slave_0: entered promiscuous mode [ 166.201607][ T6389] hsr_slave_1: entered promiscuous mode [ 166.397229][ T6436] fuse: Unknown parameter 'ÿ6®' [ 166.568418][ T165] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.705629][ T165] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.765882][ T6441] loop2: detected capacity change from 0 to 1024 [ 166.801478][ T165] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.810938][ T6441] hfsplus: request for non-existent node 1056964608 in B*Tree [ 166.837320][ T6441] hfsplus: request for non-existent node 1056964608 in B*Tree [ 166.948303][ T165] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.307188][ T6457] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 167.320675][ T6460] loop4: detected capacity change from 0 to 512 [ 167.333950][ T6457] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 167.345136][ T6460] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 167.422355][ T165] bridge_slave_1: left allmulticast mode [ 167.438544][ T165] bridge_slave_1: left promiscuous mode [ 167.451600][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.473762][ T165] bridge_slave_0: left allmulticast mode [ 167.495599][ T165] bridge_slave_0: left promiscuous mode [ 167.505363][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.556066][ T5116] Bluetooth: hci3: command tx timeout [ 167.676044][ T6465] 9pnet_virtio: no channels available for device [ 167.743335][ T6465] netlink: 696 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.795426][ T6470] loop1: detected capacity change from 0 to 512 [ 167.895123][ T6466] fuse: Unknown parameter 'ÿ6®' [ 168.289168][ T6474] loop1: detected capacity change from 0 to 2048 [ 168.332627][ T6474] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 168.363490][ T6474] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 168.421807][ T6474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.673442][ T6474] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 168.790053][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.834693][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.868290][ T165] bond0 (unregistering): Released all slaves [ 168.902297][ T6483] loop0: detected capacity change from 0 to 1024 [ 169.040038][ T6485] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 169.265849][ T6499] loop0: detected capacity change from 0 to 512 [ 169.316924][ T6499] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 169.351889][ T6505] loop2: detected capacity change from 0 to 512 [ 169.478562][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 169.478581][ T29] audit: type=1326 audit(1716902190.812:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 169.516133][ T6501] fuse: Unknown parameter 'ÿ6®' [ 169.577591][ T6506] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 169.595189][ T6506] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 169.606812][ T29] audit: type=1326 audit(1716902190.842:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 169.632072][ T29] audit: type=1326 audit(1716902190.842:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 169.666180][ T5116] Bluetooth: hci3: command tx timeout [ 169.725911][ T29] audit: type=1326 audit(1716902190.842:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 169.754751][ T29] audit: type=1326 audit(1716902190.842:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 169.780006][ T29] audit: type=1326 audit(1716902190.842:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 169.808230][ T29] audit: type=1326 audit(1716902190.842:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 169.834772][ T29] audit: type=1326 audit(1716902190.842:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 169.871670][ T29] audit: type=1326 audit(1716902190.852:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 169.933958][ T29] audit: type=1326 audit(1716902190.862:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6500 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f34c927cee9 code=0x7ffc0000 [ 170.260729][ T165] hsr_slave_0: left promiscuous mode [ 170.285273][ T165] hsr_slave_1: left promiscuous mode [ 170.288681][ T6513] 9pnet_virtio: no channels available for device [ 170.314083][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.318106][ T6513] netlink: 696 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.328941][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.406219][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.425761][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.520424][ T165] veth1_macvtap: left promiscuous mode [ 170.563548][ T165] veth0_macvtap: left promiscuous mode [ 170.606729][ T165] veth1_vlan: left promiscuous mode [ 170.612224][ T165] veth0_vlan: left promiscuous mode [ 170.655513][ T6521] loop1: detected capacity change from 0 to 2048 [ 170.712008][ T6521] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 170.724519][ T6522] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 170.733316][ T6522] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 170.740986][ T6521] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 170.804704][ T6521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.080242][ T6527] loop0: detected capacity change from 0 to 512 [ 171.112406][ T6521] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 171.217952][ T6524] fuse: Unknown parameter 'ÿ6®' [ 171.284486][ T6532] loop2: detected capacity change from 0 to 512 [ 171.413794][ T6529] fuse: Unknown parameter 'ÿ6®' [ 171.719994][ T5116] Bluetooth: hci3: command tx timeout [ 171.921701][ T6548] loop4: detected capacity change from 0 to 256 [ 171.953873][ T6548] exfat: Deprecated parameter 'utf8' [ 172.008563][ T6548] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 172.642516][ T165] team0 (unregistering): Port device team_slave_1 removed [ 172.713103][ T165] team0 (unregistering): Port device team_slave_0 removed [ 174.022543][ T6564] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 174.053118][ T6564] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 174.123201][ T6566] loop2: detected capacity change from 0 to 2048 [ 174.185185][ T6566] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 174.224693][ T6566] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 174.251003][ T6566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.548873][ T6566] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 174.577056][ T6561] loop1: detected capacity change from 0 to 32768 [ 174.907929][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 174.907949][ T29] audit: type=1400 audit(1716902196.232:2300): avc: denied { write } for pid=6560 comm="syz-executor.1" name="file0" dev="loop1" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.972182][ T29] audit: type=1804 audit(1716902196.272:2301): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3499983048/syzkaller.Ic0eGR/19/file0/file0/file0" dev="loop1" ino=33 res=1 errno=0 [ 175.026186][ T29] audit: type=1400 audit(1716902196.342:2302): avc: denied { map } for pid=6560 comm="syz-executor.1" path="/root/syzkaller-testdir3499983048/syzkaller.Ic0eGR/19/file0/file0/file0" dev="loop1" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.054532][ T29] audit: type=1400 audit(1716902196.342:2303): avc: denied { ioctl } for pid=6560 comm="syz-executor.1" path="/root/syzkaller-testdir3499983048/syzkaller.Ic0eGR/19/file0/file0/file0" dev="loop1" ino=33 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.344356][ T6571] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 175.369937][ T6571] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 175.663866][ T6389] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.713385][ T6389] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.757804][ T6389] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.838677][ T6389] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.354763][ T6389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.433593][ T165] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.496683][ T6584] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 176.508236][ T6584] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 176.690457][ T165] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.818765][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.837219][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.844432][ T6389] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.854618][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.873655][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.882091][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 176.891540][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.997637][ T165] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.131231][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.138452][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.177083][ T6593] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 177.184519][ T6593] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 177.279874][ T165] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.468928][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.476093][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.222950][ T165] bridge_slave_1: left allmulticast mode [ 178.226618][ T6600] 9pnet_virtio: no channels available for device [ 178.228689][ T165] bridge_slave_1: left promiscuous mode [ 178.241767][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.262607][ T165] bridge_slave_0: left allmulticast mode [ 178.266134][ T6600] netlink: 696 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.268509][ T165] bridge_slave_0: left promiscuous mode [ 178.285618][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.301548][ T29] audit: type=1326 audit(1716902199.632:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 178.349538][ T29] audit: type=1326 audit(1716902199.632:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 178.435064][ T29] audit: type=1326 audit(1716902199.632:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 178.467068][ T29] audit: type=1326 audit(1716902199.632:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 178.504113][ T29] audit: type=1326 audit(1716902199.662:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 178.531148][ T29] audit: type=1326 audit(1716902199.672:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 178.637572][ T6607] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 178.681486][ T6607] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 178.753741][ T6610] loop0: detected capacity change from 0 to 512 [ 178.788469][ T6610] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 178.998092][ T5116] Bluetooth: hci0: command tx timeout [ 179.017768][ T6615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.119978][ T6615] loop0: detected capacity change from 0 to 1024 [ 179.551184][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.566567][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.582956][ T165] bond0 (unregistering): Released all slaves [ 179.821209][ T6625] cgroup: fork rejected by pids controller in /syz2 [ 180.018476][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 180.018496][ T29] audit: type=1326 audit(1716902201.352:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 180.116039][ T29] audit: type=1326 audit(1716902201.392:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 180.183920][ T29] audit: type=1326 audit(1716902201.392:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 180.252251][ T29] audit: type=1326 audit(1716902201.392:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 180.323079][ T29] audit: type=1326 audit(1716902201.392:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 180.360164][ T6637] loop0: detected capacity change from 0 to 256 [ 180.374837][ T29] audit: type=1326 audit(1716902201.412:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 180.439567][ T29] audit: type=1326 audit(1716902201.412:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 180.474901][ T165] hsr_slave_0: left promiscuous mode [ 180.485782][ T165] hsr_slave_1: left promiscuous mode [ 180.502985][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.514098][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.523296][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.526712][ T29] audit: type=1326 audit(1716902201.412:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c5b87a667 code=0x7ffc0000 [ 180.531063][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.583723][ T165] veth1_macvtap: left promiscuous mode [ 180.589356][ T165] veth0_macvtap: left promiscuous mode [ 180.595088][ T165] veth1_vlan: left promiscuous mode [ 180.600617][ T165] veth0_vlan: left promiscuous mode [ 180.668743][ T29] audit: type=1326 audit(1716902201.412:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c5b840329 code=0x7ffc0000 [ 180.728646][ T29] audit: type=1326 audit(1716902201.412:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 181.076287][ T5116] Bluetooth: hci0: command tx timeout [ 181.269701][ T6641] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 181.290586][ T6641] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 181.637644][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.650854][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.667104][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.677041][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.699224][ T5120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 181.715020][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.891806][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.931684][ T6650] loop1: detected capacity change from 0 to 16 [ 181.957535][ T6650] erofs: (device loop1): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 182.278257][ T165] team0 (unregistering): Port device team_slave_1 removed [ 182.334515][ T165] team0 (unregistering): Port device team_slave_0 removed [ 182.959958][ T6389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.004922][ T6589] chnl_net:caif_netlink_parms(): no params data found [ 183.110486][ T6655] loop0: detected capacity change from 0 to 32768 [ 183.128141][ T6655] xfs: Unknown parameter 'mask' [ 183.169939][ T5120] Bluetooth: hci0: command tx timeout [ 183.383733][ T6663] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 183.432817][ T6663] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 183.593929][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.607061][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.614516][ T6589] bridge_slave_0: entered allmulticast mode [ 183.640455][ T6589] bridge_slave_0: entered promiscuous mode [ 183.670944][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.684989][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.711413][ T6589] bridge_slave_1: entered allmulticast mode [ 183.728591][ T6589] bridge_slave_1: entered promiscuous mode [ 183.797399][ T5120] Bluetooth: hci4: command tx timeout [ 183.840548][ T6666] loop0: detected capacity change from 0 to 2048 [ 183.864856][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.985669][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.001917][ T6666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.060094][ T6666] ext4 filesystem being mounted at /root/syzkaller-testdir1250578703/syzkaller.6YOzsk/97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.213054][ T6589] team0: Port device team_slave_0 added [ 184.232005][ T6589] team0: Port device team_slave_1 added [ 184.278624][ T5105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.303852][ T6389] veth0_vlan: entered promiscuous mode [ 184.525668][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.537544][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.570915][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.605650][ T165] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.639016][ T6645] chnl_net:caif_netlink_parms(): no params data found [ 184.663157][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.685025][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.712549][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.739209][ T6389] veth1_vlan: entered promiscuous mode [ 184.760088][ T165] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.865426][ T165] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.896637][ T6680] loop1: detected capacity change from 0 to 256 [ 184.986362][ T165] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.014021][ T6589] hsr_slave_0: entered promiscuous mode [ 185.022077][ T6589] hsr_slave_1: entered promiscuous mode [ 185.029401][ T6589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.039085][ T6589] Cannot create hsr debugfs directory [ 185.197039][ T6685] loop0: detected capacity change from 0 to 256 [ 185.236395][ T5120] Bluetooth: hci0: command tx timeout [ 185.253094][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.260542][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.276266][ T6645] bridge_slave_0: entered allmulticast mode [ 185.284206][ T6645] bridge_slave_0: entered promiscuous mode [ 185.315386][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 185.315405][ T29] audit: type=1804 audit(1716902206.642:2391): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972313235303537383730332F73797A6B616C6C65722E36594F7A736B2F39392FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048613 res=1 errno=0 [ 185.360131][ T6389] veth0_macvtap: entered promiscuous mode [ 185.404968][ T29] audit: type=1804 audit(1716902206.712:2392): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972313235303537383730332F73797A6B616C6C65722E36594F7A736B2F39392FE91F7189591E9233614B2F6275732F627573 dev="loop0" ino=1048613 res=1 errno=0 [ 185.453935][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.470848][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.500146][ T6645] bridge_slave_1: entered allmulticast mode [ 185.509835][ T6645] bridge_slave_1: entered promiscuous mode [ 185.628205][ T6690] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 185.640635][ T6690] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 185.683497][ T6389] veth1_macvtap: entered promiscuous mode [ 185.724532][ T165] bridge_slave_1: left allmulticast mode [ 185.730966][ T165] bridge_slave_1: left promiscuous mode [ 185.742212][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.755114][ T165] bridge_slave_0: left allmulticast mode [ 185.764538][ T165] bridge_slave_0: left promiscuous mode [ 185.771133][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.839027][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.876234][ T5120] Bluetooth: hci4: command tx timeout [ 185.893483][ T6695] loop0: detected capacity change from 0 to 16 [ 185.918054][ T6695] erofs: (device loop0): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 186.663001][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.679113][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.691644][ T165] bond0 (unregistering): Released all slaves [ 186.806727][ T29] audit: type=1400 audit(1716902208.132:2393): avc: denied { write } for pid=6701 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.819338][ T6702] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.841018][ T29] audit: type=1400 audit(1716902208.132:2394): avc: denied { nlmsg_write } for pid=6701 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.929894][ T6645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.974118][ T6704] loop1: detected capacity change from 0 to 256 [ 187.054039][ T6645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.056896][ T29] audit: type=1804 audit(1716902208.382:2395): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333439393938333034382F73797A6B616C6C65722E4963306547522F33342FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048615 res=1 errno=0 [ 187.140610][ T29] audit: type=1804 audit(1716902208.442:2396): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972333439393938333034382F73797A6B616C6C65722E4963306547522F33342FE91F7189591E9233614B2F6275732F627573 dev="loop1" ino=1048615 res=1 errno=0 [ 187.205612][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.210365][ T29] audit: type=1326 audit(1716902208.442:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 187.244486][ T29] audit: type=1326 audit(1716902208.442:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 187.275327][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.285751][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.296485][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.306437][ T29] audit: type=1326 audit(1716902208.442:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 187.331121][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.341628][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.353119][ T29] audit: type=1326 audit(1716902208.442:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5b87cee9 code=0x7ffc0000 [ 187.371602][ T6710] fuse: Bad value for 'rootmode' [ 187.380347][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.395576][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.406952][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.417095][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.434552][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.444438][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.455082][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.468598][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.647659][ T6645] team0: Port device team_slave_0 added [ 187.691445][ T6645] team0: Port device team_slave_1 added [ 187.719912][ T6719] loop0: detected capacity change from 0 to 256 [ 187.729389][ T6389] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.740467][ T6389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.752778][ T6389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.761805][ T6389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.835083][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.843401][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.873911][ T6645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.922329][ T165] hsr_slave_0: left promiscuous mode [ 187.932330][ T165] hsr_slave_1: left promiscuous mode [ 187.938544][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.946494][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.956290][ T5120] Bluetooth: hci4: command tx timeout [ 187.965359][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.982626][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.015683][ T165] veth1_macvtap: left promiscuous mode [ 188.021321][ T165] veth0_macvtap: left promiscuous mode [ 188.036220][ T165] veth1_vlan: left promiscuous mode [ 188.041568][ T165] veth0_vlan: left promiscuous mode [ 188.215017][ T6723] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 188.227409][ T6723] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 189.119539][ T165] team0 (unregistering): Port device team_slave_1 removed [ 189.190275][ T165] team0 (unregistering): Port device team_slave_0 removed [ 189.658983][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.666519][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.693014][ T6645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.725689][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.745006][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.997509][ T6645] hsr_slave_0: entered promiscuous mode [ 190.027112][ T6645] hsr_slave_1: entered promiscuous mode [ 190.036198][ T5120] Bluetooth: hci4: command tx timeout [ 190.050856][ T6645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.063200][ T6741] loop0: detected capacity change from 0 to 256 [ 190.088236][ T6645] Cannot create hsr debugfs directory [ 190.341171][ T6745] fuse: Bad value for 'rootmode' [ 190.374818][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.383177][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.390752][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 190.390768][ T29] audit: type=1804 audit(1716902211.722:2443): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3499983048/syzkaller.Ic0eGR/41/file0" dev="sda1" ino=1947 res=1 errno=0 [ 190.503913][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.506806][ T6589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.512010][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.577398][ T6589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.653994][ T6589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.672099][ T6589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.718198][ T29] audit: type=1400 audit(1716902212.052:2444): avc: denied { connect } for pid=6748 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.769738][ T29] audit: type=1400 audit(1716902212.102:2445): avc: denied { getopt } for pid=6748 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.809453][ T29] audit: type=1400 audit(1716902212.132:2446): avc: denied { write } for pid=6748 comm="syz-executor.3" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 190.909192][ T6757] loop1: detected capacity change from 0 to 16 [ 190.921488][ T29] audit: type=1400 audit(1716902212.132:2447): avc: denied { open } for pid=6748 comm="syz-executor.3" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 190.934315][ T6757] erofs: (device loop1): mounted with root inode @ nid 36. [ 191.001917][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.016450][ T5116] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 191.047512][ T6757] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 191.063222][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.072067][ T29] audit: type=1800 audit(1716902212.392:2448): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 191.115255][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.122528][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.141524][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.148661][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.244314][ T6589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.382228][ T6759] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 191.585078][ T6759] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 191.639600][ T6645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.685893][ T6645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.704949][ T6764] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 191.719307][ T6764] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 191.825303][ T6645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.864767][ T6645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.905852][ T6769] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 192.014518][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.049037][ T6769] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 192.223161][ T6645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.321787][ T6645] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.383044][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.390282][ T5193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.523560][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.530728][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.031274][ T29] audit: type=1326 audit(1716902214.362:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d927cee9 code=0x7ffc0000 [ 193.153329][ T29] audit: type=1326 audit(1716902214.372:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d927cee9 code=0x7ffc0000 [ 193.215602][ T29] audit: type=1326 audit(1716902214.372:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76d927cee9 code=0x7ffc0000 [ 193.275906][ T29] audit: type=1326 audit(1716902214.432:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d927cee9 code=0x7ffc0000 [ 193.339734][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.451939][ T6645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.510065][ T6589] veth0_vlan: entered promiscuous mode [ 193.594127][ T6589] veth1_vlan: entered promiscuous mode [ 193.720050][ T6645] veth0_vlan: entered promiscuous mode [ 193.820785][ T6645] veth1_vlan: entered promiscuous mode [ 193.859917][ T6589] veth0_macvtap: entered promiscuous mode [ 193.922171][ T6589] veth1_macvtap: entered promiscuous mode [ 193.997830][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.012707][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.033593][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.054141][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.065716][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.076898][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.098781][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.160124][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.187831][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.205016][ T6804] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 194.212604][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.212629][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.212649][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.212666][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.266941][ T6804] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 194.277219][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.303927][ T6645] veth0_macvtap: entered promiscuous mode [ 194.322504][ T6589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.342092][ T6589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.354418][ T6589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.379302][ T6589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.433640][ T6645] veth1_macvtap: entered promiscuous mode [ 194.667031][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.712223][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.764151][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.770697][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.803629][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.819133][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.832780][ T6790] loop0: detected capacity change from 0 to 40427 [ 194.840460][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.862287][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.885173][ T6790] F2FS-fs (loop0): invalid crc value [ 194.885204][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.905647][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.922220][ T6790] F2FS-fs (loop0): Found nat_bits in checkpoint [ 194.926433][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.952508][ T6808] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 194.972441][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.027348][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.067601][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.086027][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.101767][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.120687][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.132520][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.148255][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.174747][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.286363][ T6645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.303634][ T6790] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 195.327380][ T6645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.353630][ T6814] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 195.362998][ T6645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.378360][ T6645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.386035][ T6814] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 195.631166][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.654127][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.719684][ T6818] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 195.733578][ T6818] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 195.916236][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.924098][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.124931][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.216062][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.356796][ T6821] loop4: detected capacity change from 0 to 256 [ 196.371897][ T6821] exfat: Deprecated parameter 'utf8' [ 196.394745][ T2860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.411378][ T2860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.460425][ T6821] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 196.496105][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 196.496125][ T29] audit: type=1326 audit(1716902217.812:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c07cee9 code=0x7ffc0000 [ 196.613714][ T29] audit: type=1326 audit(1716902217.822:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157c07cee9 code=0x7ffc0000 [ 196.729605][ T29] audit: type=1326 audit(1716902217.892:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c07cee9 code=0x7ffc0000 [ 196.827446][ T29] audit: type=1326 audit(1716902217.892:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c07cee9 code=0x7ffc0000 [ 196.923746][ T29] audit: type=1326 audit(1716902217.902:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157c07cee9 code=0x7ffc0000 [ 196.963776][ T6826] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 196.975913][ T6826] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 196.990024][ T29] audit: type=1326 audit(1716902217.902:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157c07cee9 code=0x7ffc0000 [ 197.131279][ T29] audit: type=1326 audit(1716902217.912:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f157c07a667 code=0x7ffc0000 [ 197.201695][ T29] audit: type=1326 audit(1716902217.912:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f157c040329 code=0x7ffc0000 [ 197.285638][ T29] audit: type=1326 audit(1716902217.912:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f157c07a667 code=0x7ffc0000 [ 197.426280][ T29] audit: type=1326 audit(1716902217.912:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f157c040329 code=0x7ffc0000 [ 197.529387][ T6833] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 197.561553][ T6833] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 197.784646][ T6835] loop3: detected capacity change from 0 to 2048 [ 197.879634][ T6835] loop3: p3 < > p4 < > [ 197.902074][ T6835] loop3: partition table partially beyond EOD, truncated [ 197.936787][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.988618][ T6835] loop3: p3 start 4284289 is beyond EOD, truncated [ 198.376212][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.610121][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.722751][ T6844] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 198.840236][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.900073][ T6846] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 198.913094][ T6844] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 198.926424][ T6846] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 198.931500][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.959232][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.975477][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.058218][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.078667][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.100451][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.127341][ T6853] loop3: detected capacity change from 0 to 256 [ 199.138749][ T6853] exfat: Deprecated parameter 'utf8' [ 199.160902][ T6854] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 199.168506][ T6854] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 199.233290][ T6853] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 199.349145][ T6844] siw: device registration error -19 [ 199.642324][ T11] bridge_slave_1: left allmulticast mode [ 199.672250][ T11] bridge_slave_1: left promiscuous mode [ 199.678087][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.699100][ T11] bridge_slave_0: left allmulticast mode [ 199.712880][ T11] bridge_slave_0: left promiscuous mode [ 199.740991][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.892154][ T6860] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 199.902407][ T6860] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 200.863533][ T6872] Zero length message leads to an empty skb [ 200.940579][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.962438][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.988440][ T11] bond0 (unregistering): Released all slaves [ 201.026422][ T6868] loop1: detected capacity change from 0 to 32768 [ 201.037886][ T6868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6868) [ 201.056904][ T6868] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.102463][ T6868] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 201.122513][ T6868] BTRFS info (device loop1): using free-space-tree [ 201.157260][ T5116] Bluetooth: hci0: command tx timeout [ 201.449818][ T6895] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 201.457588][ T6895] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 201.639761][ T6897] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 201.654442][ T6041] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.673256][ T6897] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 202.236302][ T6893] ================================================================== [ 202.244397][ T6893] BUG: KASAN: slab-use-after-free in bpf_link_free+0x28d/0x320 [ 202.251960][ T6893] Read of size 8 at addr ffff88802e731410 by task syz-executor.2/6893 [ 202.260111][ T6893] [ 202.262437][ T6893] CPU: 0 PID: 6893 Comm: syz-executor.2 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 202.272854][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 202.282910][ T6893] Call Trace: [ 202.286186][ T6893] [ 202.289113][ T6893] dump_stack_lvl+0x116/0x1f0 [ 202.293825][ T6893] print_report+0xc3/0x620 [ 202.298264][ T6893] ? __virt_addr_valid+0x5e/0x580 [ 202.303303][ T6893] ? __phys_addr+0xc6/0x150 [ 202.307826][ T6893] kasan_report+0xd9/0x110 [ 202.312263][ T6893] ? bpf_link_free+0x28d/0x320 [ 202.317039][ T6893] ? bpf_link_free+0x28d/0x320 [ 202.321816][ T6893] bpf_link_free+0x28d/0x320 [ 202.326420][ T6893] ? __pfx_bpf_link_release+0x10/0x10 [ 202.331901][ T6893] bpf_link_release+0x63/0x80 [ 202.336591][ T6893] __fput+0x408/0xbb0 [ 202.340584][ T6893] __fput_sync+0x47/0x50 [ 202.344866][ T6893] __x64_sys_close+0x86/0x100 [ 202.349563][ T6893] do_syscall_64+0xcd/0x250 [ 202.354079][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.359990][ T6893] RIP: 0033:0x7f479747bdda [ 202.364433][ T6893] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 202.384148][ T6893] RSP: 002b:00007ffe2ac62b50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 202.392566][ T6893] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f479747bdda [ 202.400544][ T6893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 202.408517][ T6893] RBP: 00007f47975b5980 R08: 0000001b33020000 R09: 00007f479828f080 [ 202.416492][ T6893] R10: 0000000000000cd0 R11: 0000000000000293 R12: 000000000003157d [ 202.424473][ T6893] R13: 00007f47975b405c R14: 0000000000000032 R15: 00007f47975b5980 [ 202.432466][ T6893] [ 202.436360][ T6893] [ 202.438689][ T6893] Allocated by task 6894: [ 202.443011][ T6893] kasan_save_stack+0x33/0x60 [ 202.447758][ T6893] kasan_save_track+0x14/0x30 [ 202.452449][ T6893] __kasan_kmalloc+0xaa/0xb0 [ 202.457053][ T6893] bpf_raw_tp_link_attach+0x18b/0x640 [ 202.462689][ T6893] __sys_bpf+0x3a5/0x49a0 [ 202.467021][ T6893] __x64_sys_bpf+0x78/0xc0 [ 202.471441][ T6893] do_syscall_64+0xcd/0x250 [ 202.475956][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.481858][ T6893] [ 202.484175][ T6893] Freed by task 5162: [ 202.488148][ T6893] kasan_save_stack+0x33/0x60 [ 202.492842][ T6893] kasan_save_track+0x14/0x30 [ 202.497532][ T6893] kasan_save_free_info+0x3b/0x60 [ 202.502651][ T6893] poison_slab_object+0xf7/0x160 [ 202.507596][ T6893] __kasan_slab_free+0x32/0x50 [ 202.512367][ T6893] kfree+0x12a/0x3b0 [ 202.516271][ T6893] rcu_core+0x828/0x16b0 [ 202.520529][ T6893] handle_softirqs+0x216/0x8f0 [ 202.525298][ T6893] irq_exit_rcu+0xbb/0x120 [ 202.529729][ T6893] sysvec_apic_timer_interrupt+0x95/0xb0 [ 202.535378][ T6893] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.541370][ T6893] [ 202.543688][ T6893] Last potentially related work creation: [ 202.549397][ T6893] kasan_save_stack+0x33/0x60 [ 202.554174][ T6893] __kasan_record_aux_stack+0xba/0xd0 [ 202.559551][ T6893] __call_rcu_common.constprop.0+0x9a/0x790 [ 202.565456][ T6893] bpf_link_free+0x26a/0x320 [ 202.570052][ T6893] bpf_link_release+0x63/0x80 [ 202.574733][ T6893] __fput+0x408/0xbb0 [ 202.578715][ T6893] __fput_sync+0x47/0x50 [ 202.582956][ T6893] __x64_sys_close+0x86/0x100 [ 202.587636][ T6893] do_syscall_64+0xcd/0x250 [ 202.592139][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.598038][ T6893] [ 202.600353][ T6893] The buggy address belongs to the object at ffff88802e731400 [ 202.600353][ T6893] which belongs to the cache kmalloc-128 of size 128 [ 202.614404][ T6893] The buggy address is located 16 bytes inside of [ 202.614404][ T6893] freed 128-byte region [ffff88802e731400, ffff88802e731480) [ 202.628116][ T6893] [ 202.630447][ T6893] The buggy address belongs to the physical page: [ 202.636878][ T6893] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e731 [ 202.645643][ T6893] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 202.653186][ T6893] page_type: 0xffffefff(slab) [ 202.657876][ T6893] raw: 00fff00000000000 ffff888015441a00 0000000000000000 dead000000000001 [ 202.666487][ T6893] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 202.675061][ T6893] page dumped because: kasan: bad access detected [ 202.681475][ T6893] page_owner tracks the page as allocated [ 202.687181][ T6893] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5118, tgid 5118 (syz-executor.2), ts 77739077967, free_ts 77668729924 [ 202.706647][ T6893] post_alloc_hook+0x2d1/0x350 [ 202.711422][ T6893] get_page_from_freelist+0x136a/0x2df0 [ 202.716980][ T6893] __alloc_pages_noprof+0x22b/0x2460 [ 202.722283][ T6893] alloc_slab_page+0x56/0x110 [ 202.727024][ T6893] new_slab+0x84/0x260 [ 202.731730][ T6893] ___slab_alloc+0xdac/0x1870 [ 202.736510][ T6893] __slab_alloc.constprop.0+0x56/0xb0 [ 202.741903][ T6893] kmalloc_trace_noprof+0x2b4/0x300 [ 202.747334][ T6893] __hw_addr_add_ex+0x3c8/0x7c0 [ 202.752374][ T6893] dev_mc_add+0xb6/0x110 [ 202.756623][ T6893] igmp6_group_added+0x395/0x480 [ 202.761580][ T6893] __ipv6_dev_mc_inc+0x72a/0xc50 [ 202.766518][ T6893] ipv6_add_dev+0xa66/0x1400 [ 202.771110][ T6893] addrconf_notify+0x546/0x19e0 [ 202.775971][ T6893] notifier_call_chain+0xb9/0x410 [ 202.781002][ T6893] call_netdevice_notifiers_info+0xbe/0x140 [ 202.786901][ T6893] page last free pid 5117 tgid 5117 stack trace: [ 202.793221][ T6893] free_unref_page+0x64a/0xe40 [ 202.797991][ T6893] __put_partials+0x14c/0x170 [ 202.802678][ T6893] qlist_free_all+0x4e/0x140 [ 202.807274][ T6893] kasan_quarantine_reduce+0x192/0x1e0 [ 202.812745][ T6893] __kasan_slab_alloc+0x69/0x90 [ 202.817606][ T6893] kmalloc_trace_noprof+0x11e/0x300 [ 202.822901][ T6893] nbp_vlan_init+0x164/0x500 [ 202.827752][ T6893] br_add_if+0xfdf/0x1b80 [ 202.832085][ T6893] do_set_master+0x1bc/0x230 [ 202.836700][ T6893] do_setlink+0xcaf/0x3ff0 [ 202.841126][ T6893] __rtnl_newlink+0xc35/0x1960 [ 202.845976][ T6893] rtnl_newlink+0x67/0xa0 [ 202.850331][ T6893] rtnetlink_rcv_msg+0x3c7/0xe60 [ 202.855452][ T6893] netlink_rcv_skb+0x16b/0x440 [ 202.860223][ T6893] netlink_unicast+0x542/0x820 [ 202.864986][ T6893] netlink_sendmsg+0x8b8/0xd70 [ 202.869760][ T6893] [ 202.872076][ T6893] Memory state around the buggy address: [ 202.877701][ T6893] ffff88802e731300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.885757][ T6893] ffff88802e731380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.893816][ T6893] >ffff88802e731400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.901873][ T6893] ^ [ 202.906453][ T6893] ffff88802e731480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.914509][ T6893] ffff88802e731500: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 202.922568][ T6893] ================================================================== 2024/05/28 13:17:04 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 203.145589][ T6893] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.152824][ T6893] CPU: 1 PID: 6893 Comm: syz-executor.2 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 [ 203.163254][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 203.173313][ T6893] Call Trace: [ 203.176592][ T6893] [ 203.179532][ T6893] dump_stack_lvl+0x3d/0x1f0 [ 203.184139][ T6893] panic+0x6f5/0x7a0 [ 203.188066][ T6893] ? __pfx_panic+0x10/0x10 [ 203.192512][ T6893] ? irqentry_exit+0x3b/0x90 [ 203.197124][ T6893] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.202350][ T6893] ? preempt_schedule_thunk+0x1a/0x30 [ 203.207730][ T6893] ? preempt_schedule_common+0x44/0xc0 [ 203.213206][ T6893] ? check_panic_on_warn+0x1f/0xb0 [ 203.218421][ T6893] check_panic_on_warn+0xab/0xb0 [ 203.223373][ T6893] end_report+0x117/0x180 [ 203.227722][ T6893] kasan_report+0xe9/0x110 [ 203.232151][ T6893] ? bpf_link_free+0x28d/0x320 [ 203.236924][ T6893] ? bpf_link_free+0x28d/0x320 [ 203.241700][ T6893] bpf_link_free+0x28d/0x320 [ 203.246306][ T6893] ? __pfx_bpf_link_release+0x10/0x10 [ 203.251699][ T6893] bpf_link_release+0x63/0x80 [ 203.256387][ T6893] __fput+0x408/0xbb0 [ 203.260375][ T6893] __fput_sync+0x47/0x50 [ 203.264618][ T6893] __x64_sys_close+0x86/0x100 [ 203.269304][ T6893] do_syscall_64+0xcd/0x250 [ 203.273815][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.279717][ T6893] RIP: 0033:0x7f479747bdda [ 203.284135][ T6893] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 203.303748][ T6893] RSP: 002b:00007ffe2ac62b50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 203.312168][ T6893] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f479747bdda [ 203.320142][ T6893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 203.328115][ T6893] RBP: 00007f47975b5980 R08: 0000001b33020000 R09: 00007f479828f080 [ 203.336089][ T6893] R10: 0000000000000cd0 R11: 0000000000000293 R12: 000000000003157d [ 203.344062][ T6893] R13: 00007f47975b405c R14: 0000000000000032 R15: 00007f47975b5980 [ 203.352063][ T6893] [ 203.355192][ T6893] Kernel Offset: disabled [ 203.359508][ T6893] Rebooting in 86400 seconds..