last executing test programs: 11m9.356014785s ago: executing program 32 (id=69): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x9, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) 10m13.090607269s ago: executing program 33 (id=2149): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(0x4) 9m49.636592611s ago: executing program 34 (id=2944): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd06, 0x4}, 0x6057, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x1000}, 0x10) syz_clone(0x61804400, 0x0, 0x0, 0x0, 0x0, 0x0) 9m15.286093043s ago: executing program 35 (id=4062): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000240)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000100, 0x0) 8m31.222333563s ago: executing program 36 (id=5576): socket$can_j1939(0x1d, 0x2, 0x7) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 8m20.318054331s ago: executing program 37 (id=5835): r0 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x1000, 0x5, 0x2d2}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r1 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 8m19.087921674s ago: executing program 38 (id=5858): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x61) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) close(0x3) 7m57.968285497s ago: executing program 39 (id=6214): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x582, &(0x7f00000000c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x27) 7m21.536509581s ago: executing program 40 (id=6923): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x8719470d9569919, 0x0, 0x7ffc, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x9}) close(0x3) 6m38.09225789s ago: executing program 41 (id=8539): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9d", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c1551", 0xc6}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m32.808597206s ago: executing program 42 (id=10558): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4176, &(0x7f0000000180)={0x0, 0xa415, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f00000000c0), &(0x7f0000001080), &(0x7f0000000000)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 5m7.259214183s ago: executing program 43 (id=10924): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x9a, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a00000000641100fe8000000000000000000000000000aaff0200000000000000000000000000014e1d4e20006490"], 0x0) 4m42.426626125s ago: executing program 44 (id=11579): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 4m19.902343877s ago: executing program 45 (id=12065): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$eJzs3E9sVMUfAPDv27a05c+P/hBRELWIxkZiCwWFg4nBaOJBEyMm6rFpC0EKNbQkQtAsicGjIfFuPHrw4sGreiHGk4lXPJoYEmK4ACbGNW/3vd3tdrely7YL9vNJtjszb9+bmZ03b+fNdDeAdWs4/ZNUwtciYmtEFBpfMFx5un3z4uSdmxcno1gqHfszKe92K41nssPEpiwyUogofJrUNtSZO3/h1MTMzPTZLD42f/rDsbnzF54/OZClHDly6OCBwy+Ov7DySjXJL63XrV2fzO7e+fr7V96c7M3T89zq69EpwzHcrChlz3Q6sy7bUhdOertYEFYkPf/T5uor9/+t0RNLNV5xDUsGrLZSqVTqb725WGp0aVEK8MBKotslALoj/6BP73/zR7OBwIbVGX503Y2jlRugtN63s0fEk+XEfB6kr+H+tpOGI+K94l9fpo+4u3mIbwqrVBYAYH344Wg+EmwY/w1VVkb+Pnf15fT5f9kaylBE/D8itkXEQxGxPSIejogdEfFIRDzacPyeiCgtkX/jbHM1/+ogp3C9Q1VtKh3/vZStbdXGfwsKMNSTxbZE5APm6f3ZezISff3HT85MH1gijx9f/fXzVtvqx3/pI80/Hwtm5bje2zBBNzUxP9F2hRvcuBSxq7ex/klvRFJtmyQidkbErhUcd6gufPK5r3dXI30LX7d8/ctKTdfROrDOVPoq4tlK+xdjQfvXckwWrE+enjgxfWL6zHh1fXJsIGam94+lZ8H+pnn8/Mvlt1rlv2z9v/u9cZfXDn9/LOtZ9y5t/41153/k67e1+g8lEUl1vXZu5Xlc/u2zlvc07Z7/G5J3yuH8vvSjifn5swciNiRvLE4fr+2bx9PnKFbqP7K3ef/flu2TvhOPRUR6Ej8eEU9E5Q4xLfueiHgqIvYuUf+fXnn6g/brv7rS+k81XP8qLb+g/Wvr9a0CSbY2WEkZrN/Uc2rPtTstLh531/6HyqGRLGXx9S8tYbLgEtGqpPmnXZryT0feQQAAALj/FSJic91c0uYoFEZHK3NA22NjYWZ2bn7f8dlzZ6bSbRFD0VfIZ7oq88F9ST7/OVQXH2+IH8zmjb/oGSzHRydnZ6a6WnNgU7nPJ4XRiHd76vp/6o/OTDED9zPf14L1a6n+nw7id1xZw8IAa+ruP/+vfryqBQHWXF3/b/UN/2Ib//cFPADc/wM1y//Qj2sGPPhK+jKsayvq//v8CCD8l/TG29WwH5eB9cX4H9alZb/Xf0+BUn/zTQOx+MUxsPQBe6K9Ygw2yasrgXRk1ZXcB9vZK/81hZavicLKDtgfnWnT49WUS22dvcWzcyd2dPzkL2X/K9/pFvx2Tfpps0BXLkcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd928AAAD//0ly4GI=") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000002ac0)=""/4112, 0x100000000}], 0x1, 0x8000, 0x9, 0x1b) 4m4.599378558s ago: executing program 46 (id=12070): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000240)='proc\x00', 0x189, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 4m0.697041174s ago: executing program 47 (id=12110): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fstatfs(r0, 0x0) 3m57.219956424s ago: executing program 48 (id=12141): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x52}, @IPSET_ATTR_PORT={0x0, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x1}]}, 0x1d}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 2m52.22889939s ago: executing program 49 (id=13915): r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x22020600) sendfile(r1, r1, 0x0, 0x400000000000000) 2m15.632687951s ago: executing program 50 (id=14840): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x37}}], 0x18}, 0x8050) 2m13.384638519s ago: executing program 51 (id=14904): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/104, 0x5f}}], 0x4000008, 0x40012041, 0x0) 2m11.937274489s ago: executing program 52 (id=14934): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) 2m3.56602189s ago: executing program 53 (id=15067): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 1m18.102142498s ago: executing program 54 (id=16114): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000080)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0x2ffdf, 0x4) 1m14.835533462s ago: executing program 4 (id=16153): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 1m14.763447954s ago: executing program 4 (id=16154): pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x4}, 0xb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x40000009}) write$P9_RFSYNC(r1, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) 1m14.731801575s ago: executing program 4 (id=16155): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 1m14.524884762s ago: executing program 4 (id=16158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="01800900062b2c7ffe80000000000000dc8b850f238466ccfff5d4a2c6ef189dce676e911b51818462b4003a00000036", 0x30}], 0x1}, 0x0) 1m14.524636732s ago: executing program 4 (id=16159): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m14.490641514s ago: executing program 4 (id=16160): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x18, 0x0, @val=@netfilter={0x2, 0x1, 0x4}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) 1m13.052949523s ago: executing program 2 (id=16182): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x5b1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844) write(r0, &(0x7f00000001c0)='+', 0x1) recvfrom(r0, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) 1m12.385877777s ago: executing program 2 (id=16190): close(0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1m12.340115318s ago: executing program 55 (id=16190): close(0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1m1.502298535s ago: executing program 0 (id=16360): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 1m1.393044898s ago: executing program 0 (id=16361): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40000, 0x0) 1m1.308975691s ago: executing program 0 (id=16362): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x9, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000), 0x0) 1m0.384650343s ago: executing program 0 (id=16377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000feffffff850000007300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.353867854s ago: executing program 56 (id=16377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000feffffff850000007300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.32620441s ago: executing program 57 (id=16160): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x18, 0x0, @val=@netfilter={0x2, 0x1, 0x4}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000300), 0x0}, 0x20) 51.156428194s ago: executing program 9 (id=16553): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 51.004927919s ago: executing program 9 (id=16556): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 51.004643739s ago: executing program 9 (id=16557): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100), 0x8) listen(r0, 0x9) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 50.9787645s ago: executing program 9 (id=16558): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 50.952520711s ago: executing program 9 (id=16559): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000001ffffffffffff4000400ec000063bb98"], 0x24, 0x0) 50.39690386s ago: executing program 9 (id=16584): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x20000000, &(0x7f0000000480)={0xa, 0x4e23, 0x1c, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x48890) writev(r0, &(0x7f0000005bc0)=[{&(0x7f00000010c0)="aae1", 0x2}], 0x1) 50.376479841s ago: executing program 58 (id=16584): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x20000000, &(0x7f0000000480)={0xa, 0x4e23, 0x1c, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x48890) writev(r0, &(0x7f0000005bc0)=[{&(0x7f00000010c0)="aae1", 0x2}], 0x1) 31.725016778s ago: executing program 7 (id=16968): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) 30.575053418s ago: executing program 7 (id=16979): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 30.168953872s ago: executing program 7 (id=16972): r0 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x6, 0x58}) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) io_uring_enter(r0, 0x3910, 0xaa76, 0x8, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 30.045882267s ago: executing program 7 (id=16976): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 30.003357928s ago: executing program 7 (id=16978): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7") ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x5, 0x17, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x0, &(0x7f0000000100)}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x101, 0x4) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 29.765042726s ago: executing program 7 (id=16988): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={r1, r2/1000+10000}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 29.764851636s ago: executing program 59 (id=16988): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={r1, r2/1000+10000}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21.477448654s ago: executing program 3 (id=17104): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x5, @v={0x8, 0x31665328960eb79f, 0x2, 0x6, 0xfb, 0x8, 0x7, {0x9, 0x9, "40f4643c13a489e0"}, 0xb, 0xb, 0x1, 0x1, 0x5d, "a7c57394889f303ff9a5697f28ecc3042de834ece1c5d0e8491d8caace647d33f9ac294df0887a275767f74b8bd37c13253fca0ad392bbdb708601aed9366f29627eb8fe2a9c97393d3de8312aac0263ec70e00784a2b72f37dc1303f1"}}, 0x76) 20.929624063s ago: executing program 5 (id=17117): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10) 20.848992606s ago: executing program 5 (id=17119): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 20.837988276s ago: executing program 5 (id=17120): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20023) r1 = socket$kcm(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x8918, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 20.679903492s ago: executing program 5 (id=17122): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x4005, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000001}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 20.630008463s ago: executing program 5 (id=17123): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 20.504234238s ago: executing program 5 (id=17125): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xd, 0x8, 0x100000}, 0x20) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x32a4d37, 0x0) 20.457899259s ago: executing program 1 (id=17127): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0x1c, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) 20.315708444s ago: executing program 1 (id=17129): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000180)=""/165, 0xa5}], 0x1, 0xa, 0x9) 20.234687797s ago: executing program 1 (id=17130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x304}, "b9c5ec18837993a6", "94dd7adf162b79d63db3cda2b4b7c3f2779d7b777112824651d28000", "6ebc780b", "3f23b1802d00cd92"}, 0x38) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000", @ANYBLOB="ac1e00010a01010000000000dc0000009b"], 0x170}, 0x4080) 20.234315967s ago: executing program 1 (id=17131): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0x20000}, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x17}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 19.338903418s ago: executing program 1 (id=17136): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 19.338193818s ago: executing program 1 (id=17137): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.41322566s ago: executing program 3 (id=17140): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xf42) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xead) close(0x3) 18.373426712s ago: executing program 3 (id=17141): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0x1c, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) 18.193343468s ago: executing program 3 (id=17146): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 17.692405316s ago: executing program 3 (id=17150): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 17.321110388s ago: executing program 3 (id=17152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193df163e74963f86dd", 0x12}], 0x1) 17.285584859s ago: executing program 8 (id=17153): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75c, 0xe182) sendfile(r0, r0, 0x0, 0x24002de8) 16.879908624s ago: executing program 8 (id=17165): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x8) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000000)="b00e053187ea64622718f4d29a5a4e2d5434fa7af437bf7d06c6d28f9534d66570255d4e4cb8854b4b3865d92f0c77c2fc63df3ffec8a9ef0819bfed6c141503cadebc7f55ba0a969bfadbc15f1c39799fe43b50e8398b406257ae67eae049e502c2950efedfb72b16a275963880c822434211a8472ad16e750e19079eb8788aaf3e2c3791d69abd879827c0c3c2108e56f13819e891e2fae4185b5c6b5b9c0b9a377a5bc19f4bf53797548ea0b5c3f0a3c6e268c02199d3de05a92c2d2edd471d49329d8fb866", 0xc7}, {&(0x7f0000000100)="9ba755f913d665faefe17de9641d8e8fe42bbc41496f9af2fb9bea2e79d845009b31a7b7e039ee9d3e9309fe83d5bdc03ac263414d5f73cf7431e50108256de618d797a70624b5b00c4586baf646c8a44a56053be50c581ccb2836260cda0479012f9db490bfb362ccdb17784aaa7ba436c31163456e247ed147ab4b06282a722f7f55c88e32993b9d7ea0", 0x8b}, {&(0x7f00000001c0)="e604342e13c4f9bb8e0894a3c5e27c65447f073237ef873ee3ffdaf6f4b62e832bfb6717065516ad26ad7fe743509bc3eeb6be8d7e6f4f97daeb60f7715780244a4c0de36b7e01666d05ca7ccd8ac11bdc0bfab2da4bfbc82cf240cca79a2662ec70e19b846763e2", 0x68}, {&(0x7f0000000280)="1e0f55a3c36466d4ffe78976d167aff900937b1721def62942ea5062143d131e4e598f58af36b80d832850af0930b86b42068ecb2a47f5", 0x37}, {&(0x7f0000001080)="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", 0xe0f}], 0x5, 0x9) 5.044542514s ago: executing program 60 (id=17125): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xd, 0x8, 0x100000}, 0x20) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x32a4d37, 0x0) 4.551448821s ago: executing program 8 (id=17167): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sfeatures}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 4.189874384s ago: executing program 61 (id=17137): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.183277794s ago: executing program 8 (id=17159): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xf42) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xead) close(0x3) 4.181003995s ago: executing program 6 (id=17170): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 4.080205498s ago: executing program 6 (id=17161): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.042290689s ago: executing program 62 (id=17152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193df163e74963f86dd", 0x12}], 0x1) 1.545782976s ago: executing program 6 (id=17163): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001"], 0x38, 0x400c0}}], 0x1, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x3000000, [{0x126c, 0xfffffffa}, {0x7, 0xe}], r3}, 0x18, 0x1) ftruncate(r0, 0x1) 986.004125ms ago: executing program 2 (id=17155): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x4}, 0x1000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 985.393975ms ago: executing program 6 (id=17174): r0 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/15, 0xf}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}]}, 0x5, 0x7f3, &(0x7f0000000cc0)="$eJzs3c9rXFsdAPDvnUySMa/PRBB8z1VA0MAjE1PjewouKi5E8EFB17bDZBpqJpmSmZQmBGoRwY2gxYWgm66r1p1bf2z1X9CNiLRUTYstLiRyZ+4kk2QmnZT5oc3nAzc55/6Yc773x7knuYc7AVxY8+mPXMS7EfHDJGI2m59ExGQzlY+40lrvxf5eOZ2SODj4xj+S5jrP9/fK0bFNzMzEW1nmnYj43fci3sudLre+s7teqlYrW1l+qbFxa6m+s7t4c6O0VlmrbL6/vLJy+YPPfzA9uFj/9cfdS09+9NXP/PLKv7/7iUc/+H0SV+JStqwzjkGZj/nWPonJdBdmO6jlK4MubMyScVeA15JemhOtqzzejdl8TPW/bX6YFQMAhuZuRBwAABdM4v4PABdM+/8Az/f3yul0cHe8/48YtadfjohCK/72883WknzrmV0Ums9BZ54nx553JBExN4Dy5yPiZ7/+1s/TKYb0HBKgm+/ci4jrc/Pt9v+o/Umy9u+k/gdkfLadOGNwwPyJvPYPRuc3af/nC0f9v6PrL3fY/4ku/Z/pLtfu65iP4yNOTl//uccDKKantP/3pcmjsW0vOuLPzE1kubebfb7J5MbNaiVt2z4aEQsxOZ3ml7t/fHN42cKz/zw7Nrcj4s7+3z/vf/thWn76+2iN3OP8iSZ3tdQoDSL21NN7EZ/Md4s/OTz+SY/+79U+y/jaF7//017L0vjTeNvT8fiHP6rs4EHEp6N7/G1JNj6xfRiOjU98f6l5Oiy1T4oufvWXn8z0Kr/z+KdTWn7rb4G3BxtoD+nxnzk7/rmkc7xm/fxl/OHB7G/jcDzpcb3jb+t+/k8l32ym25fSnVKjsbUcMZV8/fT8y0fbtvPt9dP4Fz7V/fo/6/xPY7neZ/z5J3//Ra9lh/G3Z5yKP1Pos7BzSuNfPdfx75pI/xTusahUffRifaJX+f0d/5U0MbGQzemn/etZ01K1OtWxzmvvOAAAAAAAAAAAAAAAAAAAAAAAAAA4h1zzJaVJrniYzuWKxWh+h/fHYyZXrdUb792obW+utl5mOheT0xHRfNXlbMf7UJez9+G385dP5D8XER+LiB9Pf6SZL5Zr1dVxBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmbd6fP9/6m/Trd8vx1pDAGAoCq9c41llJBUBAEbm1ff/iJgefj0AgNHp6/4PALxR3P8B4OIp5MZdAwBg1AoR+XHXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDfa1Q8/TKeDl/t75TS/entne712e3G1Ul8vbmyXi+Xa1q3iWq22Vq0Uy7WNjk3/1O3zqrXarZXY3L6z1KjUG0v1nd1rG7Xtzca1mxultcq1yuTIIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/tV3dtdL1WplK0s8nInI5hTi+KLhJiayCg3ykxcvjajyI00czLb21P9KfQaeKJyc89fFP79z1lb3T53GFyVRGF4R42yVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5//DcAAP//0I0VFw==") preadv(r1, 0x0, 0x0, 0x57, 0x91) 984.791875ms ago: executing program 8 (id=17175): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtaction={0x18, 0x31, 0x3d, 0x500, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 181.738783ms ago: executing program 0 (id=17158): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xc5b}, 0x4d2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x5, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x2) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) 178.101463ms ago: executing program 6 (id=17177): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 177.378023ms ago: executing program 8 (id=17178): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0xfc, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 175.482304ms ago: executing program 2 (id=17179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) 20.206149ms ago: executing program 0 (id=17164): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 19.960699ms ago: executing program 2 (id=17166): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75c, 0xe182) sendfile(r0, r0, 0x0, 0x24002de8) 19.206949ms ago: executing program 6 (id=17181): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=17168): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) kernel console output (not intermixed with test programs): 9107][T14883] veth1_macvtap: entered promiscuous mode [ 647.703401][T14883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.717256][T14883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.731397][ T2017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.747829][ T2017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.758067][ T2017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.771919][ T2017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.823268][T15114] loop9: detected capacity change from 0 to 512 [ 647.829985][T15114] EXT4-fs: Ignoring removed nobh option [ 647.870705][T15114] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.911899][T15114] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.924245][ T28] audit: type=1400 audit(2000001735.788:21701): avc: denied { setopt } for pid=15110 comm="syz.9.16225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 647.965549][T11395] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.996553][T15124] loop1: detected capacity change from 0 to 2048 [ 648.028925][T15130] netlink: 'syz.0.16215': attribute type 1 has an invalid length. [ 648.040560][T15124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.053464][ T28] audit: type=1326 audit(2000001735.908:21702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.8.16214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21dc54c819 code=0x7ffc0000 [ 648.077430][ T28] audit: type=1326 audit(2000001735.908:21703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.8.16214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21dc54c819 code=0x7ffc0000 [ 648.101267][ T28] audit: type=1326 audit(2000001735.908:21704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.8.16214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21dc54c819 code=0x7ffc0000 [ 648.125031][ T28] audit: type=1326 audit(2000001735.908:21705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.8.16214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f21dc54c819 code=0x7ffc0000 [ 648.148863][ T28] audit: type=1326 audit(2000001735.908:21706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.8.16214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21dc54c819 code=0x7ffc0000 [ 648.178969][ T28] audit: type=1326 audit(2000001735.908:21707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.8.16214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21dc54c819 code=0x7ffc0000 [ 648.206457][ T28] audit: type=1326 audit(2000001735.908:21708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.8.16214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21dc54c819 code=0x7ffc0000 [ 648.231798][ T28] audit: type=1326 audit(2000001735.908:21709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15121 comm="syz.8.16214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f21dc50d04e code=0x7ffc0000 [ 648.274101][T14883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.286694][T15133] bond1 (unregistering): Released all slaves [ 648.448528][T15147] loop0: detected capacity change from 0 to 128 [ 648.485356][T15147] syz.0.16220: attempt to access beyond end of device [ 648.485356][T15147] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 648.898291][T15166] loop8: detected capacity change from 0 to 512 [ 648.972748][T15169] loop8: detected capacity change from 0 to 1024 [ 648.993508][T15169] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 649.011403][T15169] System zones: 0-1, 3-36 [ 649.023106][T15169] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.16237: bad orphan inode 134217728 [ 649.049888][T15169] loop8: lost filesystem error report for type 5 error -117 [ 649.050774][T15169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.104546][T15169] team0: Device vxcan3 is of different type [ 649.217649][T14452] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.440220][T15189] loop8: detected capacity change from 0 to 8192 [ 649.493541][T15192] loop1: detected capacity change from 0 to 256 [ 649.512727][T15189] loop8: p2 p3 [ 649.520590][T15189] loop8: p3 size 100663552 extends beyond EOD, truncated [ 649.642616][ T1037] udevd[1037]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 649.654913][T10312] udevd[10312]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 649.674258][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16248'. [ 649.698017][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16248'. [ 649.716031][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16248'. [ 649.720119][ T2017] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.725491][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16248'. [ 649.774531][ T2017] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.794128][ T2017] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.814601][ T2017] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.818810][T15203] loop0: detected capacity change from 0 to 1024 [ 649.862354][T15203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.885202][T15203] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 650.014094][T15212] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 650.026623][T15212] EXT4-fs (loop0): This should not happen!! Data will be lost [ 650.026623][T15212] [ 650.036967][T15212] EXT4-fs (loop0): Total free blocks count 0 [ 650.043294][T15212] EXT4-fs (loop0): Free/Dirty block details [ 650.049342][T15212] EXT4-fs (loop0): free_blocks=20480 [ 650.055009][T15212] EXT4-fs (loop0): dirty_blocks=144 [ 650.080130][T15212] EXT4-fs (loop0): Block reservation details [ 650.089028][T15212] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 650.514827][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 2048 with error 28 [ 650.664144][T15243] loop1: detected capacity change from 0 to 2048 [ 650.680180][T15240] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 4 prio class 2 [ 650.707975][T15243] /dev/loop1: Can't open blockdev [ 650.751091][T14797] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 650.868276][ T23] kernel read not supported for file /vcs (pid: 23 comm: kworker/1:0) [ 650.943558][T15266] netlink: 'syz.1.16275': attribute type 1 has an invalid length. [ 651.243543][T15261] loop8: detected capacity change from 0 to 32768 [ 651.280343][T10312] loop8: p1 p3 < > [ 651.290144][T15261] loop8: p1 p3 < > [ 651.402563][T15282] EXT4-fs: Ignoring removed nobh option [ 651.417148][T15282] EXT4-fs (loop8): 1 orphan inode deleted [ 651.426976][T15282] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.479211][T10312] udevd[10312]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 651.486356][ T460] udevd[460]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 651.531802][ T460] udevd[460]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 651.542500][T10312] udevd[10312]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 651.571386][T14452] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.694822][T15301] bridge1: entered promiscuous mode [ 651.700307][T15301] bridge1: entered allmulticast mode [ 651.897264][ T28] kauditd_printk_skb: 590 callbacks suppressed [ 651.897283][ T28] audit: type=1400 audit(2000001739.748:22300): avc: denied { write } for pid=15317 comm="syz.1.16296" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 651.945743][ T28] audit: type=1400 audit(2000001739.778:22301): avc: denied { bind } for pid=15319 comm="syz.1.16298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 651.977995][T15322] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 652.006948][T15322] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 652.066399][ T50] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 652.250056][ T28] audit: type=1400 audit(2000001740.048:22302): avc: denied { create } for pid=15344 comm="syz.1.16309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 652.290064][ T28] audit: type=1400 audit(2000001740.048:22303): avc: denied { ioctl } for pid=15344 comm="syz.1.16309" path="socket:[143852]" dev="sockfs" ino=143852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 652.882186][T15359] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 652.882480][ T28] audit: type=1400 audit(2000001740.748:22304): avc: denied { mac_admin } for pid=15358 comm="syz.9.16315" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 652.969438][ T28] audit: type=1400 audit(2000001740.778:22305): avc: denied { relabelto } for pid=15358 comm="syz.9.16315" name="298" dev="tmpfs" ino=1565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 653.002939][ T28] audit: type=1400 audit(2000001740.778:22306): avc: denied { associate } for pid=15358 comm="syz.9.16315" name="298" dev="tmpfs" ino=1565 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 653.068160][ T28] audit: type=1400 audit(2000001740.858:22307): avc: denied { remove_name } for pid=11395 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 653.146499][ T28] audit: type=1400 audit(2000001740.858:22308): avc: denied { rmdir } for pid=11395 comm="syz-executor" name="298" dev="tmpfs" ino=1565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 653.259169][ T28] audit: type=1400 audit(2000001741.118:22309): avc: denied { ioctl } for pid=15371 comm="syz.9.16321" path="socket:[143876]" dev="sockfs" ino=143876 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 654.526006][T15418] set_capacity_and_notify: 3 callbacks suppressed [ 654.526027][T15418] loop0: detected capacity change from 0 to 128 [ 654.604187][T15423] syz.0.16337: attempt to access beyond end of device [ 654.604187][T15423] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 654.617813][T15423] syz.0.16337: attempt to access beyond end of device [ 654.617813][T15423] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 654.618184][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.631650][T15423] syz.0.16337: attempt to access beyond end of device [ 654.631650][T15423] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 654.690075][T15423] syz.0.16337: attempt to access beyond end of device [ 654.690075][T15423] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 654.697421][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.714650][T15423] syz.0.16337: attempt to access beyond end of device [ 654.714650][T15423] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 654.729140][T15423] syz.0.16337: attempt to access beyond end of device [ 654.729140][T15423] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 654.777352][T15423] syz.0.16337: attempt to access beyond end of device [ 654.777352][T15423] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 654.799033][T15423] syz.0.16337: attempt to access beyond end of device [ 654.799033][T15423] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 654.819445][T15423] syz.0.16337: attempt to access beyond end of device [ 654.819445][T15423] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 654.839123][T15423] syz.0.16337: attempt to access beyond end of device [ 654.839123][T15423] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 655.121063][T15454] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.128375][T15454] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.238289][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.257434][T15454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.293700][T15463] loop1: detected capacity change from 0 to 8192 [ 655.315870][ T2017] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.339326][ T2017] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.351765][T15463] loop1: p1 < > p2 p4 < p5 > [ 655.356542][T15463] loop1: partition table partially beyond EOD, truncated [ 655.365262][T15463] loop1: p1 start 134217728 is beyond EOD, truncated [ 655.384038][T15463] loop1: p2 size 591360 extends beyond EOD, truncated [ 655.387747][ T2017] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.410221][T15463] loop1: p5 size 591360 extends beyond EOD, truncated [ 655.414329][ T2017] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.615508][T15471] loop9: detected capacity change from 0 to 512 [ 655.677126][T15471] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.16363: invalid indirect mapped block 256 (level 2) [ 655.722824][T15471] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 655.723262][T15471] EXT4-fs (loop9): 2 truncates cleaned up [ 655.730035][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 655.745525][ C1] EXT4-fs (loop9): initial error at time 2000001743: ext4_free_branches:1023: inode 11 [ 655.755203][ C1] EXT4-fs (loop9): last error at time 2000001743: ext4_free_branches:1023: inode 11 [ 655.786111][T15471] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.811313][T15471] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.16363: bg 0: block 5: invalid block bitmap [ 655.850497][T15471] EXT4-fs error (device loop9) in ext4_setattr:6028: error 28 [ 655.940694][T11395] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.020363][T15481] netlink: 'syz.1.16366': attribute type 12 has an invalid length. [ 656.692814][T15562] loop1: detected capacity change from 0 to 1024 [ 656.705310][ T1271] bridge_slave_1: left allmulticast mode [ 656.728262][ T1271] bridge_slave_1: left promiscuous mode [ 656.732292][T15562] EXT4-fs: Ignoring removed bh option [ 656.746479][ T1271] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.778375][ T1271] bridge_slave_0: left allmulticast mode [ 656.795133][T15562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.796256][ T1271] bridge_slave_0: left promiscuous mode [ 656.818515][ T1271] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.981833][T15618] netlink: 64 bytes leftover after parsing attributes in process `syz.9.16383'. [ 657.094255][ T1271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.108333][ T1271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.128670][ T1271] bond0 (unregistering): Released all slaves [ 657.206948][T14883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.249314][ T1271] hsr_slave_0: left promiscuous mode [ 657.288988][ T1271] hsr_slave_1: left promiscuous mode [ 657.309367][ T1271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.340081][ T1271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.421645][ T1271] team0 (unregistering): Port device team_slave_1 removed [ 657.443990][ T1271] team0 (unregistering): Port device team_slave_0 removed [ 657.491904][T15638] loop1: detected capacity change from 0 to 32768 [ 657.582434][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 657.582451][ T28] audit: type=1400 audit(2000001745.448:22314): avc: denied { mount } for pid=15659 comm="syz.8.16392" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 657.724346][ T28] audit: type=1400 audit(2000001745.588:22315): avc: denied { write } for pid=15663 comm="syz.8.16394" path="socket:[144241]" dev="sockfs" ino=144241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 657.755807][T15551] chnl_net:caif_netlink_parms(): no params data found [ 658.493472][ T28] audit: type=1400 audit(2000001746.358:22316): avc: denied { create } for pid=15698 comm="syz.9.16397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 658.521043][T15700] xt_hashlimit: size too large, truncated to 1048576 [ 658.640372][T15551] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.666621][T15551] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.676797][T15551] bridge_slave_0: entered allmulticast mode [ 658.677824][ T28] audit: type=1400 audit(2000001746.538:22317): avc: denied { create } for pid=15709 comm="syz.1.16400" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 658.683821][T15551] bridge_slave_0: entered promiscuous mode [ 658.726679][T15551] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.730178][ T28] audit: type=1400 audit(2000001746.588:22318): avc: denied { create } for pid=15712 comm="syz.8.16401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 658.754248][T15551] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.766222][T15551] bridge_slave_1: entered allmulticast mode [ 658.772776][T15551] bridge_slave_1: entered promiscuous mode [ 658.787563][ T28] audit: type=1400 audit(2000001746.618:22319): avc: denied { bind } for pid=15712 comm="syz.8.16401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 658.807754][ T28] audit: type=1400 audit(2000001746.618:22320): avc: denied { listen } for pid=15712 comm="syz.8.16401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 658.829684][ T28] audit: type=1400 audit(2000001746.618:22321): avc: denied { connect } for pid=15712 comm="syz.8.16401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 658.866987][ T28] audit: type=1400 audit(2000001746.618:22322): avc: denied { read } for pid=15712 comm="syz.8.16401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 658.917860][T15551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.939435][T15551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.996610][T15551] team0: Port device team_slave_0 added [ 659.018652][T15551] team0: Port device team_slave_1 added [ 659.082238][T15551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.089923][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.116340][T15551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.160555][T15551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.178520][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.220802][T15551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.250979][T15551] hsr_slave_0: entered promiscuous mode [ 659.257153][T15551] hsr_slave_1: entered promiscuous mode [ 659.263488][T15551] debugfs: 'hsr0' already exists in 'hsr' [ 659.269667][T15551] Cannot create hsr debugfs directory [ 659.288283][T15666] chnl_net:caif_netlink_parms(): no params data found [ 659.524537][T15666] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.532946][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.543550][T15666] bridge_slave_0: entered allmulticast mode [ 659.558071][T15666] bridge_slave_0: entered promiscuous mode [ 659.615916][T15666] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.623857][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.636806][T15666] bridge_slave_1: entered allmulticast mode [ 659.643556][T15666] bridge_slave_1: entered promiscuous mode [ 659.691827][ T1271] vlan0: left promiscuous mode [ 659.696772][ T1271] dummy0: left promiscuous mode [ 659.702898][ T1271] bridge0: port 3(vlan0) entered disabled state [ 659.717131][ T1271] bridge_slave_1: left allmulticast mode [ 659.723004][ T1271] bridge_slave_1: left promiscuous mode [ 659.728707][ T1271] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.744761][ T1271] bridge_slave_0: left promiscuous mode [ 659.760297][ T1271] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.863669][ T1271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.876963][ T1271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.898335][ T1271] bond0 (unregistering): Released all slaves [ 659.906845][ T1271] bond1 (unregistering): Released all slaves [ 659.915969][ T1271] bond2 (unregistering): Released all slaves [ 659.926130][ T1271] bond3 (unregistering): (slave lo): Releasing backup interface [ 659.935241][ T1271] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 659.946714][ T1271] bond3 (unregistering): Released all slaves [ 659.967965][T15792] ªªªªªª: renamed from dummy0 (while UP) [ 659.977768][T15666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.988729][T15666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.012995][ T1271] tipc: Disabling bearer [ 660.018800][ T1271] tipc: Left network mode [ 660.021552][T15666] team0: Port device team_slave_0 added [ 660.037467][ T1271] hsr_slave_0: left promiscuous mode [ 660.044998][ T1271] hsr_slave_1: left promiscuous mode [ 660.149647][T15666] team0: Port device team_slave_1 added [ 660.185086][T15666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.192633][T15666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.218872][T15666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.230795][T15666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.237923][T15666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.265479][T15666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.297064][T15666] hsr_slave_0: entered promiscuous mode [ 660.303422][T15666] hsr_slave_1: entered promiscuous mode [ 660.309438][T15666] debugfs: 'hsr0' already exists in 'hsr' [ 660.315700][T15666] Cannot create hsr debugfs directory [ 660.459282][T15551] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 660.480086][T15551] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 660.495632][T15551] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 660.509828][T15551] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 660.511270][ T1271] IPVS: stop unused estimator thread 0... [ 660.603591][T15551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.626347][T15551] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.643022][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.650190][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.680384][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.687485][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.806319][T15666] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 660.830328][T15666] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 660.850223][T15666] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 660.863020][T15666] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 660.887118][T15883] loop1: detected capacity change from 0 to 1024 [ 660.890603][T15551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.937006][T15883] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 660.987811][T15883] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.16434: Failed to acquire dquot type 0 [ 660.999649][T15883] loop1: lost filesystem error report for type 5 error -117 [ 661.000015][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 661.013792][ C1] EXT4-fs (loop1): initial error at time 2000001748: ext4_acquire_dquot:7026 [ 661.022626][ C1] EXT4-fs (loop1): last error at time 2000001748: ext4_acquire_dquot:7026 [ 661.031765][T15666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.031928][T15883] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 661.053451][T15883] EXT4-fs (loop1): 1 truncate cleaned up [ 661.059557][T15666] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.059654][T15883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.090569][ T1271] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.097678][ T1271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.123403][T14883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.133789][ T1641] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.140868][ T1641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.189102][T15666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.279722][T15551] veth0_vlan: entered promiscuous mode [ 661.301156][T15551] veth1_vlan: entered promiscuous mode [ 661.322982][T15551] veth0_macvtap: entered promiscuous mode [ 661.346139][T15551] veth1_macvtap: entered promiscuous mode [ 661.367654][T15551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.406958][T15551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.431843][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.447413][T15666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.467851][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.479614][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.505769][ T70] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.673490][T15666] veth0_vlan: entered promiscuous mode [ 661.686940][T15666] veth1_vlan: entered promiscuous mode [ 661.732428][T15666] veth0_macvtap: entered promiscuous mode [ 661.739981][T15666] veth1_macvtap: entered promiscuous mode [ 661.769657][T15666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.836767][T16000] netlink: 'syz.7.16451': attribute type 3 has an invalid length. [ 661.849829][T16004] loop9: detected capacity change from 0 to 1024 [ 661.852450][T15666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.888712][T16000] netlink: 208 bytes leftover after parsing attributes in process `syz.7.16451'. [ 661.900563][T16004] EXT4-fs: Ignoring removed bh option [ 661.909713][T16000] netlink: 'syz.7.16451': attribute type 3 has an invalid length. [ 661.919349][T16000] netlink: 208 bytes leftover after parsing attributes in process `syz.7.16451'. [ 661.942540][T16004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.959706][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.976588][T16004] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.057709][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.073891][T16019] netlink: 'syz.7.16455': attribute type 13 has an invalid length. [ 662.093374][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16455'. [ 662.104472][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.130946][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.159170][T16032] EXT4-fs error (device loop9): ext4_free_blocks:6724: comm syz.9.16452: Freeing blocks not in datazone - block = 0, count = 16 [ 662.162327][T16019] netlink: 'syz.7.16455': attribute type 13 has an invalid length. [ 662.181147][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.192650][T16040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.205860][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.216554][T16040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.217390][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16455'. [ 662.251204][ T70] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.260170][ T2010] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 662.280189][ T70] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.300329][ T2010] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 662.330043][ T2010] EXT4-fs (loop9): This should not happen!! Data will be lost [ 662.330043][ T2010] [ 662.345257][T11395] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 662.368360][T11395] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 662.652997][T16037] loop1: detected capacity change from 0 to 32768 [ 662.700589][T16037] loop1: p1 p3 < > [ 662.754077][T16098] loop9: detected capacity change from 0 to 1024 [ 662.865159][T16098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.980271][ T2015] bond0: (slave bond_slave_0): interface is now down [ 662.992603][T10312] udevd[10312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 662.997473][T16131] netlink: 'syz.8.16475': attribute type 10 has an invalid length. [ 663.023240][ T2015] bond0: (slave bond_slave_1): interface is now down [ 663.038220][ T460] udevd[460]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 663.056034][ T2015] bond0: now running without any active interface! [ 663.080362][T16131] syz_tun: entered promiscuous mode [ 663.105328][T16131] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 663.114518][T16149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.119395][T11395] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.134445][ T70] bond0: (slave syz_tun): interface is now down [ 663.151572][ T70] bond0: now running without any active interface! [ 663.158803][T16149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.255289][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 663.255308][ T28] audit: type=1326 audit(2000001751.118:22328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16164 comm="syz.9.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39447ec819 code=0x7ffc0000 [ 663.296949][ T28] audit: type=1326 audit(2000001751.158:22329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16164 comm="syz.9.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39447ec819 code=0x7ffc0000 [ 663.335429][ T28] audit: type=1326 audit(2000001751.158:22330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16164 comm="syz.9.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39447ec819 code=0x7ffc0000 [ 663.361462][ T28] audit: type=1326 audit(2000001751.158:22331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16164 comm="syz.9.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39447ec819 code=0x7ffc0000 [ 663.429522][ T28] audit: type=1326 audit(2000001751.158:22332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16164 comm="syz.9.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f39447ec819 code=0x7ffc0000 [ 663.463715][ T28] audit: type=1326 audit(2000001751.158:22333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16164 comm="syz.9.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39447ec819 code=0x7ffc0000 [ 663.506567][ T28] audit: type=1326 audit(2000001751.158:22334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16164 comm="syz.9.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39447ec819 code=0x7ffc0000 [ 663.695239][ T28] audit: type=1400 audit(2000001751.548:22335): avc: denied { accept } for pid=16198 comm="syz.9.16489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 663.769437][T16209] netlink: 'syz.7.16491': attribute type 4 has an invalid length. [ 663.785238][T16209] netlink: 'syz.7.16491': attribute type 4 has an invalid length. [ 663.821222][ T28] audit: type=1400 audit(2000001751.678:22336): avc: denied { bind } for pid=16214 comm="syz.8.16492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 663.910130][ T28] audit: type=1400 audit(2000001751.678:22337): avc: denied { node_bind } for pid=16214 comm="syz.8.16492" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 664.120346][T16261] loop1: detected capacity change from 0 to 512 [ 664.137951][T16261] EXT4-fs: Ignoring removed orlov option [ 664.154119][T16261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 664.167272][T16261] EXT4-fs (loop1): orphan cleanup on readonly fs [ 664.174965][T16261] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.16505: bg 0: block 248: padding at end of block bitmap is not set [ 664.178938][T16268] ip6tnl1: entered allmulticast mode [ 664.189689][T16261] loop1: lost filesystem error report for type 5 error -117 [ 664.195320][T16261] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.16505: Failed to acquire dquot type 1 [ 664.210025][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 664.214353][T16261] loop1: lost filesystem error report for type 5 error -117 [ 664.220606][ C0] EXT4-fs (loop1): last error at time 2000001752: ext4_validate_block_bitmap:441 [ 664.221269][T16261] EXT4-fs (loop1): 1 truncate cleaned up [ 664.227923][ C0] [ 664.246714][T16261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 664.273059][T16261] EXT4-fs: Ignoring removed orlov option [ 664.278986][T16261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 664.289054][T16261] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 664.301372][T16261] EXT4-fs error (device loop1): __ext4_remount:6829: comm syz.1.16505: Abort forced by user [ 664.311970][T16261] EXT4-fs (loop1): Remounting filesystem read-only [ 664.318598][T16261] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 664.327260][T16261] ext4 filesystem being remounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 664.358833][T14883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.473749][T16285] netlink: 14 bytes leftover after parsing attributes in process `syz.8.16516'. [ 664.487058][T16285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.498385][T16285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.508580][T16285] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 664.519319][T16285] bond0 (unregistering): Released all slaves [ 664.566405][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16518'. [ 664.790577][T16308] Falling back ldisc for ttyS3. [ 664.908638][T16324] netlink: 'syz.9.16532': attribute type 34 has an invalid length. [ 665.054131][T16333] loop9: detected capacity change from 0 to 128 [ 665.063112][T16333] FAT-fs (loop9): bogus logical sector size 759 [ 665.072943][T16333] FAT-fs (loop9): Can't find a valid FAT filesystem [ 665.178187][T16337] loop9: detected capacity change from 0 to 512 [ 665.185315][T16337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 665.205581][T16337] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.16538: iget: bad i_size value: 38620345925642 [ 665.218505][T16337] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 665.218748][T16337] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.16538: couldn't read orphan inode 15 (err -117) [ 665.227942][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 665.227960][ C0] EXT4-fs (loop9): initial error at time 2000001753: ext4_orphan_get:1397: inode 15 [ 665.228002][ C0] EXT4-fs (loop9): last error at time 2000001753: ext4_orphan_get:1397: inode 15 [ 665.272173][T16337] loop9: lost filesystem error report for type 5 error -117 [ 665.278840][T16337] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.309216][T16342] loop1: detected capacity change from 0 to 256 [ 665.319676][T16342] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 665.333077][T16337] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.16538: bg 0: block 5: invalid block bitmap [ 665.356027][T16342] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 665.392838][T11395] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.494664][T16351] netlink: 'syz.9.16544': attribute type 18 has an invalid length. [ 665.502736][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16544'. [ 665.512850][T16351] netlink: 'syz.9.16544': attribute type 18 has an invalid length. [ 665.521361][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16544'. [ 665.681267][T16370] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16548'. [ 665.947508][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16561'. [ 666.021495][T16394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 666.039357][T16394] bond1: (slave gretap1): making interface the new active one [ 666.047825][T16394] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 666.268930][T16423] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.16576'. [ 666.586273][ T2010] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.617415][T16459] loop3: detected capacity change from 0 to 512 [ 666.656230][T16459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.707691][T16459] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.861595][T15666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.879911][ T2010] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.909771][T16475] loop3: detected capacity change from 0 to 1024 [ 666.928982][T16475] EXT4-fs: Ignoring removed orlov option [ 666.949273][ T2010] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.970618][T16475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.024143][ T2010] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.048714][T16475] EXT4-fs (loop3): shut down requested (2) [ 667.072948][T16475] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 667.135637][T15666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.176172][ T2010] bridge_slave_1: left allmulticast mode [ 667.189890][T16490] validate_nla: 2 callbacks suppressed [ 667.189906][T16490] netlink: 'syz.1.16600': attribute type 15 has an invalid length. [ 667.204749][ T2010] bridge_slave_1: left promiscuous mode [ 667.218424][ T2010] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.233537][ T2010] bridge_slave_0: left allmulticast mode [ 667.241301][ T2010] bridge_slave_0: left promiscuous mode [ 667.247243][ T2010] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.297324][ T2010] dvmrp0 (unregistering): left allmulticast mode [ 667.342113][ T2010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.351880][ T2010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.361063][ T2010] bond0 (unregistering): Released all slaves [ 667.368622][ T2010] bond1 (unregistering): (slave lo): Releasing backup interface [ 667.376763][ T2010] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 667.387832][ T2010] bond1 (unregistering): Released all slaves [ 667.394549][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16601'. [ 667.396253][ T2010] bond2 (unregistering): Released all slaves [ 667.428437][T16452] chnl_net:caif_netlink_parms(): no params data found [ 667.464287][ T2010] hsr_slave_0: left promiscuous mode [ 667.469951][ T2010] hsr_slave_1: left promiscuous mode [ 667.475741][ T2010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.514610][ T2010] team0 (unregistering): Port device team_slave_1 removed [ 667.524765][ T2010] team0 (unregistering): Port device team_slave_0 removed [ 667.577603][T16452] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.584886][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.623482][T16452] bridge_slave_0: entered allmulticast mode [ 667.630109][T16452] bridge_slave_0: entered promiscuous mode [ 667.637315][T16452] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.644491][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.651753][T16452] bridge_slave_1: entered allmulticast mode [ 667.658247][T16452] bridge_slave_1: entered promiscuous mode [ 667.728744][T16452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.744674][T16452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.796207][T16452] team0: Port device team_slave_0 added [ 667.812864][T16452] team0: Port device team_slave_1 added [ 667.876786][T16452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.897809][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.974768][T16452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.010812][T16452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.022941][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.059069][T16452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.133412][T16565] loop3: detected capacity change from 0 to 512 [ 668.140563][T16452] hsr_slave_0: entered promiscuous mode [ 668.149418][T16452] hsr_slave_1: entered promiscuous mode [ 668.161425][T16452] debugfs: 'hsr0' already exists in 'hsr' [ 668.169493][T16452] Cannot create hsr debugfs directory [ 668.188759][T16565] EXT4-fs (loop3): 1 truncate cleaned up [ 668.194949][T16565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.231565][ T2010] IPVS: stop unused estimator thread 0... [ 668.254543][T16574] loop1: detected capacity change from 0 to 2048 [ 668.266427][T16574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 668.304995][T15666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.323603][T16574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.624915][T14883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.650533][T16452] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 668.687948][T16452] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 668.721823][T16452] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 668.757988][T16452] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 668.893639][T16452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.933165][T16452] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.947382][ T2015] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.954550][ T2015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.994497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.001615][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.188056][T16452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.213414][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 669.213545][ T28] audit: type=1400 audit(2000001757.078:22410): avc: denied { write } for pid=16667 comm="syz.3.16635" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 669.468305][T16711] ip6gre1: entered allmulticast mode [ 669.549884][T16452] veth0_vlan: entered promiscuous mode [ 669.576559][T16452] veth1_vlan: entered promiscuous mode [ 669.618872][T16452] veth0_macvtap: entered promiscuous mode [ 669.642528][T16452] veth1_macvtap: entered promiscuous mode [ 669.681694][T16452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.702576][T16452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.732989][ T1271] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.749951][ T1271] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.836041][ T1271] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.875769][ T1271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.342344][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16663'. [ 670.361033][T16814] bridge: RTM_NEWNEIGH with invalid ether address [ 670.372807][T16819] netlink: 'syz.7.16662': attribute type 21 has an invalid length. [ 670.382654][T16817] netlink: 'syz.3.16664': attribute type 4 has an invalid length. [ 670.391962][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16664'. [ 670.398778][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16662'. [ 670.412232][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16663'. [ 670.421529][T16814] bridge: RTM_NEWNEIGH with invalid ether address [ 670.432120][T16819] netlink: 'syz.7.16662': attribute type 21 has an invalid length. [ 670.440875][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16662'. [ 670.553404][T16836] loop5: detected capacity change from 0 to 512 [ 670.560997][T16836] EXT4-fs: Ignoring removed orlov option [ 670.563728][T16834] loop7: detected capacity change from 0 to 1024 [ 670.618864][T16836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.636924][T16834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.645959][T16836] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 670.665308][T16836] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.16669: corrupted inode contents [ 670.677892][T16836] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #2: comm syz.5.16669: mark_inode_dirty error [ 670.707760][T15551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.741473][T16836] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.16669: corrupted inode contents [ 670.776113][T16853] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.16669: corrupted inode contents [ 670.805395][ T28] audit: type=1400 audit(2000001758.658:22411): avc: denied { write } for pid=16851 comm="syz.8.16673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 670.817196][T16853] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #2: comm syz.5.16669: mark_inode_dirty error [ 670.883707][ T28] audit: type=1400 audit(2000001758.728:22412): avc: denied { listen } for pid=16851 comm="syz.8.16673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 670.883801][T16853] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.16669: corrupted inode contents [ 670.942833][T16853] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.16669: mark_inode_dirty error [ 670.960502][ T28] audit: type=1326 audit(2000001758.728:22413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.16675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffe5fc819 code=0x7ffc0000 [ 670.969323][T16836] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.16669: ES cache extent failed: add [0,1,23,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 670.969323][T16836] [ 671.027747][T16836] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #2: comm syz.5.16669: corrupted inode contents [ 671.051397][T16877] netlink: 'syz.3.16677': attribute type 21 has an invalid length. [ 671.070126][ T28] audit: type=1326 audit(2000001758.728:22414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.16675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffe5fc819 code=0x7ffc0000 [ 671.097137][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16677'. [ 671.109453][T16883] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16679'. [ 671.130085][T16883] bridge: RTM_NEWNEIGH with invalid ether address [ 671.136576][T16836] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.16669: mark_inode_dirty error [ 671.147584][ T28] audit: type=1326 audit(2000001758.728:22415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.16675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffe5fc819 code=0x7ffc0000 [ 671.171860][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16679'. [ 671.183845][T16836] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 671.196962][ T28] audit: type=1326 audit(2000001758.728:22416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.16675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4ffe5fc819 code=0x7ffc0000 [ 671.208365][T16885] bridge: RTM_NEWNEIGH with invalid ether address [ 671.252933][ T28] audit: type=1326 audit(2000001758.728:22417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.16675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffe5fc819 code=0x7ffc0000 [ 671.302537][T16877] netlink: 'syz.3.16677': attribute type 21 has an invalid length. [ 671.312058][ T2010] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.334021][ T2010] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.348594][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16677'. [ 671.360049][ T28] audit: type=1326 audit(2000001758.728:22418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.16675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffe5fc819 code=0x7ffc0000 [ 671.405649][ T2010] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.420265][T16452] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.429322][ T28] audit: type=1326 audit(2000001758.728:22419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16863 comm="syz.7.16675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffe5fc819 code=0x7ffc0000 [ 671.465674][ T2010] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.419673][T16976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.530629][T16976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.621211][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16695'. [ 672.641381][T16976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.670053][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16695'. [ 672.705524][T16997] netlink: 'syz.8.16695': attribute type 7 has an invalid length. [ 672.743703][T16976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.779812][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16695'. [ 672.793269][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16695'. [ 672.828586][ T2015] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.856646][T16997] netlink: 'syz.8.16695': attribute type 7 has an invalid length. [ 672.859493][ T2015] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.911703][ T2015] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.950496][ T2015] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.041256][T17031] loop3: detected capacity change from 0 to 512 [ 673.088528][T17031] EXT4-fs: Ignoring removed orlov option [ 673.187083][T17031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.220263][T17031] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 673.359266][T17031] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.16704: corrupted inode contents [ 673.436587][T17031] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #2: comm syz.3.16704: mark_inode_dirty error [ 673.470486][T17064] syzkaller1: entered promiscuous mode [ 673.490902][T17064] syzkaller1: entered allmulticast mode [ 673.491063][T17031] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.16704: corrupted inode contents [ 673.611511][T17067] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.16704: corrupted inode contents [ 673.653416][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16714'. [ 673.674072][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16714'. [ 673.695682][T17067] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #2: comm syz.3.16704: mark_inode_dirty error [ 673.717495][T17085] netlink: 'syz.7.16714': attribute type 7 has an invalid length. [ 673.730853][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16714'. [ 673.740634][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16714'. [ 673.749959][T17067] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.16704: corrupted inode contents [ 673.780113][T17085] netlink: 'syz.7.16714': attribute type 7 has an invalid length. [ 673.808115][T17067] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.16704: mark_inode_dirty error [ 673.844379][T17101] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.857674][T17101] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.869168][T17074] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.16704: ES cache extent failed: add [0,1,23,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 673.869168][T17074] [ 673.926928][T17101] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.997726][T17101] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.012165][T17074] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.16704: corrupted inode contents [ 674.030735][T13140] IPVS: starting estimator thread 0... [ 674.096475][T17074] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.16704: mark_inode_dirty error [ 674.111952][T17101] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.120151][T17119] IPVS: using max 2256 ests per chain, 112800 per kthread [ 674.122578][T17074] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 674.145739][T17101] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.215992][T17101] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.231148][T17101] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.248465][T15666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.412536][ T2010] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.435126][T17150] loop7: detected capacity change from 0 to 128 [ 674.435481][ T2010] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.478168][ T70] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.506748][ T70] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.515468][ T70] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.542727][ T70] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.552795][ T70] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.564830][ T70] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.696067][T17162] syzkaller1: entered promiscuous mode [ 674.720936][T17162] syzkaller1: entered allmulticast mode [ 674.799365][T32301] IPVS: starting estimator thread 0... [ 674.900230][T17173] IPVS: using max 2496 ests per chain, 124800 per kthread [ 674.933312][T17183] loop1: detected capacity change from 0 to 512 [ 674.949141][T17183] EXT4-fs: Ignoring removed orlov option [ 675.002396][T17183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.063249][T17183] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 675.130423][T17183] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #2: comm syz.1.16739: corrupted inode contents [ 675.175460][T17183] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #2: comm syz.1.16739: mark_inode_dirty error [ 675.197686][T17183] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #2: comm syz.1.16739: corrupted inode contents [ 675.220663][T17201] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #2: comm syz.1.16739: corrupted inode contents [ 675.243583][T17204] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.263176][T17204] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.274043][T17201] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #2: comm syz.1.16739: mark_inode_dirty error [ 675.294126][T17201] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #2: comm syz.1.16739: corrupted inode contents [ 675.306304][T17201] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.16739: mark_inode_dirty error [ 675.318334][T17183] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.16739: ES cache extent failed: add [0,1,23,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 675.318334][T17183] [ 675.338996][T17183] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #2: comm syz.1.16739: corrupted inode contents [ 675.361220][T17204] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.371879][T17183] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.16739: mark_inode_dirty error [ 675.376508][T17204] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.395771][T17183] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 675.433755][T14883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.460861][T17204] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.478230][T17204] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.540844][T17204] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.558376][T17204] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.638507][ T1271] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.647073][ T1271] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.664107][ T1271] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.673925][ T1271] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.680652][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.686423][ T1271] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.713506][ T1271] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.740045][ T1271] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.748315][ T1271] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.028050][T17227] loop1: detected capacity change from 0 to 1024 [ 676.086835][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16752'. [ 676.097205][T17227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.115098][T17232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16752'. [ 676.142675][T14883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.218789][T17246] loop3: detected capacity change from 0 to 128 [ 676.383554][T17254] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.404338][T17258] ªªªªªª: renamed from vlan0 (while UP) [ 676.439886][T17263] loop7: detected capacity change from 0 to 1024 [ 676.450876][T17254] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.494055][T17263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.578640][T15551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.589101][T17254] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.667595][T17254] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.732024][ T2010] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.766830][ T2010] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.778969][ T2010] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.797117][ T2010] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.878065][T17317] loop5: detected capacity change from 0 to 128 [ 676.972999][T17324] ªªªªªª: renamed from vlan0 (while UP) [ 677.059875][T17331] loop5: detected capacity change from 0 to 1024 [ 677.072297][T17333] loop7: detected capacity change from 0 to 128 [ 677.117759][T17331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.198848][T16452] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.598417][T17355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.643414][T17355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.655363][T17361] ªªªªªª: renamed from vlan0 (while UP) [ 677.695169][T17355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.732282][T17355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.823312][T17355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.847194][T17355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.922691][T17355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.933149][T17355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.987927][ T70] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.000146][ T70] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.011225][ T70] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.019507][ T70] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.030781][ T70] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.039042][ T70] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.050446][ T70] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.058689][ T70] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.145692][T17393] loop3: detected capacity change from 0 to 1024 [ 678.178892][T17393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.267547][T15666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.330603][T17403] ªªªªªª: renamed from vlan0 (while UP) [ 678.474209][T17422] loop3: detected capacity change from 0 to 512 [ 678.490641][T17422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.503371][T17422] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 678.519251][T17422] EXT4-fs (loop3): shut down requested (0) [ 678.565232][T15666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.629040][T17431] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.649624][T17431] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.872676][T17431] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.893294][T17431] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.945358][T17431] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.963898][T17431] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.979027][T17458] loop5: detected capacity change from 0 to 512 [ 678.986285][T17459] loop1: detected capacity change from 0 to 256 [ 678.995417][T17459] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 679.032393][T17458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.052225][T17459] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 679.081082][T17458] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.089001][T17431] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.105258][T17458] EXT4-fs (loop5): shut down requested (0) [ 679.109800][T17431] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.167175][T16452] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.721741][T17482] loop7: detected capacity change from 0 to 512 [ 679.754430][T17482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.781804][T17482] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.798599][T17482] EXT4-fs (loop7): shut down requested (0) [ 679.825329][T15551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.232646][ T28] kauditd_printk_skb: 376 callbacks suppressed [ 681.232665][ T28] audit: type=1400 audit(2000001769.098:22796): avc: denied { write } for pid=17541 comm="syz.5.16863" path="socket:[151586]" dev="sockfs" ino=151586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 681.286746][ T28] audit: type=1400 audit(2000001769.138:22797): avc: denied { read } for pid=17541 comm="syz.5.16863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 681.367112][T17557] loop5: detected capacity change from 0 to 256 [ 681.374367][T17557] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 681.388712][T17557] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 681.541927][T17573] loop5: detected capacity change from 0 to 128 [ 681.653751][T17577] loop1: detected capacity change from 0 to 1024 [ 681.680406][T17577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 681.691734][T17577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.710677][ T28] audit: type=1400 audit(2000001769.568:22798): avc: denied { add_name } for pid=17576 comm="syz.1.16877" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 681.741175][ T28] audit: type=1400 audit(2000001769.568:22799): avc: denied { remove_name } for pid=17576 comm="syz.1.16877" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 681.764858][ T28] audit: type=1400 audit(2000001769.568:22800): avc: denied { rename } for pid=17576 comm="syz.1.16877" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 681.787682][T14883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.787947][ T28] audit: type=1400 audit(2000001769.568:22801): avc: denied { reparent } for pid=17576 comm="syz.1.16877" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 681.819534][ T28] audit: type=1400 audit(2000001769.568:22802): avc: denied { rmdir } for pid=17576 comm="syz.1.16877" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 682.120716][T17597] loop7: detected capacity change from 0 to 256 [ 682.127465][T17597] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 682.150971][T17597] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 682.315169][T17618] loop7: detected capacity change from 0 to 512 [ 682.350905][T17618] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.367124][T17618] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.379525][T17623] netlink: 'syz.8.16897': attribute type 1 has an invalid length. [ 682.392261][T17623] netlink: 'syz.8.16897': attribute type 2 has an invalid length. [ 682.470357][T17629] dvmrp0: entered allmulticast mode [ 682.540645][T15551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.583847][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.599783][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.614279][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.622603][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.644018][ T70] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.653810][ T70] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.670468][ T70] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.680592][ T70] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.953866][T17669] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 683.037009][T17685] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.049419][T17685] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.070544][T17690] FAT-fs (loop5): bogus number of FAT sectors [ 683.086834][T17690] FAT-fs (loop5): Can't find a valid FAT filesystem [ 683.103095][T17685] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.114748][T17685] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.171070][T17685] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.191434][T17685] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.251843][T17685] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.261896][T17685] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.642132][T17722] netlink: 'syz.5.16935': attribute type 1 has an invalid length. [ 683.661920][T17722] netlink: 'syz.5.16935': attribute type 2 has an invalid length. [ 683.686611][T17727] dvmrp0: entered allmulticast mode [ 683.804412][ T1641] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.854290][ T1641] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.924614][ T1641] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.963410][T17744] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 684.021863][ T1641] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.108532][T17766] set_capacity_and_notify: 1 callbacks suppressed [ 684.108554][T17766] loop5: detected capacity change from 0 to 512 [ 684.192079][T17766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.243182][T17766] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.299117][T17745] chnl_net:caif_netlink_parms(): no params data found [ 684.334429][ T1641] bridge_slave_1: left allmulticast mode [ 684.340388][ T1641] bridge_slave_1: left promiscuous mode [ 684.346147][ T1641] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.355693][T16452] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.396393][ T1641] bridge_slave_0: left allmulticast mode [ 684.411400][ T1641] bridge_slave_0: left promiscuous mode [ 684.417872][ T1641] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.526518][ T1641] bond1 (unregistering): (slave gretap1): Releasing active interface [ 684.543045][ T1641] dvmrp0 (unregistering): left allmulticast mode [ 684.582150][ T1641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.592340][ T1641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.602938][ T1641] bond0 (unregistering): Released all slaves [ 684.611321][ T1641] bond1 (unregistering): Released all slaves [ 684.629508][T17784] netlink: 'syz.7.16953': attribute type 1 has an invalid length. [ 684.660253][T17784] netlink: 'syz.7.16953': attribute type 2 has an invalid length. [ 684.681072][T17788] dvmrp0: entered allmulticast mode [ 684.712567][ T1641] hsr_slave_0: left promiscuous mode [ 684.721202][T17796] loop7: detected capacity change from 0 to 256 [ 684.727575][ T1641] hsr_slave_1: left promiscuous mode [ 684.728295][T17796] FAT-fs (loop7): bogus number of FAT sectors [ 684.736545][T17798] loop5: detected capacity change from 0 to 256 [ 684.740219][T17796] FAT-fs (loop7): Can't find a valid FAT filesystem [ 684.746004][ T1641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.759795][ T1641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.774829][T17798] SELinux: failed to load policy [ 684.791674][ T1641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.810551][ T1641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.851122][ T1641] veth1_macvtap: left promiscuous mode [ 684.866880][ T1641] veth0_macvtap: left promiscuous mode [ 684.872847][ T1641] veth1_vlan: left promiscuous mode [ 684.878156][ T1641] veth0_vlan: left promiscuous mode [ 684.948774][T17812] loop7: detected capacity change from 0 to 512 [ 684.958292][T17812] EXT4-fs: Ignoring removed i_version option [ 684.969907][T17812] EXT4-fs: Ignoring removed bh option [ 685.007495][T17812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.036078][T17812] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 685.046838][ T1641] team0 (unregistering): Port device team_slave_1 removed [ 685.057264][ T1641] team0 (unregistering): Port device team_slave_0 removed [ 685.076825][ T28] audit: type=1400 audit(2000001772.938:22803): avc: denied { ioctl } for pid=17811 comm="syz.7.16966" path="/115/bus/)" dev="loop7" ino=19 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 685.109673][T15551] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.157629][T17745] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.180325][T17745] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.226362][T17745] bridge_slave_0: entered allmulticast mode [ 685.238528][T17745] bridge_slave_0: entered promiscuous mode [ 685.261534][T17745] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.283458][T17745] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.291276][T17745] bridge_slave_1: entered allmulticast mode [ 685.297851][T17745] bridge_slave_1: entered promiscuous mode [ 685.318907][T17745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.330528][T17745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.357126][T17745] team0: Port device team_slave_0 added [ 685.375189][T17745] team0: Port device team_slave_1 added [ 685.395656][T17745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.403357][T17745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.430515][T17745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.447442][T17745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.459827][T17745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.486422][T17745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.515336][T17745] hsr_slave_0: entered promiscuous mode [ 685.521782][T17745] hsr_slave_1: entered promiscuous mode [ 685.527541][T17745] debugfs: 'hsr0' already exists in 'hsr' [ 685.533349][T17745] Cannot create hsr debugfs directory [ 685.819405][T17745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 685.828679][T17745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 685.837823][T17745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 685.847206][T17745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 685.875262][T17745] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.882390][T17745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.889738][T17745] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.896816][T17745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.928273][T17745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.939889][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.948847][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.962795][T17745] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.973459][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.980564][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.999468][ T2010] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.006559][ T2010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.088843][T17745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.171555][T17745] veth0_vlan: entered promiscuous mode [ 686.179552][T17745] veth1_vlan: entered promiscuous mode [ 686.195332][T17745] veth0_macvtap: entered promiscuous mode [ 686.203724][T17745] veth1_macvtap: entered promiscuous mode [ 686.214391][T17745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.226071][T17745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.236880][ T1641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.247311][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.257142][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.266450][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.614896][ T1641] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.623415][ T1641] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.634758][ T70] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.644248][ T70] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.656045][ T70] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.664375][ T70] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.675670][ T70] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.684425][ T70] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.722232][T17955] netlink: 'syz.3.16970': attribute type 1 has an invalid length. [ 686.730407][T17955] netlink: 'syz.3.16970': attribute type 2 has an invalid length. [ 687.065265][T17979] netlink: 'syz.8.16986': attribute type 12 has an invalid length. [ 687.114335][T17979] netlink: 'syz.8.16986': attribute type 29 has an invalid length. [ 687.152821][T17979] __nla_validate_parse: 6 callbacks suppressed [ 687.152841][T17979] netlink: 148 bytes leftover after parsing attributes in process `syz.8.16986'. [ 687.248706][ T1641] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.269115][ T1641] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.366757][ T1641] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.387567][ T1641] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.423590][T18001] loop3: detected capacity change from 0 to 1024 [ 687.443895][ T1641] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.452578][T18001] EXT4-fs: Ignoring removed orlov option [ 687.472252][ T1641] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.513368][T18001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.675245][ T1641] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.686159][T15666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.695773][ T1641] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.783406][T17984] chnl_net:caif_netlink_parms(): no params data found [ 687.858555][T17984] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.865907][T17984] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.867376][T18021] xt_hashlimit: size too large, truncated to 1048576 [ 687.873175][T17984] bridge_slave_0: entered allmulticast mode [ 687.886458][T17984] bridge_slave_0: entered promiscuous mode [ 687.902204][T17984] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.909426][T18023] loop1: detected capacity change from 0 to 256 [ 687.916152][T17984] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.923466][T17984] bridge_slave_1: entered allmulticast mode [ 687.930370][T17984] bridge_slave_1: entered promiscuous mode [ 687.965092][T18023] SELinux: failed to load policy [ 688.055479][T17984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.065060][ T28] audit: type=1400 audit(2000001775.918:22804): avc: denied { read } for pid=18027 comm="syz.1.17001" path="socket:[152550]" dev="sockfs" ino=152550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 688.090062][T17984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.120019][T18028] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 688.263202][T17984] team0: Port device team_slave_0 added [ 688.289783][T17984] team0: Port device team_slave_1 added [ 688.305614][ T1641] bridge_slave_1: left allmulticast mode [ 688.312267][ T1641] bridge_slave_1: left promiscuous mode [ 688.318079][ T1641] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.326380][ T1641] bridge_slave_0: left allmulticast mode [ 688.346816][ T1641] bridge_slave_0: left promiscuous mode [ 688.355224][ T1641] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.506751][ T1641] dvmrp0 (unregistering): left allmulticast mode [ 688.562726][ T1641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.573988][ T1641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.584583][ T1641] bond0 (unregistering): Released all slaves [ 688.661692][ T1641] hsr_slave_0: left promiscuous mode [ 688.685305][ T1641] hsr_slave_1: left promiscuous mode [ 688.703887][ T1641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.911898][ T1641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.934927][ T1641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.953816][ T1641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.986661][ T1641] veth1_macvtap: left promiscuous mode [ 689.006572][ T1641] veth0_macvtap: left promiscuous mode [ 689.019324][ T28] audit: type=1400 audit(2000001776.878:22805): avc: denied { getopt } for pid=18069 comm="syz.5.17009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 689.024117][ T1641] veth1_vlan: left promiscuous mode [ 689.090119][ T1641] veth0_vlan: left promiscuous mode [ 689.144856][T18058] loop3: detected capacity change from 0 to 32768 [ 689.193166][T10312] loop3: p1 p3 < > [ 689.201270][T18058] loop3: p1 p3 < > [ 689.290274][ T1641] team0 (unregistering): Port device team_slave_1 removed [ 689.300852][ T1641] team0 (unregistering): Port device team_slave_0 removed [ 689.311429][ T460] udevd[460]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 689.330650][T10312] udevd[10312]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 689.372041][T10312] udevd[10312]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 689.383283][ T1037] udevd[1037]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 689.404705][T17984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.415887][T17984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.442957][T17984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.474704][T17984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.492518][T18094] loop3: detected capacity change from 0 to 256 [ 689.499010][T17984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.526023][T18094] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 689.530213][T17984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.563474][T18094] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 689.610567][T17984] hsr_slave_0: entered promiscuous mode [ 689.616719][T17984] hsr_slave_1: entered promiscuous mode [ 689.622792][T17984] debugfs: 'hsr0' already exists in 'hsr' [ 689.628645][T17984] Cannot create hsr debugfs directory [ 689.726748][T17984] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 689.737808][T17984] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.814772][T17984] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 689.830177][T18046] uprobe: syz.8.17005:18046 failed to unregister, leaking uprobe [ 689.830704][T17984] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.854998][ T1641] IPVS: stop unused estimator thread 0... [ 689.894644][T17984] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 689.907585][T17984] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.988214][T17984] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 690.000056][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17025'. [ 690.000111][T17984] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.184624][T17984] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 690.222350][T17984] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 690.254382][ T28] audit: type=1326 audit(2000001778.108:22806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.1.17040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feffbc819 code=0x7ffc0000 [ 690.300685][T17984] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 690.308543][ T28] audit: type=1326 audit(2000001778.108:22807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.1.17040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feffbc819 code=0x7ffc0000 [ 690.357152][ T28] audit: type=1326 audit(2000001778.148:22808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.1.17040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feffbc819 code=0x7ffc0000 [ 690.386443][T17984] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 690.400168][ T28] audit: type=1326 audit(2000001778.148:22809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.1.17040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feffbc819 code=0x7ffc0000 [ 690.460769][ T28] audit: type=1326 audit(2000001778.148:22810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.1.17040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2feffbc819 code=0x7ffc0000 [ 690.510082][ T28] audit: type=1326 audit(2000001778.148:22811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.1.17040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feffbc819 code=0x7ffc0000 [ 690.675000][ T28] audit: type=1326 audit(2000001778.148:22812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.1.17040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feffbc819 code=0x7ffc0000 [ 690.692554][T17984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.718524][T17984] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.730139][ T28] audit: type=1326 audit(2000001778.148:22813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18154 comm="syz.1.17040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feffbc819 code=0x7ffc0000 [ 690.769067][ T2015] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.776198][ T2015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.806871][ T2015] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.814122][ T2015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.951747][T18196] loop5: detected capacity change from 0 to 8192 [ 691.004629][T17984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.239347][T17984] veth0_vlan: entered promiscuous mode [ 691.252988][T17984] veth1_vlan: entered promiscuous mode [ 691.269613][T17984] veth0_macvtap: entered promiscuous mode [ 691.278085][T17984] veth1_macvtap: entered promiscuous mode [ 691.290201][T17984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.301622][T17984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.317778][ T70] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.327210][ T70] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.342283][ T70] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.351593][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.407831][T18236] loop6: detected capacity change from 0 to 512 [ 691.426763][T18236] EXT4-fs: Ignoring removed oldalloc option [ 691.456479][T18236] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.16989: invalid indirect mapped block 4294967295 (level 1) [ 691.491860][T18236] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 691.492049][T18236] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.16989: invalid indirect mapped block 4294967295 (level 1) [ 691.501286][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 691.501310][ C0] EXT4-fs (loop6): initial error at time 2000001779: ext4_free_branches:1023: inode 11 [ 691.501359][ C0] EXT4-fs (loop6): last error at time 2000001779: ext4_free_branches:1023: inode 11 [ 691.548708][T18236] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 691.549305][T18236] EXT4-fs (loop6): 2 truncates cleaned up [ 691.565324][T18236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.764186][T17984] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.052014][T18273] loop1: detected capacity change from 0 to 8192 [ 692.160492][T18286] loop3: detected capacity change from 0 to 512 [ 692.171890][T18286] EXT4-fs: Ignoring removed oldalloc option [ 692.208394][T18286] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.17059: invalid indirect mapped block 4294967295 (level 1) [ 692.263066][T18286] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 692.263266][T18286] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.17059: invalid indirect mapped block 4294967295 (level 1) [ 692.272473][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 692.272496][ C1] EXT4-fs (loop3): initial error at time 2000001780: ext4_free_branches:1023: inode 11 [ 692.272539][ C1] EXT4-fs (loop3): last error at time 2000001780: ext4_free_branches:1023: inode 11 [ 692.340989][T18286] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 692.341428][T18286] EXT4-fs (loop3): 2 truncates cleaned up [ 692.360622][T18286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.702057][T15666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.965111][T18298] futex_wake_op: syz.1.17073 tries to shift op by 32; fix this program [ 693.185183][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 693.185204][ T28] audit: type=1326 audit(2000001781.048:22859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18321 comm="syz.6.17069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 693.254261][ T28] audit: type=1326 audit(2000001781.048:22860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18321 comm="syz.6.17069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 693.278437][T18320] loop3: detected capacity change from 0 to 8192 [ 693.281832][ T28] audit: type=1326 audit(2000001781.048:22861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18321 comm="syz.6.17069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 693.309806][ T28] audit: type=1326 audit(2000001781.048:22862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18321 comm="syz.6.17069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 693.333834][ T28] audit: type=1326 audit(2000001781.058:22863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18321 comm="syz.6.17069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 693.366621][ T28] audit: type=1326 audit(2000001781.078:22864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18321 comm="syz.6.17069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 693.391744][ T28] audit: type=1326 audit(2000001781.088:22865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18321 comm="syz.6.17069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 693.416606][ T28] audit: type=1326 audit(2000001781.108:22866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18321 comm="syz.6.17069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 693.450193][ T28] audit: type=1326 audit(2000001781.108:22867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18321 comm="syz.6.17069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 693.450261][ T28] audit: type=1326 audit(2000001781.108:22868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18321 comm="syz.6.17069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 693.475830][T18328] loop1: detected capacity change from 0 to 512 [ 693.476241][T18328] EXT4-fs: Ignoring removed oldalloc option [ 693.515777][T18328] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.17075: invalid indirect mapped block 4294967295 (level 1) [ 693.515816][T18328] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 693.515989][T18328] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.17075: invalid indirect mapped block 4294967295 (level 1) [ 693.516023][T18328] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 693.516226][T18328] EXT4-fs (loop1): 2 truncates cleaned up [ 693.516714][T18328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.141822][T17745] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.351954][T18343] futex_wake_op: syz.3.17080 tries to shift op by 32; fix this program [ 694.498912][T18364] loop6: detected capacity change from 0 to 8192 [ 694.773505][T18248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.848204][T18380] loop5: detected capacity change from 0 to 512 [ 694.865559][T18380] EXT4-fs: Ignoring removed oldalloc option [ 694.875178][T18380] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.17092: invalid block [ 694.887742][T18380] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 694.890032][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 694.905710][ C0] EXT4-fs (loop5): initial error at time 2000001782: ext4_get_branch:178: inode 11: block 4294967295 [ 694.916637][ C0] EXT4-fs (loop5): last error at time 2000001782: ext4_get_branch:178: inode 11: block 4294967295 [ 694.920529][T18380] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.17092: invalid indirect mapped block 4294967295 (level 1) [ 694.951693][T18380] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 694.953994][T18380] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.17092: invalid indirect mapped block 4294967295 (level 1) [ 694.990257][T18380] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 694.990753][T18380] EXT4-fs (loop5): 2 truncates cleaned up [ 695.034677][T18380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.174869][T18397] netlink: 'syz.3.17101': attribute type 14 has an invalid length. [ 695.195755][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17101'. [ 695.215299][T18397] netlink: 'syz.3.17101': attribute type 14 has an invalid length. [ 695.223620][T18397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17101'. [ 695.678440][T16452] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.982305][T18447] loop1: detected capacity change from 0 to 2048 [ 696.014253][T18447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.093312][T18447] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.17118: bg 0: block 234: padding at end of block bitmap is not set [ 696.108166][T18447] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1082 with error 28 [ 696.121276][T18447] EXT4-fs (loop1): This should not happen!! Data will be lost [ 696.121276][T18447] [ 696.131591][T18447] EXT4-fs (loop1): Total free blocks count 0 [ 696.137670][T18447] EXT4-fs (loop1): Free/Dirty block details [ 696.148602][T18447] EXT4-fs (loop1): free_blocks=0 [ 696.155034][T18447] EXT4-fs (loop1): dirty_blocks=1088 [ 696.160481][T18447] EXT4-fs (loop1): Block reservation details [ 696.166754][T18447] EXT4-fs (loop1): i_reserved_data_blocks=68 [ 696.175665][T18460] netlink: 'syz.8.17121': attribute type 1 has an invalid length. [ 696.192730][T18460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.220964][T18460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.228247][T18460] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 696.254633][T18460] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 696.306203][T17745] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.507391][T18472] Invalid option length (63724) for dns_resolver key [ 698.403500][T18403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.629531][T18506] Invalid option length (63724) for dns_resolver key [ 698.708064][T18517] loop3: detected capacity change from 0 to 2048 [ 698.743120][T18517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.918192][T18517] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.17146: bg 0: block 234: padding at end of block bitmap is not set [ 698.974136][T18517] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 588 with error 28 [ 698.999103][T18517] EXT4-fs (loop3): This should not happen!! Data will be lost [ 698.999103][T18517] [ 699.009019][T18517] EXT4-fs (loop3): Total free blocks count 0 [ 699.030116][T18517] EXT4-fs (loop3): Free/Dirty block details [ 699.036077][T18517] EXT4-fs (loop3): free_blocks=0 [ 699.041500][T18517] EXT4-fs (loop3): dirty_blocks=592 [ 699.046954][T18517] EXT4-fs (loop3): Block reservation details [ 699.053268][T18517] EXT4-fs (loop3): i_reserved_data_blocks=37 [ 699.182322][T15666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.034612][ T50] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.080940][ T50] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.171083][ T50] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.203019][T18605] chnl_net:caif_netlink_parms(): no params data found [ 712.265741][ T50] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.347947][T18605] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.355181][T18605] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.362538][T18605] bridge_slave_0: entered allmulticast mode [ 712.369267][T18605] bridge_slave_0: entered promiscuous mode [ 712.376375][T18605] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.383596][T18605] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.391070][T18605] bridge_slave_1: entered allmulticast mode [ 712.403643][T18620] Invalid option length (63724) for dns_resolver key [ 712.430337][T18605] bridge_slave_1: entered promiscuous mode [ 712.504549][T18605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.515544][T18605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.613303][T18605] team0: Port device team_slave_0 added [ 712.622294][ T50] bridge_slave_1: left allmulticast mode [ 712.628038][ T50] bridge_slave_1: left promiscuous mode [ 712.667737][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.712081][ T50] bridge_slave_0: left allmulticast mode [ 712.717770][ T50] bridge_slave_0: left promiscuous mode [ 712.750282][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.825324][T18651] loop6: detected capacity change from 0 to 2048 [ 712.882683][T18651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.955927][ T50] dvmrp0 (unregistering): left allmulticast mode [ 712.979234][T18651] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.17161: bg 0: block 234: padding at end of block bitmap is not set [ 713.001947][T18651] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1070 with error 28 [ 713.014625][T18651] EXT4-fs (loop6): This should not happen!! Data will be lost [ 713.014625][T18651] [ 713.024555][T18651] EXT4-fs (loop6): Total free blocks count 0 [ 713.031448][T18651] EXT4-fs (loop6): Free/Dirty block details [ 713.037405][T18651] EXT4-fs (loop6): free_blocks=0 [ 713.043053][T18651] EXT4-fs (loop6): dirty_blocks=1072 [ 713.043308][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.048437][T18651] EXT4-fs (loop6): Block reservation details [ 713.063368][T18651] EXT4-fs (loop6): i_reserved_data_blocks=67 [ 713.082767][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.101315][ T50] bond0 (unregistering): Released all slaves [ 713.112201][T18605] team0: Port device team_slave_1 added [ 713.165617][ T50] hsr_slave_0: left promiscuous mode [ 713.177905][ T50] hsr_slave_1: left promiscuous mode [ 713.184864][T17984] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.184921][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.204129][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.211962][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.219351][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.231570][ T50] veth1_macvtap: left promiscuous mode [ 713.237081][ T50] veth0_macvtap: left promiscuous mode [ 713.242852][ T50] veth1_vlan: left promiscuous mode [ 713.248114][ T50] veth0_vlan: left promiscuous mode [ 713.350239][ T50] team0 (unregistering): Port device team_slave_1 removed [ 713.361144][ T50] team0 (unregistering): Port device team_slave_0 removed [ 713.412448][T18605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.419413][T18605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.459687][T18605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.480771][T18605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.487743][T18605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.514221][T18605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.580454][T18605] hsr_slave_0: entered promiscuous mode [ 713.587160][T18605] hsr_slave_1: entered promiscuous mode [ 713.600485][T18605] debugfs: 'hsr0' already exists in 'hsr' [ 713.606241][T18605] Cannot create hsr debugfs directory [ 713.720550][T18647] chnl_net:caif_netlink_parms(): no params data found [ 713.790948][T18605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.820489][T18605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.867334][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.880756][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.887998][T18647] bridge_slave_0: entered allmulticast mode [ 713.910598][T18647] bridge_slave_0: entered promiscuous mode [ 713.922919][T18605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.940016][T18605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.970727][T18647] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.977830][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.985975][T18647] bridge_slave_1: entered allmulticast mode [ 713.992726][T18647] bridge_slave_1: entered promiscuous mode [ 714.007627][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.023306][T18605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.033600][T18605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.060045][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.081566][T18647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.102929][T18647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.131229][T18605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.143501][T18605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.183540][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.221193][T18647] team0: Port device team_slave_0 added [ 714.233131][T18647] team0: Port device team_slave_1 added [ 714.268602][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.300603][T18647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.307835][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.335040][T18647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.347726][T18647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.354807][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.380906][T18647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.425203][T18647] hsr_slave_0: entered promiscuous mode [ 714.431777][T18647] hsr_slave_1: entered promiscuous mode [ 714.437791][T18647] debugfs: 'hsr0' already exists in 'hsr' [ 714.444128][T18647] Cannot create hsr debugfs directory [ 714.476655][T18605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 714.504573][T18605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 714.518520][T18605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 714.541895][T18605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 714.636528][ T50] bridge_slave_1: left allmulticast mode [ 714.642995][ T50] bridge_slave_1: left promiscuous mode [ 714.648679][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.660825][ T50] bridge_slave_0: left allmulticast mode [ 714.666585][ T50] bridge_slave_0: left promiscuous mode [ 714.690153][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.813413][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.840328][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.850173][ T50] bond0 (unregistering): Released all slaves [ 714.900851][ T50] hsr_slave_0: left promiscuous mode [ 714.906709][ T50] hsr_slave_1: left promiscuous mode [ 714.912855][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.920339][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.927770][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.935270][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.945219][ T50] veth1_macvtap: left promiscuous mode [ 714.950778][ T50] veth0_macvtap: left promiscuous mode [ 714.956283][ T50] veth1_vlan: left promiscuous mode [ 714.961701][ T50] veth0_vlan: left promiscuous mode [ 715.026524][ T50] team0 (unregistering): Port device team_slave_1 removed [ 715.035953][ T50] team0 (unregistering): Port device team_slave_0 removed [ 715.080314][T18605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.092710][T18605] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.114368][T18605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 715.124893][T18605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.137473][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.144581][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.162396][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.169605][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.272578][T18605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.321290][T18743] chnl_net:caif_netlink_parms(): no params data found [ 715.424031][T18743] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.431803][T18743] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.439034][T18743] bridge_slave_0: entered allmulticast mode [ 715.446500][T18743] bridge_slave_0: entered promiscuous mode [ 715.454583][T18605] veth0_vlan: entered promiscuous mode [ 715.461593][T18743] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.468706][T18743] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.476379][T18743] bridge_slave_1: entered allmulticast mode [ 715.483858][T18743] bridge_slave_1: entered promiscuous mode [ 715.497162][T18605] veth1_vlan: entered promiscuous mode [ 715.519696][T18743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.531004][T18743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.552414][T18743] team0: Port device team_slave_0 added [ 715.559038][T18743] team0: Port device team_slave_1 added [ 715.576299][T18743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.583287][T18743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.609657][T18743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.621093][T18743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.628063][T18743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.654196][T18743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.691705][T18605] veth0_macvtap: entered promiscuous mode [ 715.700874][T18743] hsr_slave_0: entered promiscuous mode [ 715.706824][T18743] hsr_slave_1: entered promiscuous mode [ 715.712995][T18743] debugfs: 'hsr0' already exists in 'hsr' [ 715.718724][T18743] Cannot create hsr debugfs directory [ 715.731870][T18605] veth1_macvtap: entered promiscuous mode [ 715.773730][T18605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.791304][T18605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.805883][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.815107][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.831159][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.847242][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.904231][T18647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 715.926842][T18647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 715.953332][T18647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 715.962548][T18647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 715.989314][T18815] loop6: detected capacity change from 0 to 2048 [ 716.006929][T18809] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 4 prio class 2 [ 716.017428][T18815] /dev/loop6: Can't open blockdev [ 716.064566][T18647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.082437][T18647] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.092505][ T2015] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.099581][ T2015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.113070][ T1271] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.120201][ T1271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.166119][T18647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 716.194395][T18743] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 716.220593][T18743] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 716.233749][T18743] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 716.246910][T18743] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 716.275834][T18647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.321251][T18743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.339469][T18743] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.355811][ T1271] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.363112][ T1271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.373636][ T1271] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.380899][ T1271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.460118][T18647] veth0_vlan: entered promiscuous mode [ 716.481199][T18647] veth1_vlan: entered promiscuous mode [ 716.511216][T18743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.538463][T18647] veth0_macvtap: entered promiscuous mode [ 716.547105][T18647] veth1_macvtap: entered promiscuous mode [ 716.575465][T18647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.589613][T18647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.620038][ T1271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.628793][ T1271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.639103][ T1271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.655492][ T1271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.724814][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 716.724832][ T28] audit: type=1326 audit(2000001804.588:22890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18902 comm="syz.6.17177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 716.790223][ T28] audit: type=1326 audit(2000001804.588:22891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18902 comm="syz.6.17177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 716.835603][T18743] veth0_vlan: entered promiscuous mode [ 716.844832][T18743] veth1_vlan: entered promiscuous mode [ 716.893333][ T28] audit: type=1326 audit(2000001804.588:22892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18902 comm="syz.6.17177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 716.931327][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17181'. [ 716.944403][T18903] ================================================================== [ 716.952690][T18903] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 716.961316][T18903] [ 716.963669][T18903] write to 0xffff88810b3f36a8 of 8 bytes by task 18911 on cpu 0: [ 716.971390][T18903] shmem_file_splice_read+0x470/0x600 [ 716.976782][T18903] splice_direct_to_actor+0x26e/0x670 [ 716.982163][T18903] do_splice_direct+0x119/0x1a0 [ 716.987104][T18903] do_sendfile+0x382/0x650 [ 716.991528][T18903] __x64_sys_sendfile64+0x105/0x150 [ 716.996732][T18903] x64_sys_call+0x2dc4/0x3020 [ 717.001417][T18903] do_syscall_64+0x12c/0x370 [ 717.006017][T18903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.011916][T18903] [ 717.014242][T18903] write to 0xffff88810b3f36a8 of 8 bytes by task 18903 on cpu 1: [ 717.021968][T18903] shmem_file_splice_read+0x470/0x600 [ 717.027367][T18903] splice_direct_to_actor+0x26e/0x670 [ 717.032838][T18903] do_splice_direct+0x119/0x1a0 [ 717.037707][T18903] do_sendfile+0x382/0x650 [ 717.042147][T18903] __x64_sys_sendfile64+0x105/0x150 [ 717.047363][T18903] x64_sys_call+0x2dc4/0x3020 [ 717.052053][T18903] do_syscall_64+0x12c/0x370 [ 717.056661][T18903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.062651][T18903] [ 717.064976][T18903] value changed: 0x00000000000017cf -> 0x00000000000017d4 [ 717.072078][T18903] [ 717.074401][T18903] Reported by Kernel Concurrency Sanitizer on: [ 717.080567][T18903] CPU: 1 UID: 0 PID: 18903 Comm: syz.8.17178 Tainted: G W syzkaller #0 PREEMPT(full) [ 717.091604][T18903] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 717.095425][T18903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.105494][T18903] ================================================================== [ 717.117836][ T28] audit: type=1326 audit(2000001804.618:22893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18902 comm="syz.6.17177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 717.160142][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17181'. [ 717.177213][T18743] veth0_macvtap: entered promiscuous mode [ 717.190324][ T28] audit: type=1326 audit(2000001804.618:22894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18902 comm="syz.6.17177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 717.192808][T18743] veth1_macvtap: entered promiscuous mode [ 717.254492][ T28] audit: type=1326 audit(2000001804.618:22895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18902 comm="syz.6.17177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 717.293004][ T2015] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.300088][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17181'. [ 717.311127][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17181'. [ 717.337528][ T2015] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.383854][ T2015] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.400063][ T28] audit: type=1326 audit(2000001804.618:22896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18902 comm="syz.6.17177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 717.438644][ T28] audit: type=1326 audit(2000001804.628:22897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18902 comm="syz.6.17177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 717.480145][ T2015] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.540958][ T28] audit: type=1326 audit(2000001804.628:22898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18902 comm="syz.6.17177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 717.576624][ T28] audit: type=1326 audit(2000001804.628:22899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18902 comm="syz.6.17177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8d5c819 code=0x7ffc0000 [ 717.803559][ T70] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.814374][ T70] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.883095][ T70] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.893610][ T70] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.962882][ T70] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.973320][ T70] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.033581][ T70] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.046136][ T70] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.143333][ T70] bridge_slave_1: left allmulticast mode [ 718.149291][ T70] bridge_slave_1: left promiscuous mode [ 718.156142][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.164693][ T70] bridge_slave_0: left allmulticast mode [ 718.170579][ T70] bridge_slave_0: left promiscuous mode [ 718.176272][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.326270][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.341456][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.351475][ T70] bond0 (unregistering): Released all slaves [ 718.424473][ T70] hsr_slave_0: left promiscuous mode [ 718.431294][ T70] hsr_slave_1: left promiscuous mode [ 718.437038][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.445447][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.453219][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.460713][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.473133][ T70] veth1_macvtap: left promiscuous mode [ 718.478704][ T70] veth0_macvtap: left promiscuous mode [ 718.484563][ T70] veth1_vlan: left promiscuous mode [ 718.489817][ T70] veth0_vlan: left promiscuous mode [ 718.605189][ T70] team0 (unregistering): Port device team_slave_1 removed [ 718.615261][ T70] team0 (unregistering): Port device team_slave_0 removed [ 719.825430][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.879690][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.943161][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.013610][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.099485][ T70] bridge_slave_1: left allmulticast mode [ 720.105954][ T70] bridge_slave_1: left promiscuous mode [ 720.112272][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.120688][ T70] bridge_slave_0: left allmulticast mode [ 720.126356][ T70] bridge_slave_0: left promiscuous mode [ 720.132323][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.140931][ T70] bridge_slave_1: left allmulticast mode [ 720.146588][ T70] bridge_slave_1: left promiscuous mode [ 720.153093][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.161005][ T70] bridge_slave_0: left allmulticast mode [ 720.166679][ T70] bridge_slave_0: left promiscuous mode [ 720.172699][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.251987][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.261885][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.271801][ T70] bond0 (unregistering): Released all slaves [ 720.342276][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.352186][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.361796][ T70] bond0 (unregistering): Released all slaves [ 720.400798][ T70] hsr_slave_0: left promiscuous mode [ 720.406487][ T70] hsr_slave_1: left promiscuous mode [ 720.412172][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.419640][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.432013][ T70] hsr_slave_0: left promiscuous mode [ 720.437817][ T70] hsr_slave_1: left promiscuous mode [ 720.443565][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.451479][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.459145][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.467128][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.482913][ T70] veth1_macvtap: left promiscuous mode [ 720.488423][ T70] veth0_macvtap: left promiscuous mode [ 720.494166][ T70] veth1_vlan: left promiscuous mode [ 720.499434][ T70] veth0_vlan: left promiscuous mode [ 720.505081][ T70] veth1_macvtap: left promiscuous mode [ 720.510608][ T70] veth0_macvtap: left promiscuous mode [ 720.516102][ T70] veth1_vlan: left promiscuous mode [ 720.521409][ T70] veth0_vlan: left promiscuous mode [ 720.613692][ T70] team0 (unregistering): Port device team_slave_1 removed [ 720.624591][ T70] team0 (unregistering): Port device team_slave_0 removed [ 720.676681][ T70] team0 (unregistering): Port device team_slave_1 removed [ 720.686676][ T70] team0 (unregistering): Port device team_slave_0 removed [ 721.194228][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.245256][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.292851][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.348628][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.435351][ T70] bridge_slave_1: left allmulticast mode [ 721.441226][ T70] bridge_slave_1: left promiscuous mode [ 721.446866][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.455031][ T70] bridge_slave_0: left allmulticast mode [ 721.460799][ T70] bridge_slave_0: left promiscuous mode [ 721.466468][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.533252][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.543025][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.552429][ T70] bond0 (unregistering): Released all slaves [ 721.584695][ T70] hsr_slave_0: left promiscuous mode [ 721.591462][ T70] hsr_slave_1: left promiscuous mode [ 721.597207][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.604951][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.612621][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.620266][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.632260][ T70] veth1_macvtap: left promiscuous mode [ 721.637768][ T70] veth0_macvtap: left promiscuous mode [ 721.644677][ T70] veth1_vlan: left promiscuous mode [ 721.649935][ T70] veth0_vlan: left promiscuous mode [ 721.718313][ T70] team0 (unregistering): Port device team_slave_1 removed [ 721.729163][ T70] team0 (unregistering): Port device team_slave_0 removed